{"report_id":"79ab8a6d-900d-4648-ade2-d472c5595c83","version":0,"status":"done","tags":[],"date":"2026-08-11T11:41:11Z","url":{"schema":"https","addr":"wynavi.com/","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":0,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"wynavi.com/","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"title":"Navi Roulette","dom":{"size":47023,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46433)","md5":"f31c19054a290e3e76164753419065a8","sha1":"d81a49e0bedbe643359eddd70f51eb750048ce8f","sha256":"e8ff20b4ebd70aa1ca1b261c03ccb0e11d94ad7792ac8eded28f79705b63dfd3","sha512":"dabcf4a1703dff1f448b0823a535cb06d13285b52bbfbf5f122c0993cfd81df8a479171c3a3efd6966124dedf8e6bbd20a5627b904effa6a065f9f1a509a68e4","ssdeep":"768:DdprIn1ifn8nxonU0R7tDfol8Qlcx9ftMQ9OMl2t9kWbSjY99aNNj0:DLrI1kK7cNj0","tlshash":"85234e97a9c2b2d3f191e62cec3712bc955d3891db965409942c35a0b8fcf80f7c2b69","dom_hash":"domhash9d581ca095547ff010c04d564807dd6b","first_seen":"2026-08-11T11:37:54.483271Z","last_seen":"2026-08-11T11:41:16.881999Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"wynavi.com/","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":0,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-15T11:41:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-11","alert":"Phishing Block","trigger":"wynavi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"navi66.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"navi66.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"i.postimg.cc","ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-08-06T15:41:32.715524Z","alert_count":0,"request_count":13,"received_data":2700027,"sent_data":6757,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-08-07T12:04:28.26621Z","alert_count":0,"request_count":5,"received_data":5803365,"sent_data":2345,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"wynavi.com","ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"domain_registered":"2026-04-30","domain_rank":0,"first_seen":"2026-08-11T11:37:48.043515Z","last_seen":"2026-08-11T11:37:48.043516Z","alert_count":35,"request_count":7,"received_data":1120144,"sent_data":6696,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"imgur.com","ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":695,"first_seen":"2012-10-04T02:07:24Z","last_seen":"2026-08-05T14:40:17.935097Z","alert_count":0,"request_count":5,"received_data":2680,"sent_data":2495,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"navi66.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-04-09","domain_rank":0,"first_seen":"2022-04-23T09:58:21Z","last_seen":"2026-08-11T11:37:48.63148Z","alert_count":6,"request_count":3,"received_data":0,"sent_data":1557,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wynavi.com/214f7b557f0206","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbadd9c480859c98289b2b75d061a7d6","sha1":"3ce03e754a8e5c2abdf49626b6e4e679a3f94b49","sha256":"dc18dd26066a6c8b465f147e5ff7fcac850c7d0dc893b48bf6e9a8969f11b635","sha512":"5a179a5ed01cf5a3c1595c6a4cc6b74ee0a849ad5444989e6eb0137d3a35d489549fec77d28131e2d7f2f16b9a47f340b9131049cf5d37e1b2035d6f7be563a9","ssdeep":"","tlshash":"167000000282a020883c02208302a200aa800008000380a080e0020c200080b0080880","size":20,"data":"","first_seen":"2024-08-05T10:25:42Z","last_seen":"2026-08-11T11:41:16.924781Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/214f7b557f0206","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"77a17db30598c3dbe8b84c88f2c9246b","sha1":"2b89c083a550319b1c7cb801080ae492f208c3d8","sha256":"378b4d5b9a30a2b7bc783133f2b70a1669043881b7360965cc7abd77dafaa6f8","sha512":"90ffb1a276906eca53fca01ff054785979638023b6d3bb6ce816631114061a5ff9bd66b23c106f2342c236ebd68296bf24cf470600619a04ac74c1853aa7d9b2","ssdeep":"","tlshash":"cc8004010d44405704353d4f550313441031113534c07011f014011c114144347404d4","size":32,"data":"","first_seen":"2026-08-11T11:37:54.541645Z","last_seen":"2026-08-11T11:41:16.925787Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/214f7b557f0206","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbb80b1cf635528b25dcb34b68c14867","sha1":"1427a58b45006674e008c8660ecfa9988112972f","sha256":"2ba3cc3bfa905136170cc90faf3ccc190ae1e6009034f093c3dc165295d1bc2f","sha512":"3e8ecc0034624b0b226b25d7203a8f05a36114f0e5eb246f3a280a416310c3357658dfd18c9f4e2c2dfb4316ffdcf5c1f6b6cc128d344c3124551d294b14050b","ssdeep":"768:bH2mZq/0livkf6EzqE4gp0dynMbOHZe2rms:bFZq/01f6q3","tlshash":"49232007baf664786213f0389a2f9d06b336890b0a1dfd083e8c51a96f4e53d46f57e5","size":47686,"data":"","first_seen":"2026-08-11T11:37:54.543244Z","last_seen":"2026-08-11T11:41:16.927635Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/214f7b557f0206","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"111d4f8600fcce80a38bec7197820e54","sha1":"ba41a4444e955ce061412bb390635b363649d3e3","sha256":"616c2842ef3989751e5193471f2e021b2a9dfbc2af5e956f0a948d1a9fe467f3","sha512":"97b659f79b0b0c8ae9e499fea2e5384765b74596d8aa3a2c34b23c75b2d11030a6cf5ffc4cde638918085fb074eb56888255af7f11cbe391091d9aa1ae09d537","ssdeep":"1536:Wlv/9rnn1SaTcYkNfIh5KY7HiMs8Pc69Bz8EvwJToLsvOzIUnXdqN80:WlVq637Hir6Mo1Xdw","tlshash":"d3741e9a6ae22570a213f13e0eafa8403235980b1f5cfc523a4cd5645f5953c97f6fe8","size":337305,"data":"","first_seen":"2026-08-11T11:37:54.545151Z","last_seen":"2026-08-11T11:41:16.929842Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/214f7b557f0206","