{"report_id":"6f632879-8644-4c89-bb16-253978a77b0e","version":6,"status":"done","tags":[],"date":"2026-01-08T23:26:52Z","url":{"schema":"http","addr":"delta.filenetwork.vip/file/Delta-2.702.622-02.apk","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"172.66.154.87","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"delta.filenetwork.vip/android.html","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"title":"Android Updates Delta","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"delta.filenetwork.vip/file/Delta-2.702.622-02.apk","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"172.66.154.87","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-12T23:26:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":17}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"zt.peeredupseize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"zt.peeredupseize.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"zt.peeredupseize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"tsiwoulukdlike.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"dv.otitishanded.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"dollishreman.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"dollishreman.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"dollishreman.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"acf60dec54.f435ee855c.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"wh.balzadicyema.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"d1zhmd1pxxxajf.cloudfront.net","ip":{"addr":"54.192.209.162","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-11-30T01:33:59.087014Z","last_seen":"2026-01-06T22:47:04.624871Z","alert_count":0,"request_count":1,"received_data":342570,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-01-04T22:23:09.64902Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-04T22:27:18.120727Z","alert_count":0,"request_count":1,"received_data":24103,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wh.balzadicyema.com","ip":{"addr":"188.42.241.109","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-07-21","domain_rank":0,"first_seen":"2025-11-25T10:25:20.092483Z","last_seen":"2026-01-02T21:43:52.377103Z","alert_count":1,"request_count":1,"received_data":1450,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ukankingwithea.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2026-01-06T04:47:06.569529Z","alert_count":6,"request_count":2,"received_data":1684,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"js.capndr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":156902,"first_seen":"2021-08-30T12:51:01Z","last_seen":"2026-01-08T20:47:22.364994Z","alert_count":1,"request_count":1,"received_data":399,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.cabnnr.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":185771,"first_seen":"2021-08-30T12:50:21Z","last_seen":"2026-01-08T12:58:18.108643Z","alert_count":0,"request_count":1,"received_data":85378,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dollishreman.com","ip":{"addr":"172.241.53.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-11-03","domain_rank":0,"first_seen":"2025-11-10T20:05:53.170832Z","last_seen":"2025-11-10T20:05:53.170832Z","alert_count":3,"request_count":1,"received_data":1451,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"a.adspector.io","ip":{"addr":"172.67.161.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-02","domain_rank":213577,"first_seen":"2024-06-28T02:35:48Z","last_seen":"2026-01-08T12:05:08.390168Z","alert_count":0,"request_count":1,"received_data":707,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"acf60dec54.f435ee855c.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2025-12-09","domain_rank":0,"first_seen":"2026-01-08T00:44:52.374712Z","last_seen":"2026-01-08T00:44:52.374712Z","alert_count":1,"request_count":1,"received_data":345,"sent_data":853,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.wpadmngr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-06-02","domain_rank":77954,"first_seen":"2021-06-02T14:43:46Z","last_seen":"2026-01-01T21:00:19.290321Z","alert_count":1,"request_count":1,"received_data":148121,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"na.nawpush.com","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-12-21","domain_rank":175362,"first_seen":"2020-12-23T08:18:12Z","last_seen":"2026-01-01T21:00:20.295982Z","alert_count":1,"request_count":1,"received_data":27404,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"delta.filenetwork.vip","ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-25","domain_rank":0,"first_seen":"2026-01-08T23:26:53.680248Z","last_seen":"2026-01-08T23:26:53.680248Z","alert_count":0,"request_count":18,"received_data":312968,"sent_data":12417,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-01-05T01:33:25.433Z","alert_count":0,"request_count":2,"received_data":815951,"sent_data":834,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-04T22:18:41.67311Z","alert_count":0,"request_count":1,"received_data":440826,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dv.otitishanded.com","ip":{"addr":"172.241.53.157","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":0,"first_seen":"2026-01-08T23:26:53.677282Z","last_seen":"2026-01-08T23:26:53.677282Z","alert_count":1,"request_count":1,"received_data":1450,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ntvpforever.com","ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-18","domain_rank":18811,"first_seen":"2021-11-19T01:49:18Z","last_seen":"2026-01-06T21:59:18.654092Z","alert_count":0,"request_count":2,"received_data":681,"sent_data":1060,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ngseriegentsf.org","ip":{"addr":"3.164.240.17","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-10-06","domain_rank":0,"first_seen":"2026-01-08T14:49:39.16559Z","last_seen":"2026-01-08T14:49:39.16559Z","alert_count":0,"request_count":2,"received_data":7444,"sent_data":2066,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":154722,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2026-01-07T10:37:45.904728Z","alert_count":2,"request_count":2,"received_data":833,"sent_data":1084,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"zt.peeredupseize.com","ip":{"addr":"172.241.53.157","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-18","domain_rank":3017142,"first_seen":"2025-11-03T06:50:41.983327Z","last_seen":"2026-01-06T12:50:45.345861Z","alert_count":3,"request_count":1,"received_data":1450,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-01-05T00:14:18.31671Z","alert_count":0,"request_count":6,"received_data":13856,"sent_data":3808,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"tsiwoulukdlike.org","ip":{"addr":"172.67.217.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-06","domain_rank":0,"first_seen":"2026-01-04T19:34:46.721624Z","last_seen":"2026-01-04T19:34:48.676674Z","alert_count":3,"request_count":3,"received_data":1600,"sent_data":1774,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01903853e3410c57e30e0a7abc3c1f60","sha1":"094aa098801352ae39ce557b293e4eb0fc3eb6d1","sha256":"cf7169f391156797acf11a9da11225701c3ee3c16afebc35eeefa3fb25e8daf3","sha512":"146bd24d76c9a9050a3a68b7a6d85264812fd8b1e41e93c674fd7d80ec01ee246a1302fbb0e37945ec1c53fd67dc86603dea509f5d9464c25e20ece1d3e2ee03","ssdeep":"1536:7aNtpnDTPupIDxZJBpqgiZMZLUyzOBR6mXIEFWDDIYA:709DTP9PpqSL3bmLIE","tlshash":"4b836b843290b4b541e640afa43f430af3392d06b80b9458f16dede67b79e896176f39","size":84990,"data":"","first_seen":"2025-12-18T08:41:29.003596Z","last_seen":"2026-01-19T12:53:12.730062Z","times_seen":453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dv.otitishanded.com/tXUE9NS591Jx/131417","fqdn":"dv.otitishanded.com","domain":"otitishanded.com","tld":"com"},"ip":{"addr":"172.241.53.157","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","size":5,"data":"","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-04-03T18:52:28.676081Z","times_seen":13602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/android.html","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"342121febc03926bc52037c068b9bcb4","sha1":"d81cb6e91df805ddb3ebec60edec8915159b51b8","sha256":"04f7c11e790f1ae5f66d4a4d78cad1d4d9a1595cc7f9d380be3ea174feeee6b7","sha512":"d1ac702b9ce390509113bf3da71df9bea36b62b7b8ad4a40a010f2c664e2e8fc9f919cd8b48233436daa9aa4f33a6b93dbc75860d4681bfebd56e8e5dbf9bbd2","ssdeep":"","tlshash":"3a1100753a2a5534cad5418b317ee7a83e3260657a02a044c26ccc295d1cec714efcbe","size":902,"data":"","first_seen":"2026-01-08T23:27:03.578861Z","last_seen":"2026-01-08T23:27:03.578861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ea538009ff52e805d8baecbb5fdc8ed","sha1":"4ac4142d671b92ab4f31231366f151158e542405","sha256":"70b4fa43491033da5e2b03693e196d2fbf239700fe3451643b7d32534a1bbe19","sha512":"c286e276c1f73e806e1aa6e14ad9de67cf5eda8bd6bcfc4f4e8dfddd14a82fece0f86f32595c158d6779efdcf23a55e0e0adf32d3c34b8d89d35fa5f1ef19988","ssdeep":"192:giSLSxfOxMxscsMr6tjXeCOP5udEWGVNxTKsUygS0kOQ:lSLSxWxa5udEWS/OQ","tlshash":"d522facbbe8871e4025a64e062bbfddd21684d951cb01d0e812359e8be32fddb64dd8d","size":10522,"data":"","first_seen":"2026-01-08T23:27:03.565112Z","last_seen":"2026-01-09T00:19:16.169048Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngseriegentsf.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","fqdn":"ngseriegentsf.org","domain":"ngseriegentsf.org","tld":"org"},"ip":{"addr":"3.164.240.17","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f9c7507f8621f56c439fc1457debaa0","sha1":"22de427756f9706cdf1f12a997ff750bf69fc841","sha256":"85c88c1855fc587d2f79cca589f9bdacea7bb0e971ef229480db7ef81a2f9ad1","sha512":"5d3050358caa46d5e63f8af1582b9695d594ab42d8a134d43840ef7ea9a0cc496aee547e38064ecc8082aacdb54bc55ec04331e7d9c39b30ddf70f0d065daefd","ssdeep":"","tlshash":"aa51218d30f3a0c1c2f36065403bba9afa285aa5874cca14863d93bcbd715d96317f4c","size":3013,"data":"","first_seen":"2026-01-08T23:27:03.580301Z","last_seen":"2026-01-08T23:27:03.580301Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"417ac72457e2f7679844035e09376bad","sha1":"d4b794d8f0862fd49e1ead0d8bc62313c44b32e8","sha256":"ecaf18c5d6c28f2a36c93716c685cdaa5ce8394b39465152b655f8f94deb6be3","sha512":"7b34ed52ab42568c7dec102ddc11ae43c1fa9a50f7ee17aded6ba98828f9e8417a6b3fe593b279dde9dc6fa883f846ec18e086923e7655f15fca8b26af87892d","ssdeep":"","tlshash":"e4d023b52875c93056ec024610b6e3a8267030d477317609c1dccc2b5e25fdb48b15dc","size":217,"data":"","first_seen":"2026-01-08T23:27:03.581758Z","last_seen":"2026-01-08T23:27:03.581758Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T19:31:23.981427Z","times_seen":94257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-03T19:25:40.950326Z","times_seen":330022,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf20c44981795047ce2c610a2100a35a","sha1":"24c225c700d3f4208417651f6779de9758cd90a1","sha256":"0ec0d01651f974e70dc3c7d4cc50599dbd3a818863b7011ef052c3a0641dc161","sha512":"97612ed9de3cfb245c7e6a70420ca817b99f7b6db0dae1395fbc16c1eef8e4cb4ff993954fbddc4917563840baeef269a9edea324b06e0131fc2e2e833266e7a","ssdeep":"1536:O18MdnC5OPz8QP9r2RcZSgtK8sBggHhO12FoX50FtQySd8uj6DzKEVKf7lbe0etc:mFSGSgtqZXqd8uODG0K5y0etsz","tlshash":"c8e34adcb2d2b07407e75099d83f1206b73a1a16b80c9058f6a6e9c17878ddb5237f7a","size":147733,"data":"","first_seen":"2025-12-24T08:41:20.196676Z","last_seen":"2026-01-15T08:09:34.935655Z","times_seen":438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YCFNYQXJVZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c66910f44f372eac1a9cc23672d07321","sha1":"75e67eef51edc903a46e47ca59aed8a3ae4c5c58","sha256":"66480e82c6b303ce0cea4f7f48203a13550f9e548fbdcd44b0be845a758c77ce","sha512":"51f902a92ec673f731ca490e9a907f1dd30283309d17cc4e59e35d88bf51a19f1cc6857e6dd5f7de3f1f7f018ee23149d947586bd61ebf0e678eff13dc247cdb","ssdeep":"6144:SyrVfskxo6qWroAizhQkc1/po7YA+TkIKvovBQVnFUr:LBFqLAi1C7TkIbz","tlshash":"89941ace73d674269396e078503f018ba57b29a2b45dc896f1c9cce02e7469a0277f7c","size":440222,"data":"","first_seen":"2026-01-08T23:27:03.558065Z","last_seen":"2026-01-08T23:27:03.558065Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngseriegentsf.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","fqdn":"ngseriegentsf.org","domain":"ngseriegentsf.org","tld":"org"},"ip":{"addr":"3.164.240.17","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fdb54f9ecc8fe0ccd9bccde8d7462643","sha1":"f0e226afdfea6fbd359b5904fbe7ba2171307a9e","sha256":"a84b3a34583ad97a05f4a2ab75b6e3cdf902d8030fda9e09354267ec96011628","sha512":"ecf5f193f1f8c14b880a38961b6ec2235bf72df37a3b78acfd0616af5289f827f49feb50170e625b0d8933d9c57d35b1bad9b0dacf91b06d27294a178f9d5a76","ssdeep":"","tlshash":"7d51108d34f3608282f26069413bb496fa385a95838cda18863d96fcbd715d96327f4c","size":3001,"data":"","first_seen":"2026-01-08T23:27:03.582932Z","last_seen":"2026-01-08T23:27:03.582932Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh.balzadicyema.com/tlPEVZF2uGqNs/131417","fqdn":"wh.balzadicyema.com","domain":"balzadicyema.com","tld":"com"},"ip":{"addr":"188.42.241.109","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","size":5,"data":"","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-04-03T18:52:28.676081Z","times_seen":13602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zt.peeredupseize.com/t0KTHVJ62njL/131417","fqdn":"zt.peeredupseize.com","domain":"peeredupseize.com","tld":"com"},"ip":{"addr":"172.241.53.157","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","size":5,"data":"","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-04-03T18:52:28.676081Z","times_seen":13602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dollishreman.com/gbPhURIThxsO/131804","fqdn":"dollishreman.com","domain":"dollishreman.com","tld":"com"},"ip":{"addr":"172.241.53.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fc71bf68a1d477bd1523733e34d1e90","sha1":"15119105cffbe108b6cf290146ab02c9aa8517ba","sha256":"74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce","sha512":"e8e5f5430841f9cdaad492efce3fed11992913ad2b714b27c6fd147c55b2c56dc1b896635f24c2b180d4215c70ba9a042847d7d9cf3ff8a67b636a4c0ca1ce3d","ssdeep":"","tlshash":"f440000300000000cc300000300300000000000000000c00c000000000000000000000","size":6,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-04-03T12:19:59.158661Z","times_seen":10521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"417ac72457e2f7679844035e09376bad","sha1":"d4b794d8f0862fd49e1ead0d8bc62313c44b32e8","sha256":"ecaf18c5d6c28f2a36c93716c685cdaa5ce8394b39465152b655f8f94deb6be3","sha512":"7b34ed52ab42568c7dec102ddc11ae43c1fa9a50f7ee17aded6ba98828f9e8417a6b3fe593b279dde9dc6fa883f846ec18e086923e7655f15fca8b26af87892d","ssdeep":"","tlshash":"e4d023b52875c93056ec024610b6e3a8267030d477317609c1dccc2b5e25fdb48b15dc","size":217,"data":"","first_seen":"2026-01-08T23:27:03.581758Z","last_seen":"2026-01-08T23:27:03.581758Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/android.html","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3460022eef6fb7e6f4449874f111f01a","sha1":"bf9d3f6800ea1e45bd00b532450086a7bc798dc3","sha256":"d2cfb98ba65f0d7c67e9ec1007c6e115927b24641bca4a9409bb6dd282bfa0ba","sha512":"94f3cc7850de3c2962e42168a7f3af010e03b55739c1a39d5e221ed1e32d0f31d300d5f1d73b8136b49987aedfefd4b41cbb105478caeaf36abc32da018a0748","ssdeep":"48:Wq89srx1993pnF+v/LS8llXLngk6oQdeOz8INMVRvircQIym8y54uM:wmN1X3tFSDS8l1ruw9Lvirbnm8y5PM","tlshash":"8d91842d66b32536a053918da79b6b016930e007e023dc85f79cc6847fa2e0dc8c2b9b","size":4347,"data":"","first_seen":"2026-01-08T23:27:03.584205Z","last_seen":"2026-01-08T23:27:03.584205Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1zhmd1pxxxajf.cloudfront.net/?dmhzd=1225420","fqdn":"d1zhmd1pxxxajf.cloudfront.net","domain":"d1zhmd1pxxxajf.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.162","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"97d6b3835d5a5a9e103ef67c374a43af","sha1":"6a7adcba20fe6182d115aff26d9d2529fc9f7cb7","sha256":"499b7b4951a93c903c5b89c5d562f3708bd2561ee634126b19d3299ec509517b","sha512":"63c8ab1e9e1d9cfaec90368f91dbbb26feeba32affa4247a17824d80d92c092918ac54f50216b5e0a27a63b4d33def286e75cb3440db56c41479672fc1fe6ef4","ssdeep":"3072:XBUNP5+Ya/06R42Da7oV6+53UOng7L9vN9Cz+Ya/06R42Da7oV6+53UOng7L9vNH:XuNR+t/06G2D02jz+t/06G2D02x4","tlshash":"05744cc9be52386d835374a540ff128a623f4a68b8184dd4f496d4d17db8d0a43bbfac","size":342108,"data":"","first_seen":"2026-01-08T23:27:03.550008Z","last_seen":"2026-01-08T23:27:03.550008Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/particles.js/2.0.0/particles.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00debcf6cf0789a19cee2278011afcd4","sha1":"8017f8b1869077db728573f1ca4684a00af69462","sha256":"faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6","sha512":"29e7f9b1cee07d369c47b4d929e95cad1b35e62a5fefeb7e9fb661ea628d25b996fbf4517425bd9f07cb9f8617d2cda73ba2afe58d8286a8086a4682e8f5b4f4","ssdeep":"384:NkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:NC7T6uYvn8wRxwyryVOEKXW5","tlshash":"61a2934d23f73e77378ab2e09be9d122c774a4d1399b04b0f93c667da52549201ee7a0","size":23364,"data":"","first_seen":"2023-03-07T01:16:44Z","last_seen":"2026-04-03T19:20:19.789735Z","times_seen":3887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d111c0c9f4827984c6c61b0696ec251","sha1":"7aef46f9b768f446ed5efecf99c9144eba9b39ad","sha256":"7f7017787bc45407c7a7d538e795ba04b4a1141bf911b4cdfadea773107c040a","sha512":"bb49de523f81a5666cfbd502ba5de0ddea4b2be9fed78e5382a276ed7e8ccde43641722f4844f8717c5f4bf54f06ee1043a9ee0148bd5d87bb35a634446f4ad6","ssdeep":"192:g73bGiytHRLqaeJjqFMf1tIXpMJk0Xz0k7r89qxvS3VfxaiRbluX+k:K3aJtx29Pj0k7g9CSFJaWBo","tlshash":"3522b5c7be4862f9c61620f021bbf9ed6168b99505789d0d85234cecbe32b897a0dd4d","size":10639,"data":"","first_seen":"2026-01-08T23:27:03.571239Z","last_seen":"2026-01-09T00:04:19.121014Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"na.nawpush.com/tags/385787?version_name=a\u0026domain=delta.filenetwork.vip","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:32.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 02:32:21 GMT","end":"Mon, 16 Feb 2026 02:32:20 GMT"},"fingerprint":{"sha1":"2B:B2:C7:E4:0C:35:8B:EA:A3:45:09:54:58:1F:96:D4:28:92:9E:24","sha256":"5D:DA:64:89:43:2F:60:A7:F1:43:BE:04:58:13:73:0E:73:99:6E:4B:50:A4:E4:06:23:B2:73:B0:E0:22:86:AF"}}},"request":{"raw":"GET /tags/385787?version_name=a\u0026domain=delta.filenetwork.vip HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://delta.filenetwork.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:32 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: EXPIRED\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27161,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"10dd83b8de4598b059d7f02b775e49f9","sha1":"fdf853ce8e1755853d79e1de89576024bbc375fb","sha256":"1ff1b07a6872dd4ccfd3df2ddc13a3099608d2a4d784b5c13536443e96161ab0","sha512":"1873c98254334f902020b333d1697362e21384e46c7db7b78e230ef88fb1023599eef52270358293a972d0ef503271d400070e14744fc474f2e490f5d0d95c3d","ssdeep":"768:c19UOEUOnUO1UOpUOpUOEUOxUOrUOuUObUOjUOiyOUOrUOvUONUOUUOeUOiUOOUk:ccQ15DHYNdOfBxyrvZBy4yGk","tlshash":"eec20fbc8b9805ff70e40bc6f44f380612c5314bb7dc6555e4eb896e26af681962272f","first_seen":"2026-01-08T23:27:03.542588Z","last_seen":"2026-01-08T23:27:03.542588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":90,"dns":43,"connect":19,"send":0,"wait":52,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:32.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=wr5xv_6LdgyVASxfSyjMvDiZ5e2avi3rn3qTujROb9s-1767914790-1.2.1.1-k4npElnF4QzMZfG6QKvUswqQEH_zV2H4ta95Km68bXuw1JF3XVA1O90DJdBniCYvppZ1B2eZhxws.iSt.QbZrPlprYjzi5KQ5CvNY9F3rmTbkpMKVtADV4wHK1VXpFUwq46cnjyzka4ZKRCAr4h7azP4W_Gj5n7xxqqS1gLxf8Pl_p4HBwDix1xfVddGzTkCnO8uiJqOEVYmunJovUGVsFcK4lV8G7mw5DFI9FZyckI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 08 Jan 2026 23:26:32 GMT\r\nvary: Accept-Encoding\r\ncf-ray: 9baf75dadd000afe-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/fc21b7e0d793/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nstrict-transport-security: max-age=0; preload\r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10639,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/get_files.php","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:42.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /get_files.php HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://delta.filenetwork.vip/android.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=..kOMK0KP4GsOyY2O1XmAj0WZ9PYNJCmnPb.rLG.sL4-1767914793-1.2.1.1-4W16hIyeikJT3l9gM_CkFTIq6xFehQMHa5r9lUlY0cv8RSnQWfwjKJ_Afl_MvIWitoy1YgXTkuBwOPO1.oiKwQNrQBeBdbkoaCb6C1TRlc9xbzUbWOXmKxAbyRK8d2q_6Y.cxBB42qFgg3nBhMUS4L_Q3IiwBSSOlq8H6uFXoD1S6FmYT9pKOwq.ppoid8kTD_n.LIgGI0eqHbScuphSU3eKUEjtfwkCxSNHWvN1Xc0; _ga_YCFNYQXJVZ=GS2.1.s1767914792$o1$g0$t1767914792$j60$l0$h0; _ga=GA1.1.1778539505.1767914793\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 23:26:42 GMT\r\ncontent-type: application/json\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nx-cache: HIT\r\nage: 411\r\ncache-control: max-age=1\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 08 Jan 2026 23:19:50 GMT\r\ncontent-encoding: br\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=0; preload\r\ncf-ray: 9baf76193f850afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1035,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2eacb102bb9cd4ef6af78c8cf5e732eb","sha1":"2bd9c57db18b17ba60989ee377cefe9d7682ce0f","sha256":"6540a8a5dc86c7698fc654faf6636f39494d41b092f40c2b71a8f2d8d2316ca3","sha512":"478cc78594bacdf51ef08ddb317ec7aecfc0c097058b3218bd55b44e6e28f882694e305ab8be26c317230bc4552645df4ac87cde2c139a400c3a7f7bc5934983","ssdeep":"","tlshash":"5a113f4541f009d53156e9e0bc82bfdb62cd9137da540d5a3a54cf43c05c6deb368c29","first_seen":"2026-01-08T23:27:03.547421Z","last_seen":"2026-01-08T23:27:03.547421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cdn-cgi/challenge-platform/h/g/jsd/oneshot/fc21b7e0d793/0.7755649083337259:1767914023:0L69baCR9GVk2uUZnzbej57Pq3pT5KyonKgjnhw_J1Q/9baf75cb0fb0c272","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:33.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/fc21b7e0d793/0.7755649083337259:1767914023:0L69baCR9GVk2uUZnzbej57Pq3pT5KyonKgjnhw_J1Q/9baf75cb0fb0c272 HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12197\r\nOrigin: https://delta.filenetwork.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/android.html\r\nCookie: cf_clearance=wr5xv_6LdgyVASxfSyjMvDiZ5e2avi3rn3qTujROb9s-1767914790-1.2.1.1-k4npElnF4QzMZfG6QKvUswqQEH_zV2H4ta95Km68bXuw1JF3XVA1O90DJdBniCYvppZ1B2eZhxws.iSt.QbZrPlprYjzi5KQ5CvNY9F3rmTbkpMKVtADV4wHK1VXpFUwq46cnjyzka4ZKRCAr4h7azP4W_Gj5n7xxqqS1gLxf8Pl_p4HBwDix1xfVddGzTkCnO8uiJqOEVYmunJovUGVsFcK4lV8G7mw5DFI9FZyckI; _ga_YCFNYQXJVZ=GS2.1.s1767914792$o1$g0$t1767914792$j60$l0$h0; _ga=GA1.1.1778539505.1767914793\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12197,"data":"$HRVstbr30mubuu3rS7uu7rz7SR7W72VXeaV3U78VNQ3lQ12EC75V$Qte17+7DD7UC1o7CP3IlsIa3EEpIa7Idd77Q-7qcLZI7rJ7X+RFuWktt758iLyb-LkR7YdxWSXRlQaU0twNFV7kbhsk-MH7oGJoQIHVMjvf7YTbC0FAHCUtSqUtgV7L-GLCcjM073hdc7CCgVFl8wTYl73Ww7bE7YsUhVmp5rP4R0njMday80d$0wHfE73LC77EBqFxrB0xJ7bSZajD$bHX77hd8Im3R73vl$mTRNpt7UHoFTRFNN+tE7bpCU7ow7qLmqiFKHEa7dxP-1kgZ77U2k0A--3Px1Px0Pa7eX-79aA-a7RI378jok2Qabw52QiXFdY5$-D$TKmFQB2jsTPe1QuUP1hVBXcc77YKlVR7VtdzhoWV7KrDonXX-IHaU1tDdMUSfI0e1SJHoBDjmX7rd2R77Jpp$MLBmtoQzJkV6qmo8pA5tlZL5zJir6qtzLCx0CTvaLIzL7UpKFRedYIRWILHV73uwlmmNtWN4Xqbf-Ausbt-5z9VkkAUks8pxu3jbSfCsbcchYlA8TvdGYGNmDq$UU5-8IUhip-mvlm$$mnlAMpAQ6qCTawlQwmlYz1c2XAswaEhG6$S2d17STumaepoa+KqnzEV4LNBlnaHZMJ2ATF4vlRGGVsAYaDnQBXb-2sqy8AnX$jgiUrBL$9Du8D8R1n$syZJ7-rjxmcdWKI7eda49y5zvzyQxk30WDK8SfnGxQ3mRRKe775J-S8HgQmPk3R0QWp195D32Y4i4-0bxXrCAcFnRd0XNmaK$03P6FSY008lmACmXz-PFp7Af3-5tJDP8V+R0r-j70R8xUtmPTUQ9VE3R8h7Io8-lUtsVtb+aRTUX07CDXQ8KUzx5r7oqVP7HSaPclU2yY70CRxR08RltVAVZ7s-NDXmA9IuDp0MKCLv2XEalZ7UaV-UFeyDofaEmR7AIttuhvT-ppC8Hn7AIXFVgDXYT+6oi68mkL-hDoXkHZPN6YVIHqr2zB2oZRUVomKpV3lXH6zuKrqhZkMRZmoMq9mkVe7ht6TE6pwZK087Pk3HEa9KQjqjIQEaQjujv78-CJpVLxHbhkzKjGvVbFUVBs7$heXKgXKmP3VL7o5KVhQCHoUKWFHr8eUmmUrFRq2CVEUWqsI7ZRVLUK7Pa6QZHtCYMHBMYLMT9v6VT3R07PdHJIm7-xzvuHxzpmfu7zKYSaKYhfpt7Dv2h9rmR+IX-KitXUc8m-DcxFwG7m7YtUCtEqPP7zDUa3pYvWIWQRC8H0bjVT5PP3RNQP6UE8Qw1XAjRL9QJN1rX-u89qGpSdPokK2TRhmu7PelL+w8HQ8Ym79Q1jln7Cz-FPjEQ7AozEVP08ftV1e7X6nYS7P7ES02eI517EEoXKrb4-KI3X2lf5P0wjUS0Cj3EMlWfqGc8y6DKV1Mn779HdPjUEg9pv18X2Kcjr$AcoDh8cuw++1Udk7t3lwQP7Bp9k1bL8+3BmfGDcV0Gvam2GA2MH9VPwEaDB6B9u7GoGvH7ZsRFHa36HU27cR07obdbBJ9M9qWw0$JL7a5MCPpuHF-Y7Nqqa7muF7$PCV6+R7mZEFI$90PgjgbJ3qlDkR8rJQ7mdE3t7QVQs-dKUZdF46VkKCbg70R0+ajkp5L-8t0XRqTx$6Y4AxTipK$meHWUXbt0VLDr7hS1rxQzzatbtUVxo98QVwQUmot2mr5Sx3EUH+w+Hw1itiJk+Qjtpe8m+RbYD5AJZo-rA0pahENZh8f+uZ37PyVzVJbLNQ8WE7R8aM3qVzYSxoaYPz53dK4wk-6Azx1s-1KI7Cpzz7NYWzLm2$RwSCKA-lV0a5KMzXIx-KeYppREQQ7mekST5X$RE7mhtK-mwpV9ZR81SJjXNPSxQDV3H7m7In1RD8YLNt+LIw$YX31mSVPY8pq0UXmhELwrjQ+wP7rdPZade5guZ2XTCdlVXULNFb8zJd1oFl$ueYLLRLrSkYo17uRIJPK-Rtq-g4839Uglwrh7bhdadVQheYD7D3pxzzDf2+M-blq1BscRsIrSPKJc6N23ba0akupeeNuNT$2hmTXdU$m1kvixlCAP07JdIJ0Y1U2KYiUXjd8mcxR750E4xk1CFfgS9X0hzd73j41DdelwpCfxx73uUINa2xCPdNpEqcNLBZ4Y9+tk5wIBJ5vT6-Gud4w0QT1KPM8rDNpqDIS82SgV8bMVQMrCPIhFpMTqg6j-c4jxcCUUS7MwepLbwdF66zvRQT7CCcf9s32SymhyLUcoq45PaWKR3EsNCbJx78KbwDsDoqWwV25tRHwtYe1aSgqVQSw$83zF109kj+wr3puhuXX$8Pxt8l$zuZRPT8mBNhQLudek--5bSlL6$w7J3r4QU0M$edjdB08p50CPDI23XqC31URbNVDb5U7XalLg3hSeVIIh1i870hL0PtLizBeLGgzUHSdj-zpNfgEWXeJx3u80+gijDrk734KhuDLBPJMDbptN$DNkBcX4YTRUQwbAIwjP2lvLQ7RAkPyTR7yE7Z4a-0UQ0VddFDWpRblMDJXPbF3vIxX$c3EXfFf5lPZz$Lht6k8S4ZmjIqKGfEdV7tKmxCPva3z0K2Po+9JXzq+BCxUT0YB1yXE9Rp2QybWVTR$L4mA-rP2+PBj2Pn$r0m2kRbypBDIQswtmP2LJ05MILv0Hsl9mpH4YJseRVPa$nBYw9tczNSz1jlK+W4Zed9Sf2S6ReVRMW+H2K93hmQwKbSYsZ8ePNAEH7Tqp5QRAiL6W7dCJkf0Phwj3+2Jp$2$gS0s3etVV7$KmsaxqSxKUJ7-IC7Nku-6brVGRLSwgTiT+sN3-SfADAyxvthTzd7hsbj+CaHVipa8Af1E31pPMPpgKje+SWKAIUSreeAQRc7rmqRQK6I0RwVWIJkB7o$oFaDcDI+7d+YWJbxuZi3HQt8ecwXcs0BrIWJdTCzPVHuRxI2Vyb1QKM5IQzkP77PdpXCVEb6iMNuDreIWgk3nR3STMJS+q+YpTxd6FUNh0pUBZmda3S2my$yTCM0-zW+-6hyX0ZDV5GCrnq8x-E73My+6kQ8ZEUc-Ds2xIUd1RnTzjjVY4qssBIm+UrLZhKr4edLE0RNAMd1r0CyCIHC$6xD10YqojU-KS-d6Dtxr$RtMstRbGpom8zd+D+ggSeLxbKsMq9F80qAMq$DpSma8yJvK01Q0RDWaRdLChkeqJ0EezEDvifm$J4-KerVXL4RYxPDUVJlENeX8eFjbUbPEdh$M0iZUCJS$Z5rI20lH8wcuPi1Jk02XsnHew0anf-WjEBC8pEoVVX4bLe6pzMEJrya+ttKrmWT6lUlx8+tc+y+trEgMGrmYfGrZbF-Ve$PWQ+6Qa70nhThS7qu7a-baZj3+eIeoY9m6RoWnStWkznV1acS6LKFIW9g140UGDkgbVKz-7QVZPD1Ga2Wka07Qt9wQ75Vj8ezq7TJ1AMJQLedmJp8c71LIJRmK117-bb2XJoMMcVApLv7TSsVE3EXPWP4RYpxTJC27P7+utULvSUDYcYztKUXUKsMrxk2wtpJF17JkUEmGAT1EZS87c7NiLKFubQmCAmgxWCd8XDgDzQd-b88Xd5nuI5JI3R7jD3XobbmmSeDsL4xKz1FH2CZoZQYFg1WPna$H0DD7+qL-YV$1PdzUJFLS0k2gxU3LKTASsEKNxxWzJYMKmqL1gX1KWtwoZ$VZAJ2sxQI$7ZPKFvzHXzDuPGShtGn8AFdidStpwKWDw9a0gCDK7DAM1mnpcFnjJr$+WmPaNfw0+RRctR21pKm1JLgZF3$ZWmLT$EAIY$x-IzXhtH7RXUsgxtsdJPLqmrRo$qgoY7UQdDF1aVJ2cYFp02PuNrKc3EU-Lt1HaygE3gAU+B14nj15IH39nqnmx9AW8Cag1rxbxU7M40LMLpZbUQ3tShMzLmWt8DbhdlYFzv212hPPRLJ-bz4qn-1cwjLg0kmL4bNaPmwsKHw02GJdDZtwP3Jbbj1U4uJImSUtcfcVYFnzMyWC+fxQwbmk4uLM8L323fY9WS2f0IATZRmr$oMo1USmLMWCV+3Q31bADESmL4wQKTZYV+p4xldK7+sLzsWcDeRgnLxcVoXsI7YK2xzenpZe02pR7-bNKEYeJb7pRom2FfwQgvLX2QcQaetk42$TKLRdbf32MoJ0nebxtH3QUEUkx-cfweccXSMPNq3swXPVJcLH7nn-tUJ2xbRe+tx22omBSKFySHanXLVR2bJS7UIXUQg+mInysRUvRsL-br4f3iZYDsJLwQxl3-USSEpUV5sYRI4m+U$fzx$DRVPv3Hm-UJRlSezX$e$ca6tRAfF3ZWLEX+JfmmWCVbDys7bJM1UGIqYcwusUdMLY+XDFNuVZSwzHXxSCzvbadKbgJm$gatFYAGJXZqsZd8$KYL2E3LM3KGNb8HSS+dAtNg8TAAnqLxYqS-nHdEaf3UW8xXUqY2sB$a0KXUN$08bkWSm8sR8f7R7BLZ8p7aY-YP4B+zRJS7sBNYmQUc7QVk$BsGP9P-G3tv$5K+ws+bP6sct6RK4M+$3YISbNx2cWK0m-I$7SJQz0RTN$IlVIIcs7T6PVuWpWwdWGMjdCWWpvU1j-2HbS24+gwhYM1b4UZP3vaTdmWV-askIXIv0dlI76KXYvZX$4V6VMNA87m2U-3etrGBS48Q79W1GfApdIs-UM$8YpaNL5JhVIwNA6ZMt41EDCpHhbYQNdgK2xMHP+sp4vKxNUxR+gwZ$uS74K7uKH2uVJnpZKPvmlFI70FsSrJAg5cGAo710ipKArMSGlMf8tJq8CJMMN8klrPucrKBWojWgLU-JPUZLV8dTK2iPK0da02W0osb2NtLtZw0NzwuLoujR+Km8JFAUo3Hm-n13aYxdDtUPUGqx2FIbxtPLtZv+t8LX-3aubJMRm84I3mFMj8j1Z02AzJf0$4P3LTpVnaYYG1fbL7tazVRmkNxzUJz3TUQ2Q-ztkjAd31kWtXHlb0kXGWwN3lga1GI$BsLgqR7Az-a+vRaD3FKYz-61FP5DhGzlt0gKvACjwKWzszYgvRg1XbvP3l9++hb2w1URF2nASUK62wUmrWtTLcTSDR3VvYp8DFL3wc-67gmKpzYTX-CNr1k6PL81Ewid3DbhoVLFrVobtVELqa5LRXNJhMr65Ag63R56r0J$4jRgfUUgiWFseRl-6Z2dAwwIQ-R62w3jg$$PZJWL1US7cRhGvYFJBP14-mX2UUI2EhL2RVWTfl$X0nGg$bYNsZFZ4Y7juALbz$-uTp8DQ7I+gaNpWwuSUX7W7LR7XYs+nWm+U$0mUNjnjaqIEXIuHw-1yKNNIj0P5zAchp-+vpUAvaiDoLLYL2xa7nNw0p8uDLA62pAYV-LnT43Xt6-3QnW34JmRDtPu$+9wXdFVLjtTush1zlmcqIDgBLSUDcjhk8p6-VYMo$RagVw$snsAcZe4xRmAtGpFlDw4SZUAyltb5m5mCYK+bd8bVY-Fmz6tEISUG1t+d4iPzsSp5sBSe1$6EmL+5ssa8RR6eYkWKFj+gLZxG-jP1nTA64A8WlmNfg6l8ZI3iZfl+T-qQKDmZTR-ZJbN1FRxoVo622xMggfULD6MNdf2IczI9JFt+NN8T+q1iSvRAsYD5-1R07AcXq4K-F1pkGTLMs-UKjezpMea4t8RLKK4B+xPK0bsFZkmkXf7d4wDsJ6jAVPcbVdmoqDWjJBsb2YNb2uL4cET1mbzEIka+07nA3taZFdQNh73mj-MqW1QobxICKfzu+t7+3VnWJrNuqlX872dj-bNrxFIq+E+vFiY7EA6wjRxLwJlhTmsz-YGhuC-ggs6LbSmSm140GCWmpXEVa-sphUGES9JqxGwx4qcqgJssYbnHGbAxDFtUJKP8P0gpL4db6Ga+YJRGppKU5SFS2Sl4NCSLtQUK$-6LcYmWjBYp1ct-2+IUbrNFT8DwD0pVwfw0YJl1qJYL2H44LcwqRL+CDsJqGNzdYQDS0uUsVqY-0-F-$f7JwPw122ZiZo6zKoLr5ms5RsG0PnFQ1Eku4r7b4BsHpCbNhoIHFSsejfdqltgBS--Ru9lYdPL4IvJUUd5emIpXu3SeDgpz4PQ1Ql913lqUEFRAlXmmj0Uoju6vC+d2TgKgIVhrGNaiTi6Yt8kULv$Aw-6KPZFfCTP02VQ-Xc6ZM4+jp$N-TTGCC6-VLe5-GjcRE$hoTcaxVZ1kkcwXw6LvKS3UnjzsT-LFJC-YT4E2-RLdGsjfAzG$xk3UAw8IxIwX3UQz6-Dz1cz6YTQJSetvS$x7Y4pCjJL-Rg1EUE3QpXCp7HMjswP$+xltgprk736$WrlijmppRsu15slCT$pG0k3RLptwRHP9dk0UrqaxaWqH6bW6NY2DJWc6$mR1-7qAh6QH$6Ll+5TyapWFZYK9G4alDX3050F56V$YjXU3Fw4unDY-XqWolwJbbqcYLvKQ2wPH1-5QMl7vuPAf3$-njK2dEJEEFE8mlhpshhrwjpCQmuXip65lwv23FrKKbbhizo7whm5AgrRt9uhGLSUlQPkP55KPEG1XACavJZRDA02I20mfjsAQ5A8JG-En94wvrdnCGZCgK2hVes6stFR562d2lXmZNYSSZfcZc1gotW+U4i6euo6-XEgs91s22DWo1AR$8laGGDClqBps0X+olNn68J9Mq1Aqz02sW8zR2XzqKI70CHshz$$jYfRRACzX5g8SymtBsZpq3PAk7tnQIz9V6sWuEQ3tGQs6rGrPBctphpaI9Ep51j-oQkEvpxp2828zCd5IgRpVf050nZTj0DuAngx1WejZEHGNn$MRxf3FL1Un-vEtFhc5g8VLFN0lLpKSG1WbkIEUh5Fzqpb0bkoh$Rz4NlZn09PtfyC7iEUV6APYW2kn-QvahDRGpezWuIgIg6gJkU9YXZs13nW0f3-zVZPI9fweE5AGkZzYMWXeMbqRjx-fFtas6y-2w3uSJ1jB$o-dBfkfni8iwLka0f2JItbfxStXu1CXhNgqR02HQjV8WoZgK$r3Nc2TlDgRNf5-G$l3FHr3tok0JXFyLGExELRLUGCGhKa5t48y9vnldajpruse9ddEbNqAeTdmsdRTashrPoX-58-DcYq8UQvHBqKYy0BYile7aRSjEE7Qg6-d3XjKmuDdVDisPJ-Iftml-dbSNr4507uuEnPF3sTgBALN$oP8c35JaS0Km1JJJQDVPWZ2CemgMoajYdeZAQTq32XroThA5+lz3UWipDMD+13w+CADWGKDUo7db3IoInuQos9dHfSSBo1T61xSBWdn85v-mrRFdvD191kL1dqf7NqtlE3vnisN9HwcxNRqpqpcd55sWqYSLptKgpDkQtQnx3kmEUgkqFZvaUzccaTbBp1-s2+vpYGqeiije728jv3wQoy9LoHv8RhF8uQafBIDxrRMemgy+aRgYL3uTMfInCTYTx$HPwHKatBpguygQdmTpX+pltcDhr1-pD+3UxHfmJwps-vWQqfBUQ8shctkIbQUL07HMH3vb64o+B1Q6UrwSzVXQ-o7u$j-7v7p5nQEN2AZ385RP1kretNg7QmJqbQllB3RPY5aHxVSRI-cpsYSWg8S33pXL$bTr3k-uu3dxjpGhNSmLqbFV27kXlwXW3L-k02zsl3ND+vqbd-EG5v7QXWmHAeWmsmKMcDP3qbbVNv07+rw0mDRebUP0aUy74hRPR0oVLJhmUkh82Db0dpa81XUzk8RLSV5rV5DS2mP2XhVd8Yh3uKH7tU-jwa8um$VM7Rz3bdi-32zVyYK7qd0tj-7K6XKaKokrRwRXtXaS0acaURzsS2JAm1XB1kRz+2tU3HW-S0Q12qFmLWC7a8ai5u10pF7DKRx7IXFKaRTD3TKGd2DpcVkFXCM-ZaE-d3Xk2-mPSI74W$VRVL7VzQEe2-8u7dmD7P7-Pu-d$Dk2NamfRH0-8lZUsaDtuuPLoI02X3JdhvB-0-dVJB7-$kpkPSa2hJmxWD43+PA-zrNrKM3zopaMRg1+kxAmuKB-XL$ewpXdDtamXR9NQVWb93FQFP$H8u2-Z37-Ee+Q1+S1LZe8c-PaZQ7xXW8aZ53VatarzmKF$rc-lKETDxnuV-tC0kRZ-q-x2PHZQ33Rjv2SUIen-t-8RfXEtsEK-H9Krd7wutArZK8taVPbK25Ap27KCQKaSpXbxZVA87amRD2b0V2XqbW1mudjsHm8TuZgV5f5UYppDAyQ8PH-DZ0r30ARyP8HVnZ1JLEaVZ+Q-7MQrAtJJgapQkSp$t+28Fh8tLULp18cDPUrP3L9IXR813jUI5taPRBFurRo3Kjta3VLUYv0uFVZHSh-A-+kNy7C8FKRQu0rv0v8qrq1TaBrDaFIm0eCb3PvLbRx77htaAdPy08C3AJCtRIhan0wJ3s-2t2fVRF2bl3fVZKl7wQIXg0FuFpX37RREa2AXT2jmud2laHwSskFY3kfE7Q6lUN0C-jBaTdrFjKDUF7tWtsQZ5ppp0m1hyLIjRwZgpHb4ZhA-RcSgWtZRu8IAUH1rU07kVitgAARCr2Qcvay83KNuXGRgRW7hAFLSRdQxuA3CH7rAJ1CtmdYn8EaRUKaVZFgD2UL7T767Ev$R4utfj7a7X-3wP7K-ewMVMtXr3MFHvxmgS0XMHa-7aQbui7IHPo80VP1wA7a$dFplMmgYu-1PBPEoURmPmo7m7JQ4F-hJSVLrPKbV5N3D18KZA01dU+tRX20bRe906X-v7ZX5ak8wLPVNtqVXSVfb8YR7NQjDcSaDYhYIGslbJA$vgAf10RYVtd4--uhwgYskd8R2Ci+Hm7ZPxSMV3Nei1kQf9z-RlS6sq0Q-JXTc7$IbvUbMoiPEa$pKhtISrgMVcxNhZfK+C6RM-J7hapaR7VrpSaCtx3xuXhaogaVX-m8R0777hs-0LFQFgbYEDv9wNPUj2w-AXjjp7MRJX7oRwllDUImrZJKL30VjtpAsHRnmXHBYfLcaCrIK7-m5b1C2yG+RkDdX0g5bUcUPtu2qb5WrcNTddUTkB7K7aSS-jiavMxoJgAVZQ+MDQbyxkY2jXr+2+iFmmHSWF9SY5x3ekC+847aolvYz6XKUQPaddw3FsthZBa6d4yGfp07sxta8pddkeKrtttiVaj2kX9WYb-P37M0ddqgsU8Nz5dJNbKXyRuhSj+KGPkX2kzfIJh$EVRqLmTRT1Nz30--HXp3mqXZKqRbtbmllYK20bGRNzcUQd$nFLbCAmSlLXMAYMXKoCrRpIdI7Z7TapzhnpQNe7Pi+7Z7qaYFUF1hUf3u327wu5bJFt7Kf7LSXaXTNy3m728-PQ-+v0umw0Ja$7UH7obpaV-nhbS8aXIXkT3aTA2rkLFrmti$7QzEuG5Ds7ziGCkpAulshJ216IJ6RD7sIQwU0ZtmDIl7kLRCmFZga5RE1YWdjFI3TaMV2u$Wdlprm85xv6ujt3PFuFcA6Rj0p+c-Uo7GuZ+0ry-lwbZMiC7eqXmHEFputV-+1iXhWwC3Hm8LWRX09Q+IVsDKLa7EuAVNip3CwLn-9kYWkW03ZwZveJrKyZJcmMjJH-yAslcWKZVELUeLaFxMvxqDMdIeFX2sUc+fA+L-aiIFI9cpSbnbxlMunesJL5DU7QlHr-PF6Xub+LAudVpV5eguVFLrdpVfla9NlK+L5k4o1i1wFcMKL5k8dNyXUx$tnL27RovR$CUk791ZexuMfgRbK3vJI773Zpm8Dx1VsjEKHBf56SwZ4Ja27oIb8fzGMKLURt2NJ$CX1mKPMC1VmoZV-wsHsh7CfElge2ZagHMCVVvEQe+uZ2oGeJ7xT2RcmMs7A-x3tL1Gp5I1yjuhdmINjt13NbZu8unNTRFVQrsuV+bYpGcR-D9-I2pYpK87hSiBHwefLY97i7Hc1HvAxuLUkRFlKTXR2VFrZ$3m1w+LIR-I389hWjU9J824-eIXQGmIkabHYvxbgT$wtSASQ+3eAkQmBMKL+QYPdP3VhRdEsiR0r5AqH-xDSp928I8b5Hu3w7sbeXz4gmnRVgY4C1VzLA3M19DEadD-zjYzLNmIm78Cd-n-sQGVgj73DQuZQcQ2qVfLHAXrlIbVTiV4sW2HrDVY5ZXAL2b2szfrGuZ$tZJXW$v3bTH6BeWs3TJ0Yh9c0-iiRRUquQfkhMvw1As2T3i7TJdkgjJ6R90M7TvDkcg8BKxJ3mUuTggqplD3LflEu-5Vxpz3QzwCCdlpAWL3VhV$LbeFmMDAm1qkklFalEwp-ad$oo+r3RRm2s6Rx7FabQW3mBpa2ix3b5Dww6C7roxuTVbXUKMKL7w84qAQ2UqXsy02CSFv5aR3wD2nuX3uQFiZYVzHWrzthk5auKs0btw1RwukRXYdgLpwnLflrN2tPYy6RQUmkXi+CgmdVHprF+EL-cMHx5Rn3MHxahz6yHM-AzPXXFYEcNxKRiP5t+rpDw5PiDbtcmte7KXpT9KiXxtm37BeRVAKs3DHxC22D-4YwUPxWzkjv3I7TDRHYAkXGIDITiw8IEk5kjgFI6ioKxqTxjZ$dSLiIlT2SEaNymEbu0BL3uQXT8vKT$VCzjUhUuDItJhCgVz$cq0YqXVnCeURgEvTyDVZqwcrUVFiNxIh6I7FLuQYG06Dp6Qeb3M$8gl1mAJk7sVajQvuJ1bLU4gr-4xMsDg+AHomko-$9FsgDLdemkujEvG174L34+kylQgGqDZpDwdv-JY+6izYse4LapYdkGqMFpC4Hoo5CNsYt$TeeWsUXCrlcI2Ttdmo-4kgG4cqsioSt7ygPFK8EpZwhooKxIuGD$PDwZpjyc9pmtmrZwxofa3B$Nd9TNeNztyC7jBDR278noic6XusgVs24+kSb57GVWPpK41UZotlTwgVsB2zTjb5135FlTu2tTBmdj3$8UT-eKkT+raTwg1sbHMmF$Ca-FwSkCURUKK8EYJc0po$$L$KknpwgrpIlN3ZrGPlnpmmnwV318gA6Xgdk8$l7PjrR21d0kZw3tvDxYhddVqluoZqZEvTSdvp8AzTB8w21qdIsGL0In7ElT1ngs1eerM$9QjX-t6-lTzenbA6uWKsi4wUPYwKGPWbsX$hUPYc7jrWKsS$FISY5bhJcAsx7rU-4r1j3WEhE8LHMyC1TtSesQjUUShCk-Tg$6oDTgH-pv-JwWLkDVLAJCShzJx6nwKguImuuWDp6zjJ0dJcSuIdiTF$Kkoe87WpW4ksDy312R4hUdl-vRRUSeQrTpSkqyD27mCwwlWcjslAaW1qxdhTn07fjxguI34lldekIphVmo9Tu1br8YK$HZqqj$BRwtAVB3oM$e1Q3zkx7FzQiwJD96fKDP5P+1rz7igUXR7zQX-mrmpdY6Gp5H6qU0FaTq7F-B7RBjEL4XsJ$Vw1a3gPt82pq9b41s5Vy0LWYTV50Rl$qHFESavbwjHMjhS3Ltdt1P6VgC0RXV77bv7McrbgK17-43fXPU77Qt6-$VZP3-RYFrtGuJa2XEo7VtdVkRqVvtCzXIFM8U75u$PcMq-KHKYVYpEkV77xJ707o7qXF7Kl3q7GRFVkrIkU3v+Xv-4X0QklNKbnb-Kz13TCQ1nmTikA+ln70I7Wmp7A5773Zo3nV77DFs-44rbIt6wY0bQUQmR8i5yVu7XzIwWjbw5b+SnEq-jWlvTbPV0cwtm2SFVJ577qZ2WlvHX0EfQNF624TPQ7e-w7Uqhj4tv9SL0pV7xT2mp7mPbEVGgsu18Z75RoP7M57mx4Iii5FeRVNnF38YKuy670t8-2fnE7y0W4Y02-773SeR2RE6ubckbVwIHqGrPmi45bu7h1a95NbF4M71PD7Rz7PXbcubaREbXr$jN-UkmhaC-C229VyiUYaRw1$oxeby8YKeaXQFGw82aKDLTtTu7SkdNFh8bZh-riIUHKTV4P1PFkVMkHXkmvPZycM8Xp7x$71vJQe+jcb1UhWW2k5qIpSY5gWbU7JaCP77WmjFWH73yb+eabVmJ4o8H7Ql-d+kXVb3KH717rSYk27VSLu0$dgL$ZjP7V-f5-SooCz$7Z7DmLKRSt8XmV0m8j7J7pVWVC7bUzE7RfpSRRkygD8Wml7pS+0Nwgq8XCq7h077UY$yUbd3m5hsLj-Jal+u--xlYS97Pmj1374xhh4Sv35lKqPYQ3b2AR6at00aYHM+77b9EPS77"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:33 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9baf75e0dd280afe-OSL\r\ncf-chl-out-s: hsccPhq1Fcwkz0Pe9/y8KA==$/liXRVaGKoHxXA0EhDfhYA==\r\nset-cookie: cf_clearance=..kOMK0KP4GsOyY2O1XmAj0WZ9PYNJCmnPb.rLG.sL4-1767914793-1.2.1.1-4W16hIyeikJT3l9gM_CkFTIq6xFehQMHa5r9lUlY0cv8RSnQWfwjKJ_Afl_MvIWitoy1YgXTkuBwOPO1.oiKwQNrQBeBdbkoaCb6C1TRlc9xbzUbWOXmKxAbyRK8d2q_6Y.cxBB42qFgg3nBhMUS4L_Q3IiwBSSOlq8H6uFXoD1S6FmYT9pKOwq.ppoid8kTD_n.LIgGI0eqHbScuphSU3eKUEjtfwkCxSNHWvN1Xc0; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=filenetwork.vip; Expires=Fri, 08 Jan 2027 23:26:33 GMT\r\ntiming-allow-origin: https://delta.filenetwork.vip\r\ncontent-length: 0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1zhmd1pxxxajf.cloudfront.net/?dmhzd=1225420","fqdn":"d1zhmd1pxxxajf.cloudfront.net","domain":"d1zhmd1pxxxajf.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.162","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:29.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?dmhzd=1225420 HTTP/1.1\r\nHost: d1zhmd1pxxxajf.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 111790\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Thu, 08 Jan 2026 23:26:29 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 3bd4HCzg48WgKMXYnL4khXRTR-lSfnZQslbD-dDgPJAylUDZ6D1t5w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":342108,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)","md5":"97d6b3835d5a5a9e103ef67c374a43af","sha1":"6a7adcba20fe6182d115aff26d9d2529fc9f7cb7","sha256":"499b7b4951a93c903c5b89c5d562f3708bd2561ee634126b19d3299ec509517b","sha512":"63c8ab1e9e1d9cfaec90368f91dbbb26feeba32affa4247a17824d80d92c092918ac54f50216b5e0a27a63b4d33def286e75cb3440db56c41479672fc1fe6ef4","ssdeep":"3072:XBUNP5+Ya/06R42Da7oV6+53UOng7L9vN9Cz+Ya/06R42Da7oV6+53UOng7L9vNH:XuNR+t/06G2D02jz+t/06G2D02x4","tlshash":"05744cc9be52386d835374a540ff128a623f4a68b8184dd4f496d4d17db8d0a43bbfac","first_seen":"2026-01-08T23:27:03.550008Z","last_seen":"2026-01-08T23:27:03.550008Z","times_seen":1,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":52,"dns":29,"connect":1,"send":0,"wait":183,"receive":148,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 14:41:35 GMT","end":"Sat, 21 Mar 2026 15:38:12 GMT"},"fingerprint":{"sha1":"F5:49:6B:45:9A:B4:87:30:F2:34:12:BC:49:A1:48:31:A2:B6:9B:7F","sha256":"55:CC:57:AE:F5:9A:5C:FB:E7:85:83:CD:13:37:E9:19:A2:79:01:68:7B:D7:7F:4B:80:61:9B:7D:C8:9A:17:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://delta.filenetwork.vip/\r\nOrigin: https://delta.filenetwork.