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"615fb7a2634644c629b21e6c67dfb294","sha1":"7fff9fa50584c6ed17c23e28ae78c3bcfe24005d","sha256":"0dd061a0b8b7d831d2ae1ce303ffb959e1f336e9974cec2d1171433fd9903f6f","sha512":"00f425d4c1488a4b66f01a2c183d8094b5bc831f6791aadacbd93c138e624652e763cd27d83b2311721e53c435b0144806d5b675fa113ef7ec195fa38b3180f1","ssdeep":"1536:/XFRiIVpk75zIZnJc/l1eZTHF3wqLIy1LCBNSfqXaqMnpinDqtjzdYQ4rjoFPjQq:SZ0Y/MASwCdpC7p6","tlshash":"a1244f5bbaf268705253f078892fd801b235481f095ebd493e4c56a9af0e83c66f1fd9","size":221613,"data":"","first_seen":"2026-08-11T11:37:54.546777Z","last_seen":"2026-08-11T11:41:16.931685Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/214f7b557f0206","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d66f6cab94ed9353c0e073fd8765eec2","sha1":"46c36b93c888b2c2acd3c567a835391530cb249e","sha256":"173e6dded5365a14cd043136b3cf987eed182f0b4b9bb0e207a41abe56a77185","sha512":"26d7f99b78a2e2e0d70d5e0368aba424f6076e69769e34cea2fec221aecc00074e5acea4ede438adebcfd7465785fed70ec26809318d541b5d3145aad824ed5b","ssdeep":"","tlshash":"a151225a6af270b46213f57d4a6fd846b16a4817086cfd017e1c9260af2543c4bf8bde","size":2713,"data":"","first_seen":"2026-08-11T11:37:54.548296Z","last_seen":"2026-08-11T11:41:16.939447Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/214f7b557f0206","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d6d3975852df34cc2c635f496f02504","sha1":"26e6a18f244a732157a8a20f4d0c8e153ed22c60","sha256":"2d1289bcf472337716de3c508ace5fb4426fcaca147d33679f751fb94fa9d0ea","sha512":"14c79575258baaddab7cb08bde96b56ed934438db4ea172928f1c012afe6cbf76d4b956328042b521331047c0c35250ae1e25448e8e17aef90a2e4706aa5080e","ssdeep":"","tlshash":"c1012b0e38f278205263f0b8861f6819b5b6550b18edad027e4c91916f26c3c5571ecc","size":823,"data":"","first_seen":"2026-08-11T11:37:54.549644Z","last_seen":"2026-08-11T11:41:16.941582Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/214f7b557f0206","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d919724c97c404baa2272004dbc04e1","sha1":"89ae968974316c66db1e014665b6d24b4108bb1a","sha256":"0a55d5ef799547d458c63c57671ef5c5b545c4516597a6e0a862c723eac05f41","sha512":"7246074119cefd0dd46b11afdc43ef630e6298954f38e9474761a7d8e98940bf5d8e058fb4c61581b32afb0d232dc5021c56f8786bc9a84c5ad0f0acc73d3f1b","ssdeep":"384:7jS77v5QR6AtKtvtjI79W7cLjexr6CmI7C19Dvn4T4o/Fg27ODzVL1G:HS77MtQvtU7EGjecCmDVvn2gU","tlshash":"e923a62b98b41a662c577060796f5b0eb617050f4d987d247bec82600f1c99fa2fdbbc","size":47727,"data":"","first_seen":"2026-08-11T11:37:54.550952Z","last_seen":"2026-08-11T11:41:16.943833Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/214f7b557f0206","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"33f59b7ae3151b6dafb11b12d2f9d0a1","sha1":"f7b876ea562de0aefdc1b5294ab8e0bb015f7544","sha256":"9498d2b9303c1aa446e99b457a27c9ed121c10ff324707eab0666aacc3805731","sha512":"872150c086fd0aa5c6a38b95eefcdcf560193351433f1ce27813820d6766ca5e6b7349227e65467c56d0a822092d0d1bf3b3182670fce5c8b0f3367a8b75bcdb","ssdeep":"768:RXjVaYCak8Qrcjj52rTveeO97z5pAf3NR3PNgpezLLY//30Nc+I+dk8OvVMCaZDc:xVX8cjj4rO7z58XNc+I+dk8vwUDk79","tlshash":"1773c7449a82608456a777782b1f60f0e777081f0c88bd4b799c6ad9cf1d92ecef0979","size":80574,"data":"","first_seen":"2026-08-11T11:37:54.552575Z","last_seen":"2026-08-11T11:41:16.946704Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/214f7b557f02065f0d06014a.js","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca44472bb63ed5b9536188c1e7250834","sha1":"49f68bde8f9a705cd6a213f99fd1fe9068713f90","sha256":"2d8960006ff583db4bb4dadfe765dc090e723d6ee076ffcdc781fecba2f3ea8b","sha512":"22d5b603744549d96758f401d7e254ef74654ef0a077087a71a6238f076dc8d4c372e10e894b3ebb534f5773e40d8d6fc1fdfadec0182e5592f0ec7c0c99c7a9","ssdeep":"6144:A2dRfP9UYcfQaUqVUNRG1kSlCpqnw4/P9F8JRPaV:9RfP9UYcfQaU+UPsCb4/P9F8JFaV","tlshash":"074484406bd0a86c239b5b7a731fb0e5f46a096f3d88498bd101fc90a6e6217fdf9531","size":260282,"data":"","first_seen":"2026-08-06T00:07:04.322113Z","last_seen":"2026-08-11T11:44:26.076416Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed819f53d69e38f105df8da401a9bf97","sha1":"773f00f276589360f28121c4b4039d123856c8d0","sha256":"4e46127c337e84db58ce5c9bfa8249c3bb9dff237c2f0cbb65582fbbc9848893","sha512":"c8899339342e804abbd2a470915ae8abef93eed5ab23402c9b2ec5a680c3e8a235a08b062cdbb07fb86bf0b9ffa2eae1f9ca7838d825d3eccf73534636825c76","ssdeep":"768:OprIn1ifn8nxonU0R7tDfol8Qlcx9ftMQ9OMl2t9kWbSjY99aNNjT:IrI1kK7cNjT","tlshash":"78234f97a9c2b2d3f191e62cec3712bc955d3991db965409841c35a0b8fcf80f7c2b69","size":46219,"data":"","first_seen":"2026-08-06T00:07:04.345878Z","last_seen":"2026-08-11T11:44:26.078314Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"i.postimg.cc/jj9n1qvm/cross-c53836fc.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.762Z","timestamp":1786448440762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /jj9n1qvm/cross-c53836fc.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 302\r\nlast-modified: Sun, 13 Apr 2025 13:15:49 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":302,"size_decoded":665,"mime_type":"image/png","magic":"PNG image data, 18 x 16, 8-bit gray+alpha, non-interlaced","md5":"c515552168885ff8377776c20b3e134d","sha1":"c7d7e5222ebeb8899e7362a963a44add1c6db3d4","sha256":"1ce5c6f870efe393de59dd8be2406f1d22a44c629cc742993c443dd054781820","sha512":"2d3520d10cfe280d5b8bede306af1cd217cc23dd1e1f97cd9dd8495284b0da5f052735ed23076615b7a16dbbd798e4bf465a1de599110b8b279a17b43afc971f","ssdeep":"","tlshash":"0ae07d9ba27f3c6ac64f15a4132700e95990caee81b01d4742d3977871711151215b91","first_seen":"2026-05-10T06:08:17.442549Z","last_seen":"2026-08-11T11:41:16.885759Z","times_seen":3,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/Gp3jRpFp/navi-eabae28c.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.763Z","timestamp":1786448440763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /Gp3jRpFp/navi-eabae28c.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 2405\r\nlast-modified: Sun, 13 Apr 2025 13:05:06 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2405,"size_decoded":2769,"mime_type":"image/png","magic":"PNG image data, 115 x 100, 8-bit/color RGBA, non-interlaced","md5":"890aa6ff1d2abb535664eb7d7b1869e5","sha1":"8b6878df9bc8189434981531a81a9b8b131ad2a5","sha256":"e59dfa452ae52ce44450bab6412f1b1389b95d8c088c394ef70f777ba977b60e","sha512":"76f2e9e79e35105604890ea9426cb4584df778161fb9cd7a7731b16641f9b61f70e4ea2d83bc06c30668b64f676d068eb755bd2b39b4cc706a4f51d022b50771","ssdeep":"","tlshash":"af413bb2e24bd00fd30170aeae2e119753bd002a2a364a45e5dce8b20642807a1da117","first_seen":"2025-03-25T21:21:04.821345Z","last_seen":"2026-08-11T11:41:16.887753Z","times_seen":13,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/sXQ7fGv3/team-shine-0d1438cb.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.730Z","timestamp":1786448440730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /sXQ7fGv3/team-shine-0d1438cb.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 585604\r\nlast-modified: Sun, 13 Apr 2025 13:09:14 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":585604,"size_decoded":585970,"mime_type":"image/png","magic":"PNG image data, 1189 x 556, 8-bit/color RGBA, non-interlaced","md5":"5dc4dad5ae7fc39dccd1b35b13fc693e","sha1":"5ebdb3e907f0482eb06ddcc10ecdf30a43dc2ae0","sha256":"7d3b44909b43c21dd7665f2449fef61f985f8d1ff806da21de059f049e0114b1","sha512":"dfed61a940d6593b3f0ec5237b985badda8e4dbb1c4d4245cc7d6d8443d817d35eb6ac5cef75428c31a2083a34c8735363c037ff2c6095a4c876919d10f4dcaf","ssdeep":"12288:/gdkVrTMAgPkh7D2m7Epbemzyv3uFzIRq:/gMMdkh7D/Alhmi","tlshash":"cdc423caacc775b2d4ecc9d3869bb961e4f6120ee59305c65122f42344e363be6dc892","first_seen":"2025-03-25T21:21:04.829009Z","last_seen":"2026-08-11T11:41:16.891959Z","times_seen":31,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/zDy0339b/case-f027bf51.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.764Z","timestamp":1786448440764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /zDy0339b/case-f027bf51.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 201927\r\nlast-modified: Sun, 13 Apr 2025 13:03:18 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":201927,"size_decoded":202293,"mime_type":"image/png","magic":"PNG image data, 540 x 335, 8-bit/color RGBA, non-interlaced","md5":"900fa8c5762fe62704a800d5a81b6223","sha1":"0ceb12e0c4e6c0c748a343a075e63a905826a8b2","sha256":"edec4b1bbbd1478508ca252a415d1a9ff6e541b69aa4b2dc04f82aa7e270d70e","sha512":"e22d9c424bbabdb40a89de7b4bbef2e72b23bb98c41c0c32f59a4f0493548329780f3cd857420f990ac46f4aabe49babfd25d2bbcc725208c8103a49ee8a084a","ssdeep":"6144:Pg2MGGMuTim398CbKB2jVZDGCCJJchH2NuNKXNZNdEw:PnHuGmq1k3GbchsucNn","tlshash":"171423af6be76469bb53f6d101d2620049bac3c2157ef5f4411a1b41f434bf06bf1a26","first_seen":"2025-03-25T21:21:04.80005Z","last_seen":"2026-08-11T11:41:16.89522Z","times_seen":15,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/VrizGQq.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:41.081Z","timestamp":1786448441081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /VrizGQq.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Sun, 13 Apr 2025 15:28:20 GMT\r\netag: \"f973254c49ba409969014ecf6e858270\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: wJxNbg90T5rTa3Pyw2ulOoyMl2MMkYmJksabOJDSsxZkCWfaWDtv1g==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 709419\r\ndate: Tue, 11 Aug 2026 11:40:41 GMT\r\nx-served-by: cache-iad-kiad7000116-IAD, cache-bma-essb1270024-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 1, 0\r\nx-timer: S1786448441.082955,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 1125567\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1125567,"size_decoded":1126359,"mime_type":"image/png","magic":"PNG image data, 1624 x 1660, 8-bit/color RGBA, non-interlaced","md5":"098313114112a6c13ec6e97af287b176","sha1":"e296e21bacac01062878d9989a0329c6b11f877e","sha256":"07bfa2287b6cc1bec0e0b1b0081a1fc87d096a6c793c6090b46d14ead0b89073","sha512":"2b354238cc1d1e440b79b623deda1f9091fbf476f78039405170836da217ccd5bf3243e4b6ba96f9da30c5dbc3e624ac58332f7e9f49476c443f47aa022a4f4d","ssdeep":"24576:JCDJEfbhJIRSUbLeS0SnKEcDDdTnTMPd2Vu/2s1:JCDJElJIUSnpIVYgg+u","tlshash":"cc25236845cbe8fec553ea3d42a83d9b7751ccfe2de06143d93ef990587ab9208188c5","first_seen":"2025-08-27T10:08:47.173836Z","last_seen":"2026-08-11T11:41:16.896735Z","times_seen":10,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/Dy20Bbnm/favicon.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wynavi.com/","date":"2026-08-11T11:40:40.618Z","timestamp":1786448440618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /Dy20Bbnm/favicon.