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: csu=1396776640477703@1@1767914790; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://delta.filenetwork.vip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvW8JPEgzRswaAQ3nLNfPRp18I6Y023U3rOZQoQem0BsI6pjR4II9CCyw5DrDWeeiwRkRtKovfh%2Fg7zstSG8rvsO2S%2FLvF%2B6lLGzrdVbPdd8ow%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9baf75d0da4c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"9da3201a1bd98dd5daa6be1f854359f5","sha1":"3d7d46cccdfbeaa78e56d09b6092f8039861cc2c","sha256":"d77cb69be03d2e8d1ebee5eb7c68a52575dcb70c581ec996ca6e598a77e6d0a7","sha512":"edf3b981a06290bd1c370e44a30b985a251378dad67c8025a27c798e0d4ea9534b142a99f82d0b569f7ef3937fb1341833b501689578e109ec4632153a31445e","ssdeep":"","tlshash":"0a8000c00302a08c080b32888302808088002280e80c008288008c23a8b02033208a00","first_seen":"2026-01-08T23:27:03.552603Z","last_seen":"2026-01-08T23:27:03.552603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":75,"dns":12,"connect":1,"send":0,"wait":130,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://delta.filenetwork.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::jwcjr-1765212281299-f54ecb125284\r\nlast-modified: Mon, 08 Dec 2025 16:44:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2702508\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zF4m9tJOafnfLZTrhCUsuWXf2J1RsF%2BgEpjlN5n3jQg8ZOP5tZIEayFTs2pxSR6UiBTiXMIMqN%2FQeBltDpPcptU4qAWHlP6GvpO2w%2Fg2qQQ%3D\"}]}\r\ncf-ray: 9baf75d138ebb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-03T19:37:14.317916Z","times_seen":28684,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=385787","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:33.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"POST /fp?tag_id=385787 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1972\r\nOrigin: https://delta.filenetwork.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1972,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":174},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":445},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":23},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":1},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":43},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Thu, 08 Jan 2026 23:26:33 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://delta.filenetwork.vip\r\nSet-Cookie: id=17795857989378900520; Expires=Fri, 08 Jan 2027 23:26:33 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-03T19:36:24.860041Z","times_seen":5972,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":33,"connect":24,"send":0,"wait":25,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zt.peeredupseize.com/t0KTHVJ62njL/131417","fqdn":"zt.peeredupseize.com","domain":"peeredupseize.com","tld":"com"},"ip":{"addr":"172.241.53.157","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:29.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zt.peeredupseize.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 14:23:54 GMT","end":"Thu, 02 Apr 2026 14:23:53 GMT"},"fingerprint":{"sha1":"C0:6A:F1:48:FC:DB:6C:9D:A0:68:EC:0E:84:1B:8A:2D:C9:F9:8C:34","sha256":"41:E9:2A:A4:A4:31:B9:31:93:F7:44:BC:B1:2E:3F:0D:EE:98:59:33:4F:B3:A2:D7:C0:A4:D9:97:27:BE:DD:47"}}},"request":{"raw":"GET /t0KTHVJ62njL/131417 HTTP/1.1\r\nHost: zt.peeredupseize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://delta.filenetwork.vip\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Fri, 09-Jan-2026 23:26:30 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne; expires=Fri, 09-Jan-2026 23:26:30 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-04-03T18:52:28.676081Z","times_seen":13602,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":97,"dns":56,"connect":17,"send":0,"wait":23,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"zt.peeredupseize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"zt.peeredupseize.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"zt.peeredupseize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YCFNYQXJVZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-YCFNYQXJVZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\nexpires: Thu, 08 Jan 2026 23:26:30 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 145114\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":440222,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"c66910f44f372eac1a9cc23672d07321","sha1":"75e67eef51edc903a46e47ca59aed8a3ae4c5c58","sha256":"66480e82c6b303ce0cea4f7f48203a13550f9e548fbdcd44b0be845a758c77ce","sha512":"51f902a92ec673f731ca490e9a907f1dd30283309d17cc4e59e35d88bf51a19f1cc6857e6dd5f7de3f1f7f018ee23149d947586bd61ebf0e678eff13dc247cdb","ssdeep":"6144:SyrVfskxo6qWroAizhQkc1/po7YA+TkIKvovBQVnFUr:LBFqLAi1C7TkIbz","tlshash":"89941ace73d674269396e078503f018ba57b29a2b45dc896f1c9cce02e7469a0277f7c","first_seen":"2026-01-08T23:27:03.558065Z","last_seen":"2026-01-08T23:27:03.558065Z","times_seen":1,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":166,"dns":13,"connect":12,"send":0,"wait":29,"receive":31,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cf-fonts/v/inter/5.0.16/latin/wght/normal.woff2","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /cf-fonts/v/inter/5.0.16/latin/wght/normal.woff2 HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/android.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-length: 48444\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=0; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9baf75d0acd20afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-04-03T19:42:20.540997Z","times_seen":19680,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":50,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/get_files.php","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:32.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /get_files.php HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://delta.filenetwork.vip/android.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=wr5xv_6LdgyVASxfSyjMvDiZ5e2avi3rn3qTujROb9s-1767914790-1.2.1.1-k4npElnF4QzMZfG6QKvUswqQEH_zV2H4ta95Km68bXuw1JF3XVA1O90DJdBniCYvppZ1B2eZhxws.iSt.QbZrPlprYjzi5KQ5CvNY9F3rmTbkpMKVtADV4wHK1VXpFUwq46cnjyzka4ZKRCAr4h7azP4W_Gj5n7xxqqS1gLxf8Pl_p4HBwDix1xfVddGzTkCnO8uiJqOEVYmunJovUGVsFcK4lV8G7mw5DFI9FZyckI\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 23:26:32 GMT\r\ncontent-type: application/json\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nx-cache: HIT\r\nage: 401\r\ncache-control: max-age=1\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 08 Jan 2026 23:19:50 GMT\r\ncontent-encoding: br\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=0; preload\r\ncf-ray: 9baf75dadd010afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1035,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2eacb102bb9cd4ef6af78c8cf5e732eb","sha1":"2bd9c57db18b17ba60989ee377cefe9d7682ce0f","sha256":"6540a8a5dc86c7698fc654faf6636f39494d41b092f40c2b71a8f2d8d2316ca3","sha512":"478cc78594bacdf51ef08ddb317ec7aecfc0c097058b3218bd55b44e6e28f882694e305ab8be26c317230bc4552645df4ac87cde2c139a400c3a7f7bc5934983","ssdeep":"","tlshash":"5a113f4541f009d53156e9e0bc82bfdb62cd9137da540d5a3a54cf43c05c6deb368c29","first_seen":"2026-01-08T23:27:03.547421Z","last_seen":"2026-01-08T23:27:03.547421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cdn-cgi/rum?","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:32.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1048\r\nOrigin: https://delta.filenetwork.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/android.html\r\nCookie: cf_clearance=wr5xv_6LdgyVASxfSyjMvDiZ5e2avi3rn3qTujROb9s-1767914790-1.2.1.1-k4npElnF4QzMZfG6QKvUswqQEH_zV2H4ta95Km68bXuw1JF3XVA1O90DJdBniCYvppZ1B2eZhxws.iSt.QbZrPlprYjzi5KQ5CvNY9F3rmTbkpMKVtADV4wHK1VXpFUwq46cnjyzka4ZKRCAr4h7azP4W_Gj5n7xxqqS1gLxf8Pl_p4HBwDix1xfVddGzTkCnO8uiJqOEVYmunJovUGVsFcK4lV8G7mw5DFI9FZyckI\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1048,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":984,\"startTime\":1767914789520,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"ffd57549-0bd8-4ed8-99b1-21481aaddb4e\",\"location\":\"https://delta.filenetwork.vip/android.html\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":935,\"domContentLoadedEventStart\":984,\"domContentLoadedEventEnd\":1002,\"domComplete\":1844,\"loadEventStart\":1844,\"loadEventEnd\":1849,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":82,\"domainLookupStart\":82,\"domainLookupEnd\":82,\"connectStart\":82,\"connectEnd\":82,\"secureConnectionStart\":82,\"requestStart\":84,\"responseStart\":94,\"responseEnd\":96,\"transferSize\":5035,\"encodedBodySize\":4535,\"decodedBodySize\":20476,\"name\":\"https://delta.filenetwork.vip/android.html\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":1849},\"siteToken\":\"37085d92d5354d2481e2130a93ce323c\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://delta.filenetwork.vip\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nstrict-transport-security: max-age=0; preload\r\ndate: Thu, 08 Jan 2026 23:26:32 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9baf75dcfd0b0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:PaXsdxhehu0pqQX0VqvtvkQJFy9xSQ:S45ejeLeWHzv8pFW; Expires=Sat, 08-Jan-2028 23:26:31 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 08 Jan 2026 23:26:31 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S1444337835:1767914791070047\u0026ifkv=AXbMIuD7DWVBEinnWEMUDFtswZLiMizR-Ot_9dy5ICNWKMmjMHuuGz0w6Qnre14wxrNrMZHh2ynl\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-dyyEL7Nqijp4R9e4FDYWCQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":130,"dns":0,"connect":30,"send":0,"wait":21,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/favicon.ico","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/android.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-type: image/x-icon\r\nstrict-transport-security: max-age=0; preload\r\nlast-modified: Sun, 23 Nov 2025 05:12:41 GMT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nage: 276\r\ncache-control: max-age=1\r\ncf-cache-status: HIT\r\netag: W/\"692297c9-176b\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9baf75d35cd90afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5995,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"946538ac6198b3c4d409916d3b28adad","sha1":"4e78895e7cbe3bf40e8e85c42a685c5c3ef17a50","sha256":"c5e639455e048de97fdd633a3d1382db9b121a889c665c399d3fc2327cab382d","sha512":"175e5e7c9047c190913f400025840cf24f759e709e6df76b5d4bc8108316363863ed842e71a6ce58bbce74f441d62e312d8b8020d0c2c98003ce99232f846ec7","ssdeep":"96:N0xUK3UVPYotuH3IQqvp5Sg8yAgEwlA8PNqlybf7cD3M2J1Gf7eIQcViXUKnkopk:PKyYf3Ihx5zVhEiA8PNqlybAY2J1GDe2","tlshash":"f8c19f07e94c34f8dd9e87235a0515f6ed6b84f467c38e8827a8b33c5996988c453e85","first_seen":"2026-01-08T23:27:03.560767Z","last_seen":"2026-01-08T23:27:03.560767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:32.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 02:32:13 GMT","end":"Thu, 12 Mar 2026 02:32:12 GMT"},"fingerprint":{"sha1":"5D:9C:D7:15:7D:69:8C:F7:40:12:0E:10:F1:FF:68:59:A6:F6:E2:38","sha256":"7D:0B:09:36:73:70:FE:A2:CB:1A:80:52:3B:1A:C0:0D:64:38:DA:DC:AB:9E:7A:95:F4:55:F2:6A:A4:F0:A8:FE"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Thu, 08 Jan 2026 23:31:32 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":78,"dns":27,"connect":21,"send":0,"wait":21,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:33.