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 35911\r\nlast-modified: Sun, 13 Apr 2025 13:22:46 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35911,"size_decoded":36276,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"3065e7e4791f0fdb9003709e9a2cfad4","sha1":"4ee6b96de797a74df6ef8bdc01efca2f78147046","sha256":"05107a30a80f8f920599275d13154ab59f4cabafcc85767abf71125fd124239c","sha512":"a5fc49d512efe61504876a3216fdba309fcc44e486d1bf4276074efd5509ee2e47c45e3fd3f8db18678ee560fa310f2424365333b21677ae007795550545cf86","ssdeep":"768:vBEYbEGxJ3fBJWl135S5YEgPHySnrkJtXXjMOTQEbqcD7AYZt:iYZWL3GYEMHyqQJpjIEGTYZt","tlshash":"f0f2e03b5cd08b8ca6696325be7e1b9aace04b470dcfc1456c823098deadef51d39448","first_seen":"2025-08-27T10:08:47.166793Z","last_seen":"2026-08-11T11:41:16.898153Z","times_seen":10,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":2,"connect":26,"send":0,"wait":49,"receive":33,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/214f7b557f02065f0d06014a.js","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.645Z","timestamp":1786448440645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wynavi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 08:52:58 GMT","end":"Sat, 03 Oct 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:CE:5C:FE:E3:11:B4:77:A3:02:1A:ED:2F:AE:BF:BA:B8:86:3C:50","sha256":"1E:80:17:2D:89:BC:C1:EF:11:35:A6:3C:D8:32:AD:02:5C:D4:4C:77:DD:26:40:C2:18:3A:B4:0E:E3:98:80:AC"}}},"request":{"raw":"GET /214f7b557f02065f0d06014a.js HTTP/1.1\r\nHost: wynavi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.Vnf15oTAVgVEO8D6jeYjGeSbCAABNXgv.PpWmOto50QVSq-1Y.hGh-xZUHekdXjGD4x_GMgMz_X-to8icXBNP3F5ImCewdy-KSXzJjYBlDoIdoxny0PPGWTV4wm7g1m7u9lD6KNF96uRVtyrJSbVsurooj7CMJtGez1cP2OeoCvuAvBZzbur4lu1KlyKCLXuIUonbvqwxwxdTGc2Wk5r3gLlWFd_jwX2u0d0GUvICz_2NmxCybHbg3Snjd_O469_fKRpuWhBCUsbEe2RxGc-hyBwUbmOYzrfPVaZTm_L4xQ6gVd1vPznlQKsM.u7Y7ggGUrPUPYgIIi3i3SQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6NzksInNlY3JldCI6ImU2NTQyM2U2Y2JkMjU0ZTk3OWExZTY1NjM2N2Y5ZmU3Iiwic2VydmljZSI6IlN0ZWFtIn0.QoXBhaKMai9J2LEh7klLyltFDrsObbuolwhB4cqegCY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncontent-disposition: inline\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Sun, 02 Aug 2026 16:22:13 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":260282,"size_decoded":85622,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ca44472bb63ed5b9536188c1e7250834","sha1":"49f68bde8f9a705cd6a213f99fd1fe9068713f90","sha256":"2d8960006ff583db4bb4dadfe765dc090e723d6ee076ffcdc781fecba2f3ea8b","sha512":"22d5b603744549d96758f401d7e254ef74654ef0a077087a71a6238f076dc8d4c372e10e894b3ebb534f5773e40d8d6fc1fdfadec0182e5592f0ec7c0c99c7a9","ssdeep":"6144:A2dRfP9UYcfQaUqVUNRG1kSlCpqnw4/P9F8JRPaV:9RfP9UYcfQaU+UPsCb4/P9F8JFaV","tlshash":"074484406bd0a86c239b5b7a731fb0e5f46a096f3d88498bd101fc90a6e6217fdf9531","first_seen":"2026-08-06T00:07:04.322113Z","last_seen":"2026-08-11T11:44:26.076416Z","times_seen":12,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-11","alert":"Phishing Block","trigger":"wynavi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgur.com/ITlJC1H.png","fqdn":"imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.755Z","timestamp":1786448440755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /ITlJC1H.png HTTP/1.1\r\nHost: imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nretry-after: 0\r\nlocation: https://i.imgur.com/ITlJC1H.png\r\naccept-ranges: bytes\r\ndate: Tue, 11 Aug 2026 11:40:41 GMT\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1786448441.012823,VS0,VE0\r\nserver: cat factory 1.0\r\nstrict-transport-security: max-age=300\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nx-frame-options: DENY\r\naccess-control-allow-origin: https://imgur.com\r\naccess-control-allow-credentials: false\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":9,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgur.com/vCO2f23.png","fqdn":"imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.759Z","timestamp":1786448440759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /vCO2f23.png HTTP/1.1\r\nHost: imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nretry-after: 0\r\nlocation: https://i.imgur.com/vCO2f23.png\r\naccept-ranges: bytes\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1786448441.793720,VS0,VE0\r\nserver: cat factory 1.0\r\nstrict-transport-security: max-age=300\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nx-frame-options: DENY\r\naccess-control-allow-origin: https://imgur.com\r\naccess-control-allow-credentials: false\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":9,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/ITlJC1H.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:41.079Z","timestamp":1786448441079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /ITlJC1H.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Sun, 13 Apr 2025 15:42:18 GMT\r\netag: \"0b40e025dc27a02d1e7f3305776a38ed\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: MnAmi9w2vNsv8LZEbXR2ifHGu5Q64IEsP7xTy_Fv-sVwRhrJ-1eUIw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 282147\r\ndate: Tue, 11 Aug 2026 11:40:41 GMT\r\nx-served-by: cache-iad-kjyo7100116-IAD, cache-bma-essb1270024-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 23, 0\r\nx-timer: S1786448441.081358,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 1145879\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1145879,"size_decoded":1146672,"mime_type":"image/png","magic":"PNG image data, 1316 x 1668, 8-bit/color RGBA, non-interlaced","md5":"bb004d06cdaad16232e8ee8f2dbcb3fc","sha1":"180b7e41d7b62ee6c3ef9cd88cf3e1fb65b1df2e","sha256":"6ad5cc0b0e58557be22f1e4c20f52adb9dfb4b8a6d9cd2b06662f0efbdaeeefd","sha512":"07de56fd1ea8faea3c1d13724baa343a47188b0f01cc39215134ed23c4180cd7ea1678092134ca4deeffff3910819dc7173a124265ccb05223798b185f58773b","ssdeep":"12288:4pEw1ZQ46Nzz4rXRpbs4lEg4Cc/3CqgRVwzDKYd0a9jomrNpsIi21cn8bDmsYK++:4tXUlMjRtcqBwzrT9jbrDX1cnQaFyX","tlshash":"d225339cc4684036a129114eccc236d8fa7f5c5c8e3b45e6d7b7d1ee4a466e3c848dae","first_seen":"2025-08-27T10:08:47.145065Z","last_seen":"2026-08-11T11:41:16.901537Z","times_seen":10,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/214f7b557f020646020501645c470c4d","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:44.806Z","timestamp":1786448444806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wynavi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 08:52:58 GMT","end":"Sat, 03 Oct 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:CE:5C:FE:E3:11:B4:77:A3:02:1A:ED:2F:AE:BF:BA:B8:86:3C:50","sha256":"1E:80:17:2D:89:BC:C1:EF:11:35:A6:3C:D8:32:AD:02:5C:D4:4C:77:DD:26:40:C2:18:3A:B4:0E:E3:98:80:AC"}}},"request":{"raw":"POST /214f7b557f020646020501645c470c4d HTTP/1.1\r\nHost: wynavi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://wynavi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.Vnf15oTAVgVEO8D6jeYjGeSbCAABNXgv.PpWmOto50QVSq-1Y.hGh-xZUHekdXjGD4x_GMgMz_X-to8icXBNP3F5ImCewdy-KSXzJjYBlDoIdoxny0PPGWTV4wm7g1m7u9lD6KNF96uRVtyrJSbVsurooj7CMJtGez1cP2OeoCvuAvBZzbur4lu1KlyKCLXuIUonbvqwxwxdTGc2Wk5r3gLlWFd_jwX2u0d0GUvICz_2NmxCybHbg3Snjd_O469_fKRpuWhBCUsbEe2RxGc-hyBwUbmOYzrfPVaZTm_L4xQ6gVd1vPznlQKsM.u7Y7ggGUrPUPYgIIi3i3SQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6NzksInNlY3JldCI6ImU2NTQyM2U2Y2JkMjU0ZTk3OWExZTY1NjM2N2Y5ZmU3Iiwic2VydmljZSI6IlN0ZWFtIn0.QoXBhaKMai9J2LEh7klLyltFDrsObbuolwhB4cqegCY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 201 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":16,"size_decoded":643,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-11T18:56:41.279753Z","times_seen":181468,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-11","alert":"Phishing Block","trigger":"wynavi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgur.com/uVpA9At.png","fqdn":"imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.754Z","timestamp":1786448440754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /uVpA9At.png HTTP/1.1\r\nHost: imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nretry-after: 0\r\nlocation: https://i.imgur.com/uVpA9At.png\r\naccept-ranges: bytes\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1786448441.790188,VS0,VE0\r\nserver: cat factory 1.0\r\nstrict-transport-security: max-age=300\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nx-frame-options: DENY\r\naccess-control-allow-origin: https://imgur.com\r\naccess-control-allow-credentials: false\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":9,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T11:40:39.911Z","timestamp":1786448439911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wynavi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 08:52:58 GMT","end":"Sat, 03 Oct 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:CE:5C:FE:E3:11:B4:77:A3:02:1A:ED:2F:AE:BF:BA:B8:86:3C:50","sha256":"1E:80:17:2D:89:BC:C1:EF:11:35:A6:3C:D8:32:AD:02:5C:D4:4C:77:DD:26:40:C2:18:3A:B4:0E:E3:98:80:AC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wynavi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=60, s-maxage=60, stale-while-revalidate=30\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"b6ff-2FxawmHoFnUIb8/Ck4J8mAFocUo\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nset-cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.Vnf15oTAVgVEO8D6jeYjGeSbCAABNXgv.PpWmOto50QVSq-1Y.hGh-xZUHekdXjGD4x_GMgMz_X-to8icXBNP3F5ImCewdy-KSXzJjYBlDoIdoxny0PPGWTV4wm7g1m7u9lD6KNF96uRVtyrJSbVsurooj7CMJtGez1cP2OeoCvuAvBZzbur4lu1KlyKCLXuIUonbvqwxwxdTGc2Wk5r3gLlWFd_jwX2u0d0GUvICz_2NmxCybHbg3Snjd_O469_fKRpuWhBCUsbEe2RxGc-hyBwUbmOYzrfPVaZTm_L4xQ6gVd1vPznlQKsM.u7Y7ggGUrPUPYgIIi3i3SQ; Max-Age=21600; Path=/; Expires=Tue, 11 Aug 2026 17:40:40 GMT; SameSite=Lax\ntoken=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6NzksInNlY3JldCI6ImU2NTQyM2U2Y2JkMjU0ZTk3OWExZTY1NjM2N2Y5ZmU3Iiwic2VydmljZSI6IlN0ZWFtIn0.QoXBhaKMai9J2LEh7klLyltFDrsObbuolwhB4cqegCY; Max-Age=21600; Path=/; Expires=Tue, 11 Aug 2026 17:40:40 GMT; SameSite=Lax\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46847,"size_decoded":16250,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (46236)","md5":"fbb6f13519b945d0641cd2754762f48d","sha1":"d85c5ac261e81675086fcfc293827c980168714a","sha256":"62e3424fd4aa927b16a2858b797b883f8bf94badf7dbe14d419ccd9fe5755b70","sha512":"98f9c889a8d6df45e53e5bcfbba3e7d4f20d663a57c9476cdd26d62a4db02fe9d99bc1a839913dda69c36821c4fdc59dde7f56f1fef87c9b1f3cdfbf4f47885f","ssdeep":"768:UdprIn1ifn8nxonU0R7tDfol8Qlcx9ftMQ9OMl2t9kWbSjY99aNNjK:ULrI1kK7cNjK","tlshash":"87234e97a9c2b2d3f191e62cec3712bc955d3891dba65409941c35a0b8fcf80f7c2b69","first_seen":"2026-08-11T11:37:54.506351Z","last_seen":"2026-08-11T11:41:16.903396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":52,"connect":34,"send":0,"wait":141,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-11","alert":"Phishing Block","trigger":"wynavi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/PrZyz9fd/decor-e57ce5c2.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.722Z","timestamp":1786448440722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /PrZyz9fd/decor-e57ce5c2.