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.cabnnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 04:32:05 GMT","end":"Tue, 10 Mar 2026 04:32:04 GMT"},"fingerprint":{"sha1":"FB:8C:65:CE:0B:5E:7F:2E:C6:58:EB:3B:D2:6E:8E:7A:B7:B7:51:EF","sha256":"FB:93:6B:07:DC:2C:B3:38:60:36:C5:FC:E7:C7:DE:74:5A:F6:0E:4E:92:A5:72:F1:03:9F:FE:61:7A:ED:04:96"}}},"request":{"raw":"GET /banner-admanager/build.m.js HTTP/1.1\r\nHost: js.cabnnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 18 Dec 2025 08:18:57 GMT\r\netag: W/\"6943b8f1-14bfe\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 08 Jan 2026 23:31:33 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84990,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"01903853e3410c57e30e0a7abc3c1f60","sha1":"094aa098801352ae39ce557b293e4eb0fc3eb6d1","sha256":"cf7169f391156797acf11a9da11225701c3ee3c16afebc35eeefa3fb25e8daf3","sha512":"146bd24d76c9a9050a3a68b7a6d85264812fd8b1e41e93c674fd7d80ec01ee246a1302fbb0e37945ec1c53fd67dc86603dea509f5d9464c25e20ece1d3e2ee03","ssdeep":"1536:7aNtpnDTPupIDxZJBpqgiZMZLUyzOBR6mXIEFWDDIYA:709DTP9PpqSL3bmLIE","tlshash":"4b836b843290b4b541e640afa43f430af3392d06b80b9458f16dede67b79e896176f39","first_seen":"2025-12-18T08:41:29.003596Z","last_seen":"2026-01-19T12:53:12.730062Z","times_seen":453,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":112,"dns":13,"connect":22,"send":0,"wait":37,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::vfjnk-1767914749375-9c8958ee74db\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 41\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ew8armluEowpmZjjEZvizGA3JLl7El7gXyxLlkqQ4WmNDEIjyG%2Bx2tff1zJ6yz5DaA1zL17yHDOSvLAFBoP3U86qz3h%2FHnVGovu7BdJwXw%3D\"}]}\r\ncf-ray: 9baf75d0e8c9b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":57,"dns":10,"connect":4,"send":0,"wait":7,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsiwoulukdlike.org/bWJ6dzlCXRkEBDoPI0RdXRoIIWgnJR4gVT8mERMBDFNCNm0DWlwDUAlfS0ULWlFMQB8dCx5KCEsRDhZNGBFHRB8EDBwYBA4OExRSSxRHRhdeVlRED0NVXAIEXFFDQQ5aVExDCVlVTUAJXkQOB1gKX0tRSRkWFkoIWlRNTghZVUNFD1RW","fqdn":"tsiwoulukdlike.org","domain":"tsiwoulukdlike.org","tld":"org"},"ip":{"addr":"172.67.217.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:32.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsiwoulukdlike.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 18:36:31 GMT","end":"Wed, 04 Mar 2026 19:35:05 GMT"},"fingerprint":{"sha1":"BC:90:9D:F8:D2:75:B7:C5:CE:BC:23:53:93:EA:85:1F:9B:A0:4D:42","sha256":"1C:5A:5C:6B:DD:AE:83:7A:02:B8:A4:5D:1F:F3:C2:13:D9:7B:EB:75:FC:D5:C1:94:F1:CD:0B:B4:FC:E0:01:D8"}}},"request":{"raw":"POST /bWJ6dzlCXRkEBDoPI0RdXRoIIWgnJR4gVT8mERMBDFNCNm0DWlwDUAlfS0ULWlFMQB8dCx5KCEsRDhZNGBFHRB8EDBwYBA4OExRSSxRHRhdeVlRED0NVXAIEXFFDQQ5aVExDCVlVTUAJXkQOB1gKX0tRSRkWFkoIWlRNTghZVUNFD1RW HTTP/1.1\r\nHost: tsiwoulukdlike.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://delta.filenetwork.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ndate: Thu, 08 Jan 2026 23:26:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lO0%2BcG7z%2F0o2M6%2FCBrbiHdHRqYzZlMAaJKmpvEA4oYC6pZdVAzSEM%2FOYysm7gs2K1AOWrE0R5rH6pt0uevcvGVQZ3LHPLNCqf6fqS%2FbtfvrQEw%3D%3D\"}]}\r\ncf-ray: 9baf75de6ba21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"tsiwoulukdlike.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/logo/android.png","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:32.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /logo/android.png HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/android.html\r\nCookie: cf_clearance=wr5xv_6LdgyVASxfSyjMvDiZ5e2avi3rn3qTujROb9s-1767914790-1.2.1.1-k4npElnF4QzMZfG6QKvUswqQEH_zV2H4ta95Km68bXuw1JF3XVA1O90DJdBniCYvppZ1B2eZhxws.iSt.QbZrPlprYjzi5KQ5CvNY9F3rmTbkpMKVtADV4wHK1VXpFUwq46cnjyzka4ZKRCAr4h7azP4W_Gj5n7xxqqS1gLxf8Pl_p4HBwDix1xfVddGzTkCnO8uiJqOEVYmunJovUGVsFcK4lV8G7mw5DFI9FZyckI; _ga_YCFNYQXJVZ=GS2.1.s1767914792$o1$g0$t1767914792$j60$l0$h0; _ga=GA1.1.1778539505.1767914793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 23:26:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6358\r\nlast-modified: Thu, 21 Aug 2025 21:55:48 GMT\r\nage: 278\r\netag: \"68a795e4-31b5\"\r\nexpires: Sat, 07 Feb 2026 23:21:54 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-bgj: h2pri,imgq:85\r\ncf-polished: ok\r\nstrict-transport-security: max-age=0; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept, accept-encoding\r\ncf-int-polish-no-vary: 2026-01-08T18:57:19.985677949+00:00\r\ncf-ray: 9baf75df2d1f0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6358,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ecf42fc694a35c0804680b941e2f2350","sha1":"0ae2dc6a115fc9a3ba189c887fc2d3f3e2208e25","sha256":"e30223a52c0cc5952ef8c8503aa1816351c28004076308b54e42541e9af5bdbc","sha512":"76bfcc8fd39f55a88fa05bcfe01f70bf2d16dd2db70ddde8c57828dc09346551f8bdd357fcf1219ee49041c4d5aac47839f523b2db147baf59c9c54c9691167d","ssdeep":"192:wkj1KVvePYIB2VGVRyORTPmqGKVT/OwR1KBnTD:T1Ye20TyORjm9CzO61KB","tlshash":"ebd18e4447b63411dc2d5c7797d84365e9bb2187d532fb8ad674a0f30ca73a31e0b916","first_seen":"2026-01-08T23:27:03.563392Z","last_seen":"2026-01-08T23:27:03.563392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/file/Delta-2.702.622-02.apk","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T23:26:29.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /file/Delta-2.702.622-02.apk HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 08 Jan 2026 23:26:29 GMT\r\ncontent-length: 0\r\nlocation: https://delta.filenetwork.vip/android.html\r\nstrict-transport-security: max-age=0; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9baf75caff9dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20476,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":40,"dns":15,"connect":1,"send":0,"wait":3,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dv.otitishanded.com/tXUE9NS591Jx/131417","fqdn":"dv.otitishanded.com","domain":"otitishanded.com","tld":"com"},"ip":{"addr":"172.241.53.157","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:29.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dv.otitishanded.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 02:11:49 GMT","end":"Sun, 08 Feb 2026 02:11:48 GMT"},"fingerprint":{"sha1":"8E:C1:2E:83:3D:CC:3C:A6:D4:C6:9D:45:AF:46:44:FA:39:87:6A:D2","sha256":"34:27:36:92:4B:8E:4E:2C:BE:B0:A8:EE:EB:9B:79:E1:D3:84:2D:DB:6C:4A:A6:4E:52:35:CA:D3:25:87:7C:54"}}},"request":{"raw":"GET /tXUE9NS591Jx/131417 HTTP/1.1\r\nHost: dv.otitishanded.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://delta.filenetwork.vip\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Fri, 09-Jan-2026 23:26:30 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne; expires=Fri, 09-Jan-2026 23:26:30 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-04-03T18:52:28.676081Z","times_seen":13602,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":81,"dns":41,"connect":20,"send":0,"wait":22,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"dv.otitishanded.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cdn-cgi/challenge-platform/h/g/scripts/jsd/fc21b7e0d793/main.js?","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/fc21b7e0d793/main.js? HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9baf75d13cd60afe-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nstrict-transport-security: max-age=0; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10522,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10522), with no line terminators","md5":"2ea538009ff52e805d8baecbb5fdc8ed","sha1":"4ac4142d671b92ab4f31231366f151158e542405","sha256":"70b4fa43491033da5e2b03693e196d2fbf239700fe3451643b7d32534a1bbe19","sha512":"c286e276c1f73e806e1aa6e14ad9de67cf5eda8bd6bcfc4f4e8dfddd14a82fece0f86f32595c158d6779efdcf23a55e0e0adf32d3c34b8d89d35fa5f1ef19988","ssdeep":"192:giSLSxfOxMxscsMr6tjXeCOP5udEWGVNxTKsUygS0kOQ:lSLSxWxa5udEWS/OQ","tlshash":"d522facbbe8871e4025a64e062bbfddd21684d951cb01d0e812359e8be32fddb64dd8d","first_seen":"2026-01-08T23:27:03.565112Z","last_seen":"2026-01-09T00:19:16.169048Z","times_seen":7,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:29.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/android.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 09 Jan 2026 00:14:29 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 23:26:29 GMT\r\ncf-ray: 9baf75cd5cad0afe-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T19:31:23.981427Z","times_seen":94257,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:33.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 93\r\nOrigin: https://delta.filenetwork.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":93,"data":"{\"ad_tags\":\"Android%2CUpdates%2CDelta\",\"page\":\"https%3A//delta.filenetwork.vip/android.html\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Thu, 08 Jan 2026 23:26:33 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"32323194b8b07fd0aa9b6f7fc79a7b30","sha1":"ea248c45722bff267b55a453dc794bc42171cef6","sha256":"080040b4937f3f423f32cd7f19b2a79ba1e1e213f1d9f4f4db4f609d4ad778d8","sha512":"e6b7cefe758be1e47a28ed8fc319cd61814e942838f0f65a26e629f0af39fae2547bece75c020c0cad5294b741a20911757b43b493dea2d3b109e4cf3ae3e9a3","ssdeep":"","tlshash":"9d600008200a08020880a000a20082002000a002002008282880008083002000888800","first_seen":"2023-09-22T06:12:14Z","last_seen":"2026-04-03T17:32:49.392155Z","times_seen":2237,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cf-fonts/v/inter/5.0.16/latin/wght/normal.woff2","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:32.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /cf-fonts/v/inter/5.0.16/latin/wght/normal.woff2 HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/android.html\r\nCookie: cf_clearance=wr5xv_6LdgyVASxfSyjMvDiZ5e2avi3rn3qTujROb9s-1767914790-1.2.1.1-k4npElnF4QzMZfG6QKvUswqQEH_zV2H4ta95Km68bXuw1JF3XVA1O90DJdBniCYvppZ1B2eZhxws.iSt.QbZrPlprYjzi5KQ5CvNY9F3rmTbkpMKVtADV4wHK1VXpFUwq46cnjyzka4ZKRCAr4h7azP4W_Gj5n7xxqqS1gLxf8Pl_p4HBwDix1xfVddGzTkCnO8uiJqOEVYmunJovUGVsFcK4lV8G7mw5DFI9FZyckI; _ga_YCFNYQXJVZ=GS2.1.s1767914792$o1$g0$t1767914792$j60$l0$h0; _ga=GA1.1.1778539505.1767914793\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:32 GMT\r\ncontent-length: 48444\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=0; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9baf75df8d220afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-04-03T19:42:20.540997Z","times_seen":19680,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngseriegentsf.org/YU4zNjgALFBbBwBzURBNEyIOEwonawFwXFA0W1tcUD5LTkAAJFUYWw0hRlJeEyFdQhYPK0cTCicJaltuGC1YZ3oiJkRjXRkXfnBTWH9mcFwpHF1sazA5endxMBxqcFACIXVRagIIcAZ3IAxEbnUjG3h3eg0/dXdPIhhwAmoiJkR1XTUHA3F6Fg1mX2EQAEp0bCcLchMKIxdbb14nJQoGaiAlZ357LyhiTlsCBAIPbTcMflF5JyZ0YHwgHXBeVDEFYl1xKQxUXn4jD3dxfygWcXMABwVLUXUpJgdaalAtA2QKER1ic3oiLHFjdSkMakR+MxRrZ3AwA3ZgFQUPV3B2NxZ2fFA0HVduaSkfZXJ6GQtQc1w2A3VSCjQmAnNqDAhhfAkFD1d0eTUYA3N+NH9pcWApHH9nfSMNekFbJglhB1A0DX13aQ8YYGBtLw1XY1w5H1tnTCQPcmNwNTZ7YEIzClcHYi0fX2dAOX9iEFISIV1GBTEfWVh+UQ1rc1xQPwF6","fqdn":"ngseriegentsf.org","domain":"ngseriegentsf.org","tld":"org"},"ip":{"addr":"3.164.240.17","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngseriegentsf.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 23 Nov 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:60:02:5C:27:9C:5F:6C:68:E1:D7:7F:02:9D:BB:B2:1E:2C:36:8D","sha256":"CB:10:D9:2B:F8:CF:A0:3F:2A:B2:47:2C:1E:1B:E8:E4:1B:D0:1C:B5:C2:74:15:33:8C:82:79:DE:49:12:7F:3D"}}},"request":{"raw":"GET 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 HTTP/1.1\r\nHost: ngseriegentsf.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1222\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a22ad523898ca1a66b4560cbe5984662.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: ax07-eUWJHTNQgjPfBAO9CpgqR1JP3TcPQ2Qm8U1cV_AUa3LnYSWAw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3084,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3084), with no line terminators","md5":"a98f7373f02de1d8d8c50158ae8d1d15","sha1":"d5b553046ef81df9f15a0faf6fade410f8cbcc61","sha256":"30b93eaa3c12d667b8420fa2f268a06c5a19d073abdafc7e70fd2f9bf001a0b0","sha512":"c34ecfbc69f45af74c1307eb81af863a55888ea2d9b54b512e53f7b06210f9a29a680e76e3ea2879c4016d036df0a1de5f5fe7959e1bb1aba45fba6f3e5dbcb2","ssdeep":"","tlshash":"4c51018d34f3a081c2f36065403bba9afa289aa5874cca14963d96bcbd715d96317f4c","first_seen":"2026-01-08T23:27:03.56834Z","last_seen":"2026-01-08T23:27:03.56834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":73,"dns":22,"connect":10,"send":0,"wait":120,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngseriegentsf.org/WE9meFc5LQUVaDlyBF4iKiNbXWUealQ+M2k1DhUzaT8eAC85JQBWNDQgExwxKiAIDHk2KhJdZR42NC0ZMh5UCzoUDlYUARwKFzpkbS4CSxENLCBJLgIdKwATMQFDShUaNj8wGgsFKDIGET8sH2c1BxwxJB0cDj4aISAyIgYdfSo5ZyIZD0g/FjYJHTMQDiM7Z2g3KSkzfX0kL2UVOScRZxUqIS0QFB4OTDQzGg88LjxqVDoBahoANgQvBgAfDi0DAUgnHCUrShIxIyg1FBIqKh8GfX0gMzBgOSUVFSAFPiIRPBg8KjRoAh8zMGghJDweLx0IPjUTNQI/NA47VhtndX4cLDkBDTQWEToCDxcZPBlfHzQbCQsvDw14MCAzFysBPhA7GRVLGQ0VETM5CjgwSmY6LSEiBTs4ER8eGSgVLDk7CTMgGTkrPjYEO34WHzQOAgo5PTsiJCsgDBYuPTs7Iw4ANQ4BCjA5MDZAEiQ3IRZFPzobDw1maygu","fqdn":"ngseriegentsf.org","domain":"ngseriegentsf.org","tld":"org"},"ip":{"addr":"3.164.240.17","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngseriegentsf.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 23 Nov 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:60:02:5C:27:9C:5F:6C:68:E1:D7:7F:02:9D:BB:B2:1E:2C:36:8D","sha256":"CB:10:D9:2B:F8:CF:A0:3F:2A:B2:47:2C:1E:1B:E8:E4:1B:D0:1C:B5:C2:74:15:33:8C:82:79:DE:49:12:7F:3D"}}},"request":{"raw":"GET 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 HTTP/1.1\r\nHost: ngseriegentsf.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1217\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a22ad523898ca1a66b4560cbe5984662.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: pygxGSeFtCqJ_xP-i2UT-e3-edooaJY81gQog5xoXg2YnYpzry09Nw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3072,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3072), with no line terminators","md5":"fd6addecd8a74e3e6030de2bc46b5428","sha1":"edb70b4166e2a5784b1636dce40940c7898683e2","sha256":"c23604f50ac719cedf390e7d4f34233f3a6f0c273f260e1a15e308bd8921716d","sha512":"f9e16184d1c31163eb91abf7ddef25bcbb784d13e3ac26d437c55669eb3efa112ce0e8aaf3396ea3aa90ab2e9b265899a1e5767591a1fcd5f3d13c1c6e7dc482","ssdeep":"","tlshash":"ef51008d34f3608282f27069003bb496fa3c5a95834cdb18867d96bcbd715d96327f4c","first_seen":"2026-01-08T23:27:03.569823Z","last_seen":"2026-01-08T23:27:03.569823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":67,"dns":34,"connect":10,"send":0,"wait":119,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsiwoulukdlike.org/MUxZZmYeczoVW1UhDxI8ZgIWMFdBHQ8jU2YbH1cHZX0DAD5nAX8SD1VxaFRUBHhrVkBBJT1bVxc/LQcSRD9kV0BYIj8JWxc6ZFdIAnh3VVAfe38TWwBqLRYHVnFoQBZFODVbVwZ6bl9XBXtgVlIDew","fqdn":"tsiwoulukdlike.org","domain":"tsiwoulukdlike.org","tld":"org"},"ip":{"addr":"172.67.217.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsiwoulukdlike.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 18:36:31 GMT","end":"Wed, 04 Mar 2026 19:35:05 GMT"},"fingerprint":{"sha1":"BC:90:9D:F8:D2:75:B7:C5:CE:BC:23:53:93:EA:85:1F:9B:A0:4D:42","sha256":"1C:5A:5C:6B:DD:AE:83:7A:02:B8:A4:5D:1F:F3:C2:13:D9:7B:EB:75:FC:D5:C1:94:F1:CD:0B:B4:FC:E0:01:D8"}}},"request":{"raw":"GET /MUxZZmYeczoVW1UhDxI8ZgIWMFdBHQ8jU2YbH1cHZX0DAD5nAX8SD1VxaFRUBHhrVkBBJT1bVxc/LQcSRD9kV0BYIj8JWxc6ZFdIAnh3VVAfe38TWwBqLRYHVnFoQBZFODVbVwZ6bl9XBXtgVlIDew HTTP/1.1\r\nHost: tsiwoulukdlike.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=079%2FHbVVzVI3rIUII5oVtEBquHugNyy4O%2B0AZTpmvOnxIfs0%2Fzelv0JxLmkHEPkyNa34xOYyQ5eaf5WiRNnchEhu%2FHXFaTXzEZoz1cywFsY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9baf75d0be3e56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":79,"dns":19,"connect":1,"send":0,"wait":122,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"tsiwoulukdlike.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S1444337835:1767914791070047\u0026ifkv=AXbMIuD7DWVBEinnWEMUDFtswZLiMizR-Ot_9dy5ICNWKMmjMHuuGz0w6Qnre14wxrNrMZHh2ynl","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:31.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S1444337835:1767914791070047\u0026ifkv=AXbMIuD7DWVBEinnWEMUDFtswZLiMizR-Ot_9dy5ICNWKMmjMHuuGz0w6Qnre14wxrNrMZHh2ynl HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://delta.filenetwork.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:k0ZaiBqGXYOTmfmKD61TspXphDQAJQ:k-F48tEhDBenj6Ta;Path=/;Expires=Sat, 08-Jan-2028 23:26:31 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 08 Jan 2026 23:26:31 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S1444337835%3A1767914791070047\u0026hl=en\u0026ifkv=Ac2yZaXE-OLZac0heBOW05gUGiFPyHowwNkTm95nK4F4nmIy0tyyTdX2EV8mhcKzNN3VTeDLO6t8\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-SnOEw_5DPGdrp7o-xKbPWA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 412\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S689771183:1767914791044952\u0026ifkv=AXbMIuBaKPpArDodhBfV-POTPnpqz8Drt54XqneKBzREsrw-DUUsoJiUMC0GqotIuI_z6e6ERePT","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:31.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S689771183:1767914791044952\u0026ifkv=AXbMIuBaKPpArDodhBfV-POTPnpqz8Drt54XqneKBzREsrw-DUUsoJiUMC0GqotIuI_z6e6ERePT HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://delta.filenetwork.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:tfwZJiDFPTzy7LxPnu2EWF8LD4qEhw:tznYnT8rkP0kl3Rt;Path=/;Expires=Sat, 08-Jan-2028 23:26:31 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 08 Jan 2026 23:26:31 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S689771183%3A1767914791044952\u0026hl=en\u0026ifkv=Ac2yZaXYi1R3AUZeCEq7O8_hklguuRUU5F13Hi1j4PpcDyn2bA8kjxA6sFWzWr0VVuhn1jq5INnH\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-V5wmlxXLn8ztzCzMbbafkA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 418\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cdn-cgi/challenge-platform/h/g/scripts/jsd/fc21b7e0d793/main.js?","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:32.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/fc21b7e0d793/main.js? HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=wr5xv_6LdgyVASxfSyjMvDiZ5e2avi3rn3qTujROb9s-1767914790-1.2.1.1-k4npElnF4QzMZfG6QKvUswqQEH_zV2H4ta95Km68bXuw1JF3XVA1O90DJdBniCYvppZ1B2eZhxws.iSt.QbZrPlprYjzi5KQ5CvNY9F3rmTbkpMKVtADV4wHK1VXpFUwq46cnjyzka4ZKRCAr4h7azP4W_Gj5n7xxqqS1gLxf8Pl_p4HBwDix1xfVddGzTkCnO8uiJqOEVYmunJovUGVsFcK4lV8G7mw5DFI9FZyckI; _ga_YCFNYQXJVZ=GS2.1.s1767914792$o1$g0$t1767914792$j60$l0$h0; _ga=GA1.1.1778539505.1767914793\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9baf75de6d160afe-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nstrict-transport-security: max-age=0; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10639,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10639), with no line terminators","md5":"6d111c0c9f4827984c6c61b0696ec251","sha1":"7aef46f9b768f446ed5efecf99c9144eba9b39ad","sha256":"7f7017787bc45407c7a7d538e795ba04b4a1141bf911b4cdfadea773107c040a","sha512":"bb49de523f81a5666cfbd502ba5de0ddea4b2be9fed78e5382a276ed7e8ccde43641722f4844f8717c5f4bf54f06ee1043a9ee0148bd5d87bb35a634446f4ad6","ssdeep":"192:g73bGiytHRLqaeJjqFMf1tIXpMJk0Xz0k7r89qxvS3VfxaiRbluX+k:K3aJtx29Pj0k7g9CSFJaWBo","tlshash":"3522b5c7be4862f9c61620f021bbf9ed6168b99505789d0d85234cecbe32b897a0dd4d","first_seen":"2026-01-08T23:27:03.571239Z","last_seen":"2026-01-09T00:04:19.121014Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/android.html","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T23:26:29.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /android.html HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Dec 2025 22:39:13 GMT\r\nserver-timing: cfCacheStatus;desc=\"HIT\", cfEdge;dur=7,cfOrigin;dur=0\r\nvary: accept-encoding\r\nage: 400\r\ncache-control: max-age=1\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: 9baf75cb0fb0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20476,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (8380)","md5":"be4a2cd5dafd84599475af48ec650dbd","sha1":"849212e25998c1766e8ae164a1bfd43833d10a08","sha256":"c5ecee2bcf70810ff4f31ed4184a5d2f73c0e39bf14a218d2f0e1fc0240a2170","sha512":"01410dc907254457e8ed5455602aba2388d715e5abe14e175c97da7bcbc3a82822b530ae81583ea2d3983d73407e0be3737347555f11f0071a33749ae64d74a1","ssdeep":"384:f5ZQBWO63dpW/ZBAQWhfEbHZGWDznoZyM6JcWZroTcuZiZiBWZo6Ni6hzqZAl1HG:fpuzqZAenqbb3x/a","tlshash":"d3926324243b1a1081e7cc9231da7e073c15e42394979612fb6c48d8cfebc6adbdaf59","first_seen":"2026-01-08T23:27:03.572861Z","last_seen":"2026-01-08T23:27:03.572861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:29.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://delta.filenetwork.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9baf75cdbd86712a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-03T19:25:40.950326Z","times_seen":330022,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":43,"dns":19,"connect":1,"send":0,"wait":16,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/particles.js/2.0.0/particles.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /particles.js/2.0.0/particles.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"5b44-gBf4sYaQd9tyhXPxykaEoAr2lGI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\nage: 1945311\r\nx-served-by: cache-fra-eddf8230035-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6197\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23364,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (23002)","md5":"00debcf6cf0789a19cee2278011afcd4","sha1":"8017f8b1869077db728573f1ca4684a00af69462","sha256":"faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6","sha512":"29e7f9b1cee07d369c47b4d929e95cad1b35e62a5fefeb7e9fb661ea628d25b996fbf4517425bd9f07cb9f8617d2cda73ba2afe58d8286a8086a4682e8f5b4f4","ssdeep":"384:NkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:NC7T6uYvn8wRxwyryVOEKXW5","tlshash":"61a2934d23f73e77378ab2e09be9d122c774a4d1399b04b0f93c667da52549201ee7a0","first_seen":"2023-03-07T01:16:44Z","last_seen":"2026-04-03T19:20:19.789735Z","times_seen":3887,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":179,"dns":11,"connect":18,"send":0,"wait":15,"receive":1,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cf-fonts/v/inter/5.0.16/latin/wght/normal.woff2","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /cf-fonts/v/inter/5.0.16/latin/wght/normal.woff2 HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/android.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-length: 48444\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=0; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9baf75d0acd30afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-04-03T19:42:20.540997Z","times_seen":19680,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":58,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\nvary: Accept-Encoding\r\ncf-ray: 9baf75d0dcd50afe-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/fc21b7e0d793/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nstrict-transport-security: max-age=0; preload\r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10522,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=385787","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:33.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"OPTIONS /fp?tag_id=385787 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://delta.filenetwork.vip/\r\nOrigin: https://delta.filenetwork.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Thu, 08 Jan 2026 23:26:33 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://delta.filenetwork.vip\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":134,"dns":31,"connect":24,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dollishreman.com/gbPhURIThxsO/131804","fqdn":"dollishreman.com","domain":"dollishreman.com","tld":"com"},"ip":{"addr":"172.241.53.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:29.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dollishreman.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 04:08:23 GMT","end":"Wed, 08 Apr 2026 04:08:22 GMT"},"fingerprint":{"sha1":"B0:13:0E:37:58:83:12:14:59:2E:39:D2:33:52:8E:E9:DA:BD:5B:BA","sha256":"66:1B:AE:4F:45:51:98:01:3F:70:21:DD:91:70:9B:35:4B:CA:1D:D2:D4:F4:0E:9A:61:4F:BC:2B:EC:6D:E5:B7"}}},"request":{"raw":"GET /gbPhURIThxsO/131804 HTTP/1.1\r\nHost: dollishreman.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://delta.filenetwork.vip\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Fri, 09-Jan-2026 23:26:30 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne; expires=Fri, 09-Jan-2026 23:26:30 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4fc71bf68a1d477bd1523733e34d1e90","sha1":"15119105cffbe108b6cf290146ab02c9aa8517ba","sha256":"74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce","sha512":"e8e5f5430841f9cdaad492efce3fed11992913ad2b714b27c6fd147c55b2c56dc1b896635f24c2b180d4215c70ba9a042847d7d9cf3ff8a67b636a4c0ca1ce3d","ssdeep":"","tlshash":"f440000300000000cc300000300300000000000000000c00c000000000000000000000","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-04-03T12:19:59.158661Z","times_seen":10521,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":54,"dns":12,"connect":19,"send":0,"wait":29,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"dollishreman.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"dollishreman.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"dollishreman.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cf-fonts/v/inter/5.0.16/latin/wght/normal.woff2","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:31.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"GET /cf-fonts/v/inter/5.0.16/latin/wght/normal.woff2 HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/android.html\r\nCookie: cf_clearance=wr5xv_6LdgyVASxfSyjMvDiZ5e2avi3rn3qTujROb9s-1767914790-1.2.1.1-k4npElnF4QzMZfG6QKvUswqQEH_zV2H4ta95Km68bXuw1JF3XVA1O90DJdBniCYvppZ1B2eZhxws.iSt.QbZrPlprYjzi5KQ5CvNY9F3rmTbkpMKVtADV4wHK1VXpFUwq46cnjyzka4ZKRCAr4h7azP4W_Gj5n7xxqqS1gLxf8Pl_p4HBwDix1xfVddGzTkCnO8uiJqOEVYmunJovUGVsFcK4lV8G7mw5DFI9FZyckI\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:31 GMT\r\ncontent-length: 48444\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=0; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9baf75d99cfd0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-04-03T19:42:20.540997Z","times_seen":19680,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adspector.io/sync?ssp=44","fqdn":"a.adspector.io","domain":"adspector.io","tld":"io"},"ip":{"addr":"172.67.161.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:33.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adspector.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 03:16:35 GMT","end":"Wed, 11 Feb 2026 04:14:56 GMT"},"fingerprint":{"sha1":"70:93:AE:0A:86:B3:EC:6A:26:43:0C:59:15:5C:6D:1C:C5:C6:F8:11","sha256":"16:49:F6:10:DA:6C:F1:EC:DB:5E:3C:6B:52:FE:1B:B8:2A:EC:A0:D1:73:71:15:1E:94:F3:29:C7:95:AB:81:A3"}}},"request":{"raw":"GET /sync?ssp=44 HTTP/1.1\r\nHost: a.adspector.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Thu, 08 Jan 2026 23:26:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dxsoNyFKlboRsuzSjA3zHWk7jv6mUsy3CNYqVf11STK52JbMpymkbj7iBXaK0lDGIL4NID7eUzDdWsB6snv8Zt7aMu89hD%2BiMY803Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9baf75e55fbb56ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":56,"dns":34,"connect":1,"send":0,"wait":4,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:33.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://delta.filenetwork.vip/\r\nOrigin: https://delta.filenetwork.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Thu, 08 Jan 2026 23:26:33 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":121,"dns":14,"connect":25,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 14:41:35 GMT","end":"Sat, 21 Mar 2026 15:38:12 GMT"},"fingerprint":{"sha1":"F5:49:6B:45:9A:B4:87:30:F2:34:12:BC:49:A1:48:31:A2:B6:9B:7F","sha256":"55:CC:57:AE:F5:9A:5C:FB:E7:85:83:CD:13:37:E9:19:A2:79:01:68:7B:D7:7F:4B:80:61:9B:7D:C8:9A:17:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://delta.filenetwork.vip/\r\nOrigin: https://delta.filenetwork.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: csu=879660939085260@1@1767914790; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://delta.filenetwork.vip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sjKktHXyjLCdwX3s%2BhaDO1h5wnk9XoncW6pKDQtWrrj4TmHMJa5D4KZvP9faR6uuFbv05ISs3ZA4LRV6RUU7V2jxXInTUTZcwad37z2VagoQ3w%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9baf75d0da553181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"863f05e0a29bd640ade4b78a25b46e97","sha1":"eb27cbb1df0a6a2038690e92640289f81bc4344a","sha256":"2d5aabf3acf34f553b1893a32f0dd2c2707ced6f6a352d8df99618fa50542199","sha512":"320d4b3761f83becbf32fb78d1ad76acdf51d23b367928e9f9c5d7db1cd069599c670105b1865ea06eda705d0e677c44fd44d0a11a197f1a30ed948616209979","ssdeep":"","tlshash":"898000a222ab8008880fa082c00020000f2832f0bc08022f0000e002220c000c202f00","first_seen":"2026-01-08T23:27:03.576638Z","last_seen":"2026-01-08T23:27:03.576638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":105,"dns":37,"connect":2,"send":0,"wait":120,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:UfdEwXPJCiFFYP-WIYgNyPlHZRorGw:0Z7U-9kXH18XrOzs; Expires=Sat, 08-Jan-2028 23:26:31 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 08 Jan 2026 23:26:31 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S689771183:1767914791044952\u0026ifkv=AXbMIuBaKPpArDodhBfV-POTPnpqz8Drt54XqneKBzREsrw-DUUsoJiUMC0GqotIuI_z6e6ERePT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-CjrNOUZFge7d5tHYtMk9Vg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: unsafe-none\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":103,"dns":0,"connect":17,"send":0,"wait":21,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acf60dec54.f435ee855c.com/in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzAzNDQ4Mzk1ODM2MTgxNzAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQwLjIiLCJ0YWdfaWQiOjM4NTc4Nywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjY2LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"acf60dec54.f435ee855c.com","domain":"f435ee855c.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:33.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acf60dec54.f435ee855c.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 02:48:02 GMT","end":"Sun, 05 Apr 2026 02:48:01 GMT"},"fingerprint":{"sha1":"D9:02:2D:A7:E1:78:AF:1E:EB:FD:75:6A:3D:8C:6C:91:19:75:DA:62","sha256":"98:88:D9:80:B5:58:D0:58:FF:E8:61:41:62:90:C6:54:7A:A9:E1:52:7C:7E:7E:83:97:6F:15:3A:8D:14:A7:45"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzAzNDQ4Mzk1ODM2MTgxNzAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQwLjIiLCJ0YWdfaWQiOjM4NTc4Nywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjY2LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: acf60dec54.f435ee855c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://delta.filenetwork.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:33 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":146,"dns":54,"connect":38,"send":0,"wait":38,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"acf60dec54.f435ee855c.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wh.balzadicyema.com/tlPEVZF2uGqNs/131417","fqdn":"wh.balzadicyema.com","domain":"balzadicyema.com","tld":"com"},"ip":{"addr":"188.42.241.109","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:29.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh.balzadicyema.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 13:03:27 GMT","end":"Sat, 28 Feb 2026 13:03:26 GMT"},"fingerprint":{"sha1":"B5:C0:CE:B8:46:10:CB:61:D9:4B:03:5D:F1:AD:EB:56:46:D4:37:8D","sha256":"A1:41:CB:FD:A1:4F:3B:E4:AD:96:31:9D:AA:77:FB:B4:48:89:18:BF:F9:1E:80:A9:96:E5:1C:A9:56:0F:38:F2"}}},"request":{"raw":"GET /tlPEVZF2uGqNs/131417 HTTP/1.1\r\nHost: wh.balzadicyema.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://delta.filenetwork.vip\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Fri, 09-Jan-2026 23:26:30 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne; expires=Fri, 09-Jan-2026 23:26:30 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-04-03T18:52:28.676081Z","times_seen":13602,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":143,"dns":111,"connect":17,"send":0,"wait":21,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"wh.balzadicyema.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tsiwoulukdlike.org/NXh6SUQaRxk6eXstHg8JWBsyLXdgPy8IBhBKPCoFYy4+AXEHOxYQYkERHnR1B0pNenICXgogIAhJXDowVAwPOnkEXhMnIlpFXD95BFZJfWoGTlR+YkBFS28wRRkddHUTCA49KAhJTX9zDElOfn0FTElx","fqdn":"tsiwoulukdlike.org","domain":"tsiwoulukdlike.org","tld":"org"},"ip":{"addr":"172.67.217.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsiwoulukdlike.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 18:36:31 GMT","end":"Wed, 04 Mar 2026 19:35:05 GMT"},"fingerprint":{"sha1":"BC:90:9D:F8:D2:75:B7:C5:CE:BC:23:53:93:EA:85:1F:9B:A0:4D:42","sha256":"1C:5A:5C:6B:DD:AE:83:7A:02:B8:A4:5D:1F:F3:C2:13:D9:7B:EB:75:FC:D5:C1:94:F1:CD:0B:B4:FC:E0:01:D8"}}},"request":{"raw":"GET /NXh6SUQaRxk6eXstHg8JWBsyLXdgPy8IBhBKPCoFYy4+AXEHOxYQYkERHnR1B0pNenICXgogIAhJXDowVAwPOnkEXhMnIlpFXD95BFZJfWoGTlR+YkBFS28wRRkddHUTCA49KAhJTX9zDElOfn0FTElx HTTP/1.1\r\nHost: tsiwoulukdlike.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WBInCXIph87mbyfnnuXMdpR8%2Fjl7IRylswUX0Z9v7SRuhPz%2Fip%2F7gATwt4iq5p8mlR0N%2B7TZj3pWL7%2BFK9rRxCADVqD6EzCwQ8Urs%2Bjlw8Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9baf75d0be3856b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":52,"dns":0,"connect":4,"send":0,"wait":119,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"tsiwoulukdlike.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 05:32:34 GMT","end":"Tue, 31 Mar 2026 05:32:33 GMT"},"fingerprint":{"sha1":"50:AC:07:EC:79:B5:32:ED:7F:C5:56:C7:D3:5B:2F:F0:0D:A1:DB:81","sha256":"04:83:11:68:E8:6D:EA:03:69:80:2F:F0:AF:3E:A6:1D:46:55:C1:87:6E:C7:D9:C1:48:93:67:CF:0E:20:0B:BA"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 24 Dec 2025 08:35:28 GMT\r\netag: W/\"694ba5d0-24115\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 08 Jan 2026 23:31:30 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: DS8138\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147733,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bf20c44981795047ce2c610a2100a35a","sha1":"24c225c700d3f4208417651f6779de9758cd90a1","sha256":"0ec0d01651f974e70dc3c7d4cc50599dbd3a818863b7011ef052c3a0641dc161","sha512":"97612ed9de3cfb245c7e6a70420ca817b99f7b6db0dae1395fbc16c1eef8e4cb4ff993954fbddc4917563840baeef269a9edea324b06e0131fc2e2e833266e7a","ssdeep":"1536:O18MdnC5OPz8QP9r2RcZSgtK8sBggHhO12FoX50FtQySd8uj6DzKEVKf7lbe0etc:mFSGSgtqZXqd8uODG0K5y0etsz","tlshash":"c8e34adcb2d2b07407e75099d83f1206b73a1a16b80c9058f6a6e9c17878ddb5237f7a","first_seen":"2025-12-24T08:41:20.196676Z","last_seen":"2026-01-15T08:09:34.935655Z","times_seen":438,"resource_available":true,"data":null}},"time_used":709,"timings":{"blocked":247,"dns":31,"connect":104,"send":0,"wait":212,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"delta.filenetwork.vip/cdn-cgi/challenge-platform/h/g/jsd/oneshot/fc21b7e0d793/0.7755649083337259:1767914023:0L69baCR9GVk2uUZnzbej57Pq3pT5KyonKgjnhw_J1Q/9baf75cb0fb0c272","fqdn":"delta.filenetwork.vip","domain":"filenetwork.vip","tld":"vip"},"ip":{"addr":"104.20.40.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:30.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filenetwork.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 04:13:57 GMT","end":"Sat, 21 Feb 2026 05:13:46 GMT"},"fingerprint":{"sha1":"73:32:06:9C:B2:59:A8:88:73:9A:32:9B:1D:1A:79:74:1A:5E:EE:24","sha256":"83:F0:A6:0F:4F:CA:41:FF:AF:47:28:02:EB:C6:B0:1E:5F:06:5B:86:DE:4F:45:D9:41:C2:C8:0C:D8:5F:96:3D"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/fc21b7e0d793/0.7755649083337259:1767914023:0L69baCR9GVk2uUZnzbej57Pq3pT5KyonKgjnhw_J1Q/9baf75cb0fb0c272 HTTP/1.1\r\nHost: delta.filenetwork.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12197\r\nOrigin: https://delta.filenetwork.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://delta.filenetwork.vip/android.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12197,"data":"$HRVstbr30mubuu3rS7uu7rz7SR7W72VXeaV3U78VNQ3lQ12EC75V$Qte17+7DD7UC1o7CP3IlsIa3EEpIa7Idd77Q-7qcLZI7rJ7X+RFuWktt758iLyb-LkR7YdxWSXRlQaU0twNFV7kbhsk-MH7oGJoQIHVMjvf7YTbC0FAHCUtSqUtgV7L-GLCcjM073hdc7CCgVFl8wTYl73Ww7bE7YsUhVmp5rP4R0njMday80d$0wHfE73LC77EBqFxrB0xJ7bSZajD$bHX77hd8Im3R73vl$mTRNpt7UHoFTRFNN+tE7bpCU7ow7qLmqiFKHEa7dxP-1kgZ77U2k0A--3Px1Px0Pa7eX-79aA-a7RI378jok2Qabw52QiXFdY5$-D$TKmFQB2jsTPe1QuUP1hVBXcc77YKlVR7VtdzhoWV7KrDonXX-IHaU1tDdMUSfI0e1SJHoBDjmX7rd2R77Jpp$MLBmtoQzJkV6qmo8pA5tlZL5zJir6qtzLCx0CTvaLIzL7UpKFRedYIRWILHV73uwlmmNtWN4Xqbf-Ausbt-5z9VkkAUks8pxu3jbSfCsbcchYlA8TvdGYGNmDq$UU5-8IUhip-mvlm$$mnlAMpAQ6qCTawlQwmlYz1c2XAswaEhG6$S2d17STumaepoa+KqnzEV4LNBlnaHZMJ2ATF4vlRGGVsAYaDnQBXb-2sqy8AnX$jgiUrBL$9Du8D8R1n$syZJ7-rjxmcdWKI7eda49y5zvzyQxk30WDK8SfnGxQ3mRRKe775J-S8HgQmPk3R0QWp195D32Y4i4-0bxXrCAcFnRd0XNmaK$03P6FSY008lmACmXz-PFp7Af3-5tJDP8V+R0r-j70R8xUtmPTUQ9VE3R8h7Io8-lUtsVtb+aRTUX07CDXQ8KUzx5r7oqVP7HSaPclU2yY70CRxR08RltVAVZ7s-NDXmA9IuDp0MKCLv2XEalZ7UaV-UFeyDofaEmR7AIttuhvT-ppC8Hn7AIXFVgDXYT+6oi68mkL-hDoXkHZPN6YVIHqr2zB2oZRUVomKpV3lXH6zuKrqhZkMRZmoMq9mkVe7ht6TE6pwZK087Pk3HEa9KQjqjIQEaQjujv78-CJpVLxHbhkzKjGvVbFUVBs7$heXKgXKmP3VL7o5KVhQCHoUKWFHr8eUmmUrFRq2CVEUWqsI7ZRVLUK7Pa6QZHtCYMHBMYLMT9v6VT3R07PdHJIm7-xzvuHxzpmfu7zKYSaKYhfpt7Dv2h9rmR+IX-KitXUc8m-DcxFwG7m7YtUCtEqPP7zDUa3pYvWIWQRC8H0bjVT5PP3RNQP6UE8Qw1XAjRL9QJN1rX-u89qGpSdPokK2TRhmu7PelL+w8HQ8Ym79Q1jln7Cz-FPjEQ7AozEVP08ftV1e7X6nYS7P7ES02eI517EEoXKrb4-KI3X2lf5P0wjUS0Cj3EMlWfqGc8y6DKV1Mn779HdPjUEg9pv18X2Kcjr$AcoDh8cuw++1Udk7t3lwQP7Bp9k1bL8+3BmfGDcV0Gvam2GA2MH9VPwEaDB6B9u7GoGvH7ZsRFHa36HU27cR07obdbBJ9M9qWw0$JL7a5MCPpuHF-Y7Nqqa7muF7$PCV6+R7mZEFI$90PgjgbJ3qlDkR8rJQ7mdE3t7QVQs-dKUZdF46VkKCbg70R0+ajkp5L-8t0XRqTx$6Y4AxTipK$meHWUXbt0VLDr7hS1rxQzzatbtUVxo98QVwQUmot2mr5Sx3EUH+w+Hw1itiJk+Qjtpe8m+RbYD5AJZo-rA0pahENZh8f+uZ37PyVzVJbLNQ8WE7R8aM3qVzYSxoaYPz53dK4wk-6Azx1s-1KI7Cpzz7NYWzLm2$RwSCKA-lV0a5KMzXIx-KeYppREQQ7mekST5X$RE7mhtK-mwpV9ZR81SJjXNPSxQDV3H7m7In1RD8YLNt+LIw$YX31mSVPY8pq0UXmhELwrjQ+wP7rdPZade5guZ2XTCdlVXULNFb8zJd1oFl$ueYLLRLrSkYo17uRIJPK-Rtq-g4839Uglwrh7bhdadVQheYD7D3pxzzDf2+M-blq1BscRsIrSPKJc6N23ba0akupeeNuNT$2hmTXdU$m1kvixlCAP07JdIJ0Y1U2KYiUXjd8mcxR750E4xk1CFfgS9X0hzd73j41DdelwpCfxx73uUINa2xCPdNpEqcNLBZ4Y9+tk5wIBJ5vT6-Gud4w0QT1KPM8rDNpqDIS82SgV8bMVQMrCPIhFpMTqg6j-c4jxcCUUS7MwepLbwdF66zvRQT7CCcf9s32SymhyLUcoq45PaWKR3EsNCbJx78KbwDsDoqWwV25tRHwtYe1aSgqVQSw$83zF109kj+wr3puhuXX$8Pxt8l$zuZRPT8mBNhQLudek--5bSlL6$w7J3r4QU0M$edjdB08p50CPDI23XqC31URbNVDb5U7XalLg3hSeVIIh1i870hL0PtLizBeLGgzUHSdj-zpNfgEWXeJx3u80+gijDrk734KhuDLBPJMDbptN$DNkBcX4YTRUQwbAIwjP2lvLQ7RAkPyTR7yE7Z4a-0UQ0VddFDWpRblMDJXPbF3vIxX$c3EXfFf5lPZz$Lht6k8S4ZmjIqKGfEdV7tKmxCPva3z0K2Po+9JXzq+BCxUT0YB1yXE9Rp2QybWVTR$L4mA-rP2+PBj2Pn$r0m2kRbypBDIQswtmP2LJ05MILv0Hsl9mpH4YJseRVPa$nBYw9tczNSz1jlK+W4Zed9Sf2S6ReVRMW+H2K93hmQwKbSYsZ8ePNAEH7Tqp5QRAiL6W7dCJkf0Phwj3+2Jp$2$gS0s3etVV7$KmsaxqSxKUJ7-IC7Nku-6brVGRLSwgTiT+sN3-SfADAyxvthTzd7hsbj+CaHVipa8Af1E31pPMPpgKje+SWKAIUSreeAQRc7rmqRQK6I0RwVWIJkB7o$oFaDcDI+7d+YWJbxuZi3HQt8ecwXcs0BrIWJdTCzPVHuRxI2Vyb1QKM5IQzkP77PdpXCVEb6iMNuDreIWgk3nR3STMJS+q+YpTxd6FUNh0pUBZmda3S2my$yTCM0-zW+-6hyX0ZDV5GCrnq8x-E73My+6kQ8ZEUc-Ds2xIUd1RnTzjjVY4qssBIm+UrLZhKr4edLE0RNAMd1r0CyCIHC$6xD10YqojU-KS-d6Dtxr$RtMstRbGpom8zd+D+ggSeLxbKsMq9F80qAMq$DpSma8yJvK01Q0RDWaRdLChkeqJ0EezEDvifm$J4-KerVXL4RYxPDUVJlENeX8eFjbUbPEdh$M0iZUCJS$Z5rI20lH8wcuPi1Jk02XsnHew0anf-WjEBC8pEoVVX4bLe6pzMEJrya+ttKrmWT6lUlx8+tc+y+trEgMGrmYfGrZbF-Ve$PWQ+6Qa70nhThS7qu7a-baZj3+eIeoY9m6RoWnStWkznV1acS6LKFIW9g140UGDkgbVKz-7QVZPD1Ga2Wka07Qt9wQ75Vj8ezq7TJ1AMJQLedmJp8c71LIJRmK117-bb2XJoMMcVApLv7TSsVE3EXPWP4RYpxTJC27P7+utULvSUDYcYztKUXUKsMrxk2wtpJF17JkUEmGAT1EZS87c7NiLKFubQmCAmgxWCd8XDgDzQd-b88Xd5nuI5JI3R7jD3XobbmmSeDsL4xKz1FH2CZoZQYFg1WPna$H0DD7+qL-YV$1PdzUJFLS0k2gxU3LKTASsEKNxxWzJYMKmqL1gX1KWtwoZ$VZAJ2sxQI$7ZPKFvzHXzDuPGShtGn8AFdidStpwKWDw9a0gCDK7DAM1mnpcFnjJr$+WmPaNfw0+RRctR21pKm1JLgZF3$ZWmLT$EAIY$x-IzXhtH7RXUsgxtsdJPLqmrRo$qgoY7UQdDF1aVJ2cYFp02PuNrKc3EU-Lt1HaygE3gAU+B14nj15IH39nqnmx9AW8Cag1rxbxU7M40LMLpZbUQ3tShMzLmWt8DbhdlYFzv212hPPRLJ-bz4qn-1cwjLg0kmL4bNaPmwsKHw02GJdDZtwP3Jbbj1U4uJImSUtcfcVYFnzMyWC+fxQwbmk4uLM8L323fY9WS2f0IATZRmr$oMo1USmLMWCV+3Q31bADESmL4wQKTZYV+p4xldK7+sLzsWcDeRgnLxcVoXsI7YK2xzenpZe02pR7-bNKEYeJb7pRom2FfwQgvLX2QcQaetk42$TKLRdbf32MoJ0nebxtH3QUEUkx-cfweccXSMPNq3swXPVJcLH7nn-tUJ2xbRe+tx22omBSKFySHanXLVR2bJS7UIXUQg+mInysRUvRsL-br4f3iZYDsJLwQxl3-USSEpUV5sYRI4m+U$fzx$DRVPv3Hm-UJRlSezX$e$ca6tRAfF3ZWLEX+JfmmWCVbDys7bJM1UGIqYcwusUdMLY+XDFNuVZSwzHXxSCzvbadKbgJm$gatFYAGJXZqsZd8$KYL2E3LM3KGNb8HSS+dAtNg8TAAnqLxYqS-nHdEaf3UW8xXUqY2sB$a0KXUN$08bkWSm8sR8f7R7BLZ8p7aY-YP4B+zRJS7sBNYmQUc7QVk$BsGP9P-G3tv$5K+ws+bP6sct6RK4M+$3YISbNx2cWK0m-I$7SJQz0RTN$IlVIIcs7T6PVuWpWwdWGMjdCWWpvU1j-2HbS24+gwhYM1b4UZP3vaTdmWV-askIXIv0dlI76KXYvZX$4V6VMNA87m2U-3etrGBS48Q79W1GfApdIs-UM$8YpaNL5JhVIwNA6ZMt41EDCpHhbYQNdgK2xMHP+sp4vKxNUxR+gwZ$uS74K7uKH2uVJnpZKPvmlFI70FsSrJAg5cGAo710ipKArMSGlMf8tJq8CJMMN8klrPucrKBWojWgLU-JPUZLV8dTK2iPK0da02W0osb2NtLtZw0NzwuLoujR+Km8JFAUo3Hm-n13aYxdDtUPUGqx2FIbxtPLtZv+t8LX-3aubJMRm84I3mFMj8j1Z02AzJf0$4P3LTpVnaYYG1fbL7tazVRmkNxzUJz3TUQ2Q-ztkjAd31kWtXHlb0kXGWwN3lga1GI$BsLgqR7Az-a+vRaD3FKYz-61FP5DhGzlt0gKvACjwKWzszYgvRg1XbvP3l9++hb2w1URF2nASUK62wUmrWtTLcTSDR3VvYp8DFL3wc-67gmKpzYTX-CNr1k6PL81Ewid3DbhoVLFrVobtVELqa5LRXNJhMr65Ag63R56r0J$4jRgfUUgiWFseRl-6Z2dAwwIQ-R62w3jg$$PZJWL1US7cRhGvYFJBP14-mX2UUI2EhL2RVWTfl$X0nGg$bYNsZFZ4Y7juALbz$-uTp8DQ7I+gaNpWwuSUX7W7LR7XYs+nWm+U$0mUNjnjaqIEXIuHw-1yKNNIj0P5zAchp-+vpUAvaiDoLLYL2xa7nNw0p8uDLA62pAYV-LnT43Xt6-3QnW34JmRDtPu$+9wXdFVLjtTush1zlmcqIDgBLSUDcjhk8p6-VYMo$RagVw$snsAcZe4xRmAtGpFlDw4SZUAyltb5m5mCYK+bd8bVY-Fmz6tEISUG1t+d4iPzsSp5sBSe1$6EmL+5ssa8RR6eYkWKFj+gLZxG-jP1nTA64A8WlmNfg6l8ZI3iZfl+T-qQKDmZTR-ZJbN1FRxoVo622xMggfULD6MNdf2IczI9JFt+NN8T+q1iSvRAsYD5-1R07AcXq4K-F1pkGTLMs-UKjezpMea4t8RLKK4B+xPK0bsFZkmkXf7d4wDsJ6jAVPcbVdmoqDWjJBsb2YNb2uL4cET1mbzEIka+07nA3taZFdQNh73mj-MqW1QobxICKfzu+t7+3VnWJrNuqlX872dj-bNrxFIq+E+vFiY7EA6wjRxLwJlhTmsz-YGhuC-ggs6LbSmSm140GCWmpXEVa-sphUGES9JqxGwx4qcqgJssYbnHGbAxDFtUJKP8P0gpL4db6Ga+YJRGppKU5SFS2Sl4NCSLtQUK$-6LcYmWjBYp1ct-2+IUbrNFT8DwD0pVwfw0YJl1qJYL2H44LcwqRL+CDsJqGNzdYQDS0uUsVqY-0-F-$f7JwPw122ZiZo6zKoLr5ms5RsG0PnFQ1Eku4r7b4BsHpCbNhoIHFSsejfdqltgBS--Ru9lYdPL4IvJUUd5emIpXu3SeDgpz4PQ1Ql913lqUEFRAlXmmj0Uoju6vC+d2TgKgIVhrGNaiTi6Yt8kULv$Aw-6KPZFfCTP02VQ-Xc6ZM4+jp$N-TTGCC6-VLe5-GjcRE$hoTcaxVZ1kkcwXw6LvKS3UnjzsT-LFJC-YT4E2-RLdGsjfAzG$xk3UAw8IxIwX3UQz6-Dz1cz6YTQJSetvS$x7Y4pCjJL-Rg1EUE3QpXCp7HMjswP$+xltgprk736$WrlijmppRsu15slCT$pG0k3RLptwRHP9dk0UrqaxaWqH6bW6NY2DJWc6$mR1-7qAh6QH$6Ll+5TyapWFZYK9G4alDX3050F56V$YjXU3Fw4unDY-XqWolwJbbqcYLvKQ2wPH1-5QMl7vuPAf3$-njK2dEJEEFE8mlhpshhrwjpCQmuXip65lwv23FrKKbbhizo7whm5AgrRt9uhGLSUlQPkP55KPEG1XACavJZRDA02I20mfjsAQ5A8JG-En94wvrdnCGZCgK2hVes6stFR562d2lXmZNYSSZfcZc1gotW+U4i6euo6-XEgs91s22DWo1AR$8laGGDClqBps0X+olNn68J9Mq1Aqz02sW8zR2XzqKI70CHshz$$jYfRRACzX5g8SymtBsZpq3PAk7tnQIz9V6sWuEQ3tGQs6rGrPBctphpaI9Ep51j-oQkEvpxp2828zCd5IgRpVf050nZTj0DuAngx1WejZEHGNn$MRxf3FL1Un-vEtFhc5g8VLFN0lLpKSG1WbkIEUh5Fzqpb0bkoh$Rz4NlZn09PtfyC7iEUV6APYW2kn-QvahDRGpezWuIgIg6gJkU9YXZs13nW0f3-zVZPI9fweE5AGkZzYMWXeMbqRjx-fFtas6y-2w3uSJ1jB$o-dBfkfni8iwLka0f2JItbfxStXu1CXhNgqR02HQjV8WoZgK$r3Nc2TlDgRNf5-G$l3FHr3tok0JXFyLGExELRLUGCGhKa5t48y9vnldajpruse9ddEbNqAeTdmsdRTashrPoX-58-DcYq8UQvHBqKYy0BYile7aRSjEE7Qg6-d3XjKmuDdVDisPJ-Iftml-dbSNr4507uuEnPF3sTgBALN$oP8c35JaS0Km1JJJQDVPWZ2CemgMoajYdeZAQTq32XroThA5+lz3UWipDMD+13w+CADWGKDUo7db3IoInuQos9dHfSSBo1T61xSBWdn85v-mrRFdvD191kL1dqf7NqtlE3vnisN9HwcxNRqpqpcd55sWqYSLptKgpDkQtQnx3kmEUgkqFZvaUzccaTbBp1-s2+vpYGqeiije728jv3wQoy9LoHv8RhF8uQafBIDxrRMemgy+aRgYL3uTMfInCTYTx$HPwHKatBpguygQdmTpX+pltcDhr1-pD+3UxHfmJwps-vWQqfBUQ8shctkIbQUL07HMH3vb64o+B1Q6UrwSzVXQ-o7u$j-7v7p5nQEN2AZ385RP1kretNg7QmJqbQllB3RPY5aHxVSRI-cpsYSWg8S33pXL$bTr3k-uu3dxjpGhNSmLqbFV27kXlwXW3L-k02zsl3ND+vqbd-EG5v7QXWmHAeWmsmKMcDP3qbbVNv07+rw0mDRebUP0aUy74hRPR0oVLJhmUkh82Db0dpa81XUzk8RLSV5rV5DS2mP2XhVd8Yh3uKH7tU-jwa8um$VM7Rz3bdi-32zVyYK7qd0tj-7K6XKaKokrRwRXtXaS0acaURzsS2JAm1XB1kRz+2tU3HW-S0Q12qFmLWC7a8ai5u10pF7DKRx7IXFKaRTD3TKGd2DpcVkFXCM-ZaE-d3Xk2-mPSI74W$VRVL7VzQEe2-8u7dmD7P7-Pu-d$Dk2NamfRH0-8lZUsaDtuuPLoI02X3JdhvB-0-dVJB7-$kpkPSa2hJmxWD43+PA-zrNrKM3zopaMRg1+kxAmuKB-XL$ewpXdDtamXR9NQVWb93FQFP$H8u2-Z37-Ee+Q1+S1LZe8c-PaZQ7xXW8aZ53VatarzmKF$rc-lKETDxnuV-tC0kRZ-q-x2PHZQ33Rjv2SUIen-t-8RfXEtsEK-H9Krd7wutArZK8taVPbK25Ap27KCQKaSpXbxZVA87amRD2b0V2XqbW1mudjsHm8TuZgV5f5UYppDAyQ8PH-DZ0r30ARyP8HVnZ1JLEaVZ+Q-7MQrAtJJgapQkSp$t+28Fh8tLULp18cDPUrP3L9IXR813jUI5taPRBFurRo3Kjta3VLUYv0uFVZHSh-A-+kNy7C8FKRQu0rv0v8qrq1TaBrDaFIm0eCb3PvLbRx77htaAdPy08C3AJCtRIhan0wJ3s-2t2fVRF2bl3fVZKl7wQIXg0FuFpX37RREa2AXT2jmud2laHwSskFY3kfE7Q6lUN0C-jBaTdrFjKDUF7tWtsQZ5ppp0m1hyLIjRwZgpHb4ZhA-RcSgWtZRu8IAUH1rU07kVitgAARCr2Qcvay83KNuXGRgRW7hAFLSRdQxuA3CH7rAJ1CtmdYn8EaRUKaVZFgD2UL7T767Ev$R4utfj7a7X-3wP7K-ewMVMtXr3MFHvxmgS0XMHa-7aQbui7IHPo80VP1wA7a$dFplMmgYu-1PBPEoURmPmo7m7JQ4F-hJSVLrPKbV5N3D18KZA01dU+tRX20bRe906X-v7ZX5ak8wLPVNtqVXSVfb8YR7NQjDcSaDYhYIGslbJA$vgAf10RYVtd4--uhwgYskd8R2Ci+Hm7ZPxSMV3Nei1kQf9z-RlS6sq0Q-JXTc7$IbvUbMoiPEa$pKhtISrgMVcxNhZfK+C6RM-J7hapaR7VrpSaCtx3xuXhaogaVX-m8R0777hs-0LFQFgbYEDv9wNPUj2w-AXjjp7MRJX7oRwllDUImrZJKL30VjtpAsHRnmXHBYfLcaCrIK7-m5b1C2yG+RkDdX0g5bUcUPtu2qb5WrcNTddUTkB7K7aSS-jiavMxoJgAVZQ+MDQbyxkY2jXr+2+iFmmHSWF9SY5x3ekC+847aolvYz6XKUQPaddw3FsthZBa6d4yGfp07sxta8pddkeKrtttiVaj2kX9WYb-P37M0ddqgsU8Nz5dJNbKXyRuhSj+KGPkX2kzfIJh$EVRqLmTRT1Nz30--HXp3mqXZKqRbtbmllYK20bGRNzcUQd$nFLbCAmSlLXMAYMXKoCrRpIdI7Z7TapzhnpQNe7Pi+7Z7qaYFUF1hUf3u327wu5bJFt7Kf7LSXaXTNy3m728-PQ-+v0umw0Ja$7UH7obpaV-nhbS8aXIXkT3aTA2rkLFrmti$7QzEuG5Ds7ziGCkpAulshJ216IJ6RD7sIQwU0ZtmDIl7kLRCmFZga5RE1YWdjFI3TaMV2u$Wdlprm85xv6ujt3PFuFcA6Rj0p+c-Uo7GuZ+0ry-lwbZMiC7eqXmHEFputV-+1iXhWwC3Hm8LWRX09Q+IVsDKLa7EuAVNip3CwLn-9kYWkW03ZwZveJrKyZJcmMjJH-yAslcWKZVELUeLaFxMvxqDMdIeFX2sUc+fA+L-aiIFI9cpSbnbxlMunesJL5DU7QlHr-PF6Xub+LAudVpV5eguVFLrdpVfla9NlK+L5k4o1i1wFcMKL5k8dNyXUx$tnL27RovR$CUk791ZexuMfgRbK3vJI773Zpm8Dx1VsjEKHBf56SwZ4Ja27oIb8fzGMKLURt2NJ$CX1mKPMC1VmoZV-wsHsh7CfElge2ZagHMCVVvEQe+uZ2oGeJ7xT2RcmMs7A-x3tL1Gp5I1yjuhdmINjt13NbZu8unNTRFVQrsuV+bYpGcR-D9-I2pYpK87hSiBHwefLY97i7Hc1HvAxuLUkRFlKTXR2VFrZ$3m1w+LIR-I389hWjU9J824-eIXQGmIkabHYvxbgT$wtSASQ+3eAkQmBMKL+QYPdP3VhRdEsiR0r5AqH-xDSp928I8b5Hu3w7sbeXz4gmnRVgY4C1VzLA3M19DEadD-zjYzLNmIm78Cd-n-sQGVgj73DQuZQcQ2qVfLHAXrlIbVTiV4sW2HrDVY5ZXAL2b2szfrGuZ$tZJXW$v3bTH6BeWs3TJ0Yh9c0-iiRRUquQfkhMvw1As2T3i7TJdkgjJ6R90M7TvDkcg8BKxJ3mUuTggqplD3LflEu-5Vxpz3QzwCCdlpAWL3VhV$LbeFmMDAm1qkklFalEwp-ad$oo+r3RRm2s6Rx7FabQW3mBpa2ix3b5Dww6C7roxuTVbXUKMKL7w84qAQ2UqXsy02CSFv5aR3wD2nuX3uQFiZYVzHWrzthk5auKs0btw1RwukRXYdgLpwnLflrN2tPYy6RQUmkXi+CgmdVHprF+EL-cMHx5Rn3MHxahz6yHM-AzPXXFYEcNxKRiP5t+rpDw5PiDbtcmte7KXpT9KiXxtm37BeRVAKs3DHxC22D-4YwUPxWzkjv3I7TDRHYAkXGIDITiw8IEk5kjgFI6ioKxqTxjZ$dSLiIlT2SEaNymEbu0BL3uQXT8vKT$VCzjUhUuDItJhCgVz$cq0YqXVnCeURgEvTyDVZqwcrUVFiNxIh6I7FLuQYG06Dp6Qeb3M$8gl1mAJk7sVajQvuJ1bLU4gr-4xMsDg+AHomko-$9FsgDLdemkujEvG174L34+kylQgGqDZpDwdv-JY+6izYse4LapYdkGqMFpC4Hoo5CNsYt$TeeWsUXCrlcI2Ttdmo-4kgG4cqsioSt7ygPFK8EpZwhooKxIuGD$PDwZpjyc9pmtmrZwxofa3B$Nd9TNeNztyC7jBDR278noic6XusgVs24+kSb57GVWPpK41UZotlTwgVsB2zTjb5135FlTu2tTBmdj3$8UT-eKkT+raTwg1sbHMmF$Ca-FwSkCURUKK8EYJc0po$$L$KknpwgrpIlN3ZrGPlnpmmnwV318gA6Xgdk8$l7PjrR21d0kZw3tvDxYhddVqluoZqZEvTSdvp8AzTB8w21qdIsGL0In7ElT1ngs1eerM$9QjX-t6-lTzenbA6uWKsi4wUPYwKGPWbsX$hUPYc7jrWKsS$FISY5bhJcAsx7rU-4r1j3WEhE8LHMyC1TtSesQjUUShCk-Tg$6oDTgH-pv-JwWLkDVLAJCShzJx6nwKguImuuWDp6zjJ0dJcSuIdiTF$Kkoe87WpW4ksDy312R4hUdl-vRRUSeQrTpSkqyD27mCwwlWcjslAaW1qxdhTn07fjxguI34lldekIphVmo9Tu1br8YK$HZqqj$BRwtAVB3oM$e1Q3zkx7FzQiwJD96fKDP5P+1rz7igUXR7zQX-mrmpdY6Gp5H6qU0FaTq7F-B7RBjEL4XsJ$Vw1a3gPt82pq9b41s5Vy0LWYTV50Rl$qHFESavbwjHMjhS3Ltdt1P6VgC0RXV77bv7McrbgK17-43fXPU77Qt6-$VZP3-RYFrtGuJa2XEo7VtdVkRqVvtCzXIFM8U75u$PcMq-KHKYVYpEkV77xJ707o7qXF7Kl3q7GRFVkrIkU3v+Xv-4X0QklNKbnb-Kz13TCQ1nmTikA+ln70I7Wmp7A5773Zo3nV77DFs-44rbIt6wY0bQUQmR8i5yVu7XzIwWjbw5b+SnEq-jWlvTbPV0cwtm2SFVJ577qZ2WlvHX0EfQNF624TPQ7e-w7Uqhj4tv9SL0pV7xT2mp7mPbEVGgsu18Z75RoP7M57mx4Iii5FeRVNnF38YKuy670t8-2fnE7y0W4Y02-773SeR2RE6ubckbVwIHqGrPmi45bu7h1a95NbF4M71PD7Rz7PXbcubaREbXr$jN-UkmhaC-C229VyiUYaRw1$oxeby8YKeaXQFGw82aKDLTtTu7SkdNFh8bZh-riIUHKTV4P1PFkVMkHXkmvPZycM8Xp7x$71vJQe+jcb1UhWW2k5qIpSY5gWbU7JaCP77WmjFWH73yb+eabVmJ4o8H7Ql-d+kXVb3KH717rS$YFy7SLu0$dgL$ZjP7V-f5-SooCz$7Z7DmLKRSt8XmV0m8j7J7pVWVC7bUzE7RfpSRRkygD8Wml7pS+0Nwgq8XCq7h077UY$yUbd3m5hsLj-Jal+u--xlYS97Pmj1374xhh4Sv35lKqPYQ3b2AR6at00aYHM+77b9EPS77"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:26:30 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9baf75d36cda0afe-OSL\r\ncf-chl-out-s: xbHffu4+Juct1tH2qJX7zw==$YIeM/Er+PZFENo92qHQyrA==\r\nset-cookie: cf_clearance=wr5xv_6LdgyVASxfSyjMvDiZ5e2avi3rn3qTujROb9s-1767914790-1.2.1.1-k4npElnF4QzMZfG6QKvUswqQEH_zV2H4ta95Km68bXuw1JF3XVA1O90DJdBniCYvppZ1B2eZhxws.iSt.QbZrPlprYjzi5KQ5CvNY9F3rmTbkpMKVtADV4wHK1VXpFUwq46cnjyzka4ZKRCAr4h7azP4W_Gj5n7xxqqS1gLxf8Pl_p4HBwDix1xfVddGzTkCnO8uiJqOEVYmunJovUGVsFcK4lV8G7mw5DFI9FZyckI; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=filenetwork.vip; Expires=Fri, 08 Jan 2027 23:26:30 GMT\r\ntiming-allow-origin: https://delta.filenetwork.vip\r\ncontent-length: 0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S689771183%3A1767914791044952\u0026hl=en\u0026ifkv=Ac2yZaXYi1R3AUZeCEq7O8_hklguuRUU5F13Hi1j4PpcDyn2bA8kjxA6sFWzWr0VVuhn1jq5INnH\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:31.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S689771183%3A1767914791044952\u0026hl=en\u0026ifkv=Ac2yZaXYi1R3AUZeCEq7O8_hklguuRUU5F13Hi1j4PpcDyn2bA8kjxA6sFWzWr0VVuhn1jq5INnH\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://delta.filenetwork.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 08 Jan 2026 23:26:31 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-x4uhLllshjgBepixgyeUTg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.O2IxjaDA--M.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S1444337835%3A1767914791070047\u0026hl=en\u0026ifkv=Ac2yZaXE-OLZac0heBOW05gUGiFPyHowwNkTm95nK4F4nmIy0tyyTdX2EV8mhcKzNN3VTeDLO6t8\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://delta.filenetwork.vip/android.html","date":"2026-01-08T23:26:31.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S1444337835%3A1767914791070047\u0026hl=en\u0026ifkv=Ac2yZaXE-OLZac0heBOW05gUGiFPyHowwNkTm95nK4F4nmIy0tyyTdX2EV8mhcKzNN3VTeDLO6t8\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://delta.filenetwork.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 08 Jan 2026 23:26:31 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-MT4-d4hSOg9XsDvW8gUL9A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.O2IxjaDA--M.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}