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 7360\r\nlast-modified: Sun, 13 Apr 2025 13:04:20 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7360,"size_decoded":7724,"mime_type":"image/png","magic":"PNG image data, 1280 x 440, 8-bit/color RGBA, non-interlaced","md5":"53deb875ba9e7eb108a87a9fd8d97797","sha1":"261e9802e146319706f4f25e06bbd7ce12cc18c7","sha256":"0db1e3c7d33b678f1b6868233a96e4a94ba4ee558608b41bad1de34f7661d00b","sha512":"a3a8f99fec0312a465c844db3933f2428fa4b0da032a787d7bc57329545485874f7c74d256fc1ce61dbcbef0aeb45742c282499acd618ba30625c45f8634829d","ssdeep":"96:HrSFbUQN0l6Q9M4r0Z89SJWSfwOYQL58KL+4MLRVA8HzShUPfd2:HrS9tNG6G0ZNYMT+4cVAVhUHd2","tlshash":"83e14cd0daf09ec7f11119ba95a6078d73213dcb9e81cb3b069866902dd3988cdcb988","first_seen":"2025-08-27T10:08:47.156556Z","last_seen":"2026-08-11T11:41:16.905301Z","times_seen":10,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/vCO2f23.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.837Z","timestamp":1786448440837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /vCO2f23.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Sun, 13 Apr 2025 15:33:13 GMT\r\netag: \"d7f62596b1e416e911889ff98b59f8a3\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: -oPxlSSPPzjQojd6Lv5KeqO6lP6YE6ftj2ad339Lz8RXn8kjIQkmKQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 282146\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\nx-served-by: cache-iad-kiad7000083-IAD, cache-bma-essb1270024-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 28, 0\r\nx-timer: S1786448441.838973,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 1164170\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1164170,"size_decoded":1164963,"mime_type":"image/png","magic":"PNG image data, 1328 x 1668, 8-bit/color RGBA, non-interlaced","md5":"5109c3c0da9aeedc22a127f793233dbd","sha1":"b0a073b141ca9707a7df08c6cdf159a11de36795","sha256":"356757168651beeee04914fcd82e7810267a682c6914ad2f4583ed645f1ca9f2","sha512":"e222c7ca8de94c0f44023cf113a13e132a44b30b5ff027ba17d0f8e4c6db8fbb0416da38ca39d6a8ea0e568e33fa70404ddae97c210bcc5669d8a49db8206b46","ssdeep":"24576:n2CBh6ccdh4dJ/ceG58tXgoFj1/0rKFT1V0bVw2LQUkbOLD:2uhBcfs0AtwY5crKt1VKVw7Uk6n","tlshash":"c9252326a7ffcc6ad210c1f17f1aa9e3764571630b0b639266b451b1a028fdd310da9f","first_seen":"2025-08-27T10:08:47.138038Z","last_seen":"2026-08-11T11:41:16.906201Z","times_seen":10,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/CK4b6p9V/bg-top-917f3ba6.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.720Z","timestamp":1786448440720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /CK4b6p9V/bg-top-917f3ba6.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 1139761\r\nlast-modified: Sun, 13 Apr 2025 12:59:04 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1139761,"size_decoded":1140128,"mime_type":"image/png","magic":"PNG image data, 1267 x 800, 8-bit/color RGBA, non-interlaced","md5":"4c934f29ebfa7a72e3c13a2d44561847","sha1":"c157efd7d44b3a96783375b1683e94d17fefddd3","sha256":"770813057cdb12beb924b32c0d75a570a4e0af91262a8f4b25d1aba1218fa2ac","sha512":"a6d9c5a0dacf60ffd879e164f15fcdd34c11e2b83500270b2d4f6b1eaf789e0f6e17a6715767a1d7e9ea1f8caa1436d174dbfee7495675a26630e2d37cd2719e","ssdeep":"24576:ueqcKv+7NIH13EuTMFuIQSbVNVG9n7dN4W7wfaPUdSnljSClj:ZOQEhLwfaPDhj","tlshash":"002533b8688059f81beb586d655638de35442164cbbcbed39c881f1580ff3ac4d4e3ae","first_seen":"2025-08-27T10:08:47.176292Z","last_seen":"2026-08-11T11:41:16.90711Z","times_seen":10,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/_next/static/media/4e81fe9cba68eadc-s.p.woff","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.741Z","timestamp":1786448440741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wynavi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 08:52:58 GMT","end":"Sat, 03 Oct 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:CE:5C:FE:E3:11:B4:77:A3:02:1A:ED:2F:AE:BF:BA:B8:86:3C:50","sha256":"1E:80:17:2D:89:BC:C1:EF:11:35:A6:3C:D8:32:AD:02:5C:D4:4C:77:DD:26:40:C2:18:3A:B4:0E:E3:98:80:AC"}}},"request":{"raw":"GET /_next/static/media/4e81fe9cba68eadc-s.p.woff HTTP/1.1\r\nHost: wynavi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.Vnf15oTAVgVEO8D6jeYjGeSbCAABNXgv.PpWmOto50QVSq-1Y.hGh-xZUHekdXjGD4x_GMgMz_X-to8icXBNP3F5ImCewdy-KSXzJjYBlDoIdoxny0PPGWTV4wm7g1m7u9lD6KNF96uRVtyrJSbVsurooj7CMJtGez1cP2OeoCvuAvBZzbur4lu1KlyKCLXuIUonbvqwxwxdTGc2Wk5r3gLlWFd_jwX2u0d0GUvICz_2NmxCybHbg3Snjd_O469_fKRpuWhBCUsbEe2RxGc-hyBwUbmOYzrfPVaZTm_L4xQ6gVd1vPznlQKsM.u7Y7ggGUrPUPYgIIi3i3SQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6NzksInNlY3JldCI6ImU2NTQyM2U2Y2JkMjU0ZTk3OWExZTY1NjM2N2Y5ZmU3Iiwic2VydmljZSI6IlN0ZWFtIn0.QoXBhaKMai9J2LEh7klLyltFDrsObbuolwhB4cqegCY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":692,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6688d59f1d0b9e116ceca1708a113d0d","sha1":"d0078c573575a40a584cc92d4ccc5e8ae62aa948","sha256":"cacc3c09d432702d237265c156358a0430dd08938afbceaf4a444d26340b25e8","sha512":"116612441c802eae5cdfa4441c5757ee48298f865e1ff4e164ae1ba9ab2a0856c7e2e5c023864eee6963eda1bb89d6edcc7951c4b566eca2aac989a66ef510a4","ssdeep":"","tlshash":"b4a0020c084b7aad4f52c4bd75cd7d3488564ac015a119615189d438825464e8845588","first_seen":"2024-08-02T16:52:12Z","last_seen":"2026-08-11T11:44:26.071285Z","times_seen":1829,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-11","alert":"Phishing Block","trigger":"wynavi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/t4W3Wx5J/bg-bottom-4f6cbda1.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.723Z","timestamp":1786448440723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /t4W3Wx5J/bg-bottom-4f6cbda1.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 389203\r\nlast-modified: Sun, 13 Apr 2025 12:58:04 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":389203,"size_decoded":389569,"mime_type":"image/png","magic":"PNG image data, 1280 x 651, 8-bit/color RGBA, non-interlaced","md5":"18d84bb82e97b3b94cb1a3dbb43ed5b1","sha1":"247491d302c325400645c689f0336b6fe662b8af","sha256":"367cc9f2e071ea8a84626e454138a1889170f3dedeb01b20c1fa0e7d39eb57b7","sha512":"70c5d117ac10e56a2d0aa93f9ae81cdcd67d785a2bc7ccf52e5b5353b1e91c90ed3b57ff27101d78000dd07b499bba8909e32fd3fc1c83c550345d7a54c9fe5f","ssdeep":"6144:73OGiRynOX27Sa91X6Yj1m8USYruApDSGbH3nZZXaj/H0dpVal42xrkbLwW2e7d:bF7DSa3h1mc6e63ef01/or+N2e7d","tlshash":"6f8423f79fa563f2b8a01c6311db75762298b2255d76259cbff3c8098acd5c00b503ad","first_seen":"2025-08-27T10:08:47.158827Z","last_seen":"2026-08-11T11:41:16.908811Z","times_seen":10,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/uVpA9At.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.821Z","timestamp":1786448440821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /uVpA9At.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Sun, 13 Apr 2025 15:15:13 GMT\r\netag: \"e580996b881238d7b89229f9e0fa74f3\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: oupGyrFnzdgkrcwh9qIJFtAUi6ZnO_LMTyva_Wm0l9J9e0cNEZOT8g==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 70660\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\nx-served-by: cache-iad-kcgs7200119-IAD, cache-bma-essb1270024-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 74, 0\r\nx-timer: S1786448441.825564,VS0,VE6\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 1191400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1191400,"size_decoded":1192192,"mime_type":"image/png","magic":"PNG image data, 1176 x 1660, 8-bit/color RGBA, non-interlaced","md5":"4aa97538f7ff3fae9ba00ce329b92a86","sha1":"3ae1acde1fc032d242ffdf0d049eca284c18e435","sha256":"a92cff950da15e76f865fab13ff0e8b9f9ea27d81de530b8680f4e7253dd61bb","sha512":"a3987724cd0fdd43f76b8019936259cd89beb8ee93c3dd4ec1236a97e742fb887d20751ed21434c12a25c6f3857cb4e0f43cb0f8119f40d63c63b426ef4139b0","ssdeep":"24576:lOiKXPXfpVT33aIB1ydqZDyLsv8s0bwJWjWOOjUWW:lOi09BcdqcLa8pbw8jWHUWW","tlshash":"1425335488e094c3dd151078f3b109baca2c1fb964d39fb9a67888d67ac4c4969c7cbf","first_seen":"2025-08-27T10:08:47.118846Z","last_seen":"2026-08-11T11:41:16.909745Z","times_seen":10,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":15,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/214f7b557f0206","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://wynavi.com/","date":"2026-08-11T11:40:40.431Z","timestamp":1786448440431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wynavi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 08:52:58 GMT","end":"Sat, 03 Oct 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:CE:5C:FE:E3:11:B4:77:A3:02:1A:ED:2F:AE:BF:BA:B8:86:3C:50","sha256":"1E:80:17:2D:89:BC:C1:EF:11:35:A6:3C:D8:32:AD:02:5C:D4:4C:77:DD:26:40:C2:18:3A:B4:0E:E3:98:80:AC"}}},"request":{"raw":"POST /214f7b557f0206 HTTP/1.1\r\nHost: wynavi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 40\r\nOrigin: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.Vnf15oTAVgVEO8D6jeYjGeSbCAABNXgv.PpWmOto50QVSq-1Y.hGh-xZUHekdXjGD4x_GMgMz_X-to8icXBNP3F5ImCewdy-KSXzJjYBlDoIdoxny0PPGWTV4wm7g1m7u9lD6KNF96uRVtyrJSbVsurooj7CMJtGez1cP2OeoCvuAvBZzbur4lu1KlyKCLXuIUonbvqwxwxdTGc2Wk5r3gLlWFd_jwX2u0d0GUvICz_2NmxCybHbg3Snjd_O469_fKRpuWhBCUsbEe2RxGc-hyBwUbmOYzrfPVaZTm_L4xQ6gVd1vPznlQKsM.u7Y7ggGUrPUPYgIIi3i3SQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6NzksInNlY3JldCI6ImU2NTQyM2U2Y2JkMjU0ZTk3OWExZTY1NjM2N2Y5ZmU3Iiwic2VydmljZSI6IlN0ZWFtIn0.QoXBhaKMai9J2LEh7klLyltFDrsObbuolwhB4cqegCY\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":40,"data":"pathname=%2F\u0026search=\u0026hostname=wynavi.com"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=60, s-maxage=0\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"c5150-3OTFShI7LOT3wsUk79VWWKnPUDA\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":807248,"size_decoded":185896,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1122)","md5":"55c5cda146fdc7fba6ff53360b99450c","sha1":"dce4c54a123b2ce4f7c2c524efd55658a9cf5030","sha256":"3071e1c5e0abcbf67eb965cc0fd9ca4257cf3c3175854d0c093e952d9168a403","sha512":"0db07fa194e5630feabb9b7d2278d7cbb9e70eb21d3c4daf0bc8e64a389840903136dff08dba756c617e1fb43ccf7cbe7e6d79f50c032c7105d787d2bf8cd956","ssdeep":"3072:SvlVq637Hir6Mo1XdgZ0Y/MASwCdpC7p5E9FhqXNc+I+dk8v7k71D:mYv6M6iZTCw4w7pwFhgk71D","tlshash":"8305b34a7ae228709213f1384a6f98547236880b0e5dfc563e4c95a89f0d53c97f6fed","first_seen":"2026-08-11T11:41:16.910704Z","last_seen":"2026-08-11T11:41:16.910704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-11","alert":"Phishing Block","trigger":"wynavi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/214f7b557f0206510616375b41512656595f0856","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.816Z","timestamp":1786448440816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wynavi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 08:52:58 GMT","end":"Sat, 03 Oct 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:CE:5C:FE:E3:11:B4:77:A3:02:1A:ED:2F:AE:BF:BA:B8:86:3C:50","sha256":"1E:80:17:2D:89:BC:C1:EF:11:35:A6:3C:D8:32:AD:02:5C:D4:4C:77:DD:26:40:C2:18:3A:B4:0E:E3:98:80:AC"}}},"request":{"raw":"GET /214f7b557f0206510616375b41512656595f0856 HTTP/1.1\r\nHost: wynavi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.Vnf15oTAVgVEO8D6jeYjGeSbCAABNXgv.PpWmOto50QVSq-1Y.hGh-xZUHekdXjGD4x_GMgMz_X-to8icXBNP3F5ImCewdy-KSXzJjYBlDoIdoxny0PPGWTV4wm7g1m7u9lD6KNF96uRVtyrJSbVsurooj7CMJtGez1cP2OeoCvuAvBZzbur4lu1KlyKCLXuIUonbvqwxwxdTGc2Wk5r3gLlWFd_jwX2u0d0GUvICz_2NmxCybHbg3Snjd_O469_fKRpuWhBCUsbEe2RxGc-hyBwUbmOYzrfPVaZTm_L4xQ6gVd1vPznlQKsM.u7Y7ggGUrPUPYgIIi3i3SQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6NzksInNlY3JldCI6ImU2NTQyM2U2Y2JkMjU0ZTk3OWExZTY1NjM2N2Y5ZmU3Iiwic2VydmljZSI6IlN0ZWFtIn0.QoXBhaKMai9J2LEh7klLyltFDrsObbuolwhB4cqegCY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 287\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"11f-vSjOhQhftdW8bMV2KbFzx88TFgI\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":287,"size_decoded":916,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"32ed2118d423d5aa588885442eb7e836","sha1":"bd28ce85085fb5d5bc6cc57629b173c7cf131602","sha256":"e9a5d56a2e4ebb33433598ea8fb6502e486c0b1572f57cda8d59ab66709cc061","sha512":"2dd01eaaf5a33c61a52de8c073736fa9ca93f68995adbc23efb5de486f3cfafaead30927d1606f702eaf4750cde9f72c90f567aa69cce01af4e6fb59b98784d8","ssdeep":"","tlshash":"08d0c252046c906ada406104415b3f0ad9bd1a2344c4b91e66ac866299fc2eb3409d9f","first_seen":"2026-08-11T11:41:16.913346Z","last_seen":"2026-08-11T11:41:16.913346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-11","alert":"Phishing Block","trigger":"wynavi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/gJSZkKA.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.843Z","timestamp":1786448440843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /gJSZkKA.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Sun, 13 Apr 2025 15:35:55 GMT\r\netag: \"246100acd2d9f20d5773d9854c1ed981\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: XcgDFnQCCs4SfTODdjhWOVEcIZEgufYRTDQ8NpFRbhOzQhEhNZKDrQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 221306\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\nx-served-by: cache-iad-khef600032-IAD, cache-bma-essb1270024-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 20, 0\r\nx-timer: S1786448441.844484,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 1172387\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1172387,"size_decoded":1173179,"mime_type":"image/png","magic":"PNG image data, 1308 x 1664, 8-bit/color RGBA, non-interlaced","md5":"208b10242fce83c77949f9ba2dfaaa96","sha1":"634cc9f17aa2c6ff8f4f2baaaaa2b77d5f2905d7","sha256":"03cde4f14c111538b652cf8d1d1fb87ad2425fd01c164c8e27a2d0f49557896c","sha512":"8249a7310e81c3f329c074ea950d98d1d3c98bef7715a2f0c5d00e9039b339b8c32643b08b8f1fdecdc276444ee3f45c98a00b722431a3057bde88c48652c180","ssdeep":"12288:uu4j7mRxR+Zy8LyClQy3OeG8GQ9f86pWTtX1r5BhZvkOj7jOGvkwtLiXd91Ce6X6:uu4XORGyMflft2o8fTBlcircUiLWuD","tlshash":"ee2523f968facc11670793bd3c4a3829507505c13485137b539ba5268d192fb8bf7bca","first_seen":"2025-08-27T10:08:47.162556Z","last_seen":"2026-08-11T11:41:16.916091Z","times_seen":10,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/7ZnNjzTc/decor-case-11242405.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.736Z","timestamp":1786448440736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /7ZnNjzTc/decor-case-11242405.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 241249\r\nlast-modified: Sun, 13 Apr 2025 13:04:41 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":241249,"size_decoded":241615,"mime_type":"image/png","magic":"PNG image data, 746 x 440, 8-bit/color RGBA, non-interlaced","md5":"54bedce20ec7429f3bd03ba332bfdd88","sha1":"ee49c96c886af5d42f0d812401b7230e3ab4fae0","sha256":"996e5bf249a90391ecff872615e79a4b67435998a5769c29633e482cd3c47497","sha512":"87648080bde634b84bc7866e9074f889edbc5003c7257bacf967792051469452e34eba384c36dcbb89cd389fc2c5893f7222a36213c65aa044dd137c8a4185e6","ssdeep":"6144:4wtiLZPyTjBzxyqFwuNqxIZvznOdVuzB5S6c4K3rFpjW:Die81m1LOdVkB5S6c4go","tlshash":"6534238f46a902544526fbaed094950f3d4321b742a0bf51bad04e1fda42bffcd1da23","first_seen":"2025-03-25T21:21:04.836774Z","last_seen":"2026-08-11T11:41:16.917559Z","times_seen":22,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wynavi.com/_next/static/media/2b36e1e8f1bfdd5e-s.p.woff","fqdn":"wynavi.com","domain":"wynavi.com","tld":"com"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.742Z","timestamp":1786448440742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wynavi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 08:52:58 GMT","end":"Sat, 03 Oct 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:CE:5C:FE:E3:11:B4:77:A3:02:1A:ED:2F:AE:BF:BA:B8:86:3C:50","sha256":"1E:80:17:2D:89:BC:C1:EF:11:35:A6:3C:D8:32:AD:02:5C:D4:4C:77:DD:26:40:C2:18:3A:B4:0E:E3:98:80:AC"}}},"request":{"raw":"GET /_next/static/media/2b36e1e8f1bfdd5e-s.p.woff HTTP/1.1\r\nHost: wynavi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.Vnf15oTAVgVEO8D6jeYjGeSbCAABNXgv.PpWmOto50QVSq-1Y.hGh-xZUHekdXjGD4x_GMgMz_X-to8icXBNP3F5ImCewdy-KSXzJjYBlDoIdoxny0PPGWTV4wm7g1m7u9lD6KNF96uRVtyrJSbVsurooj7CMJtGez1cP2OeoCvuAvBZzbur4lu1KlyKCLXuIUonbvqwxwxdTGc2Wk5r3gLlWFd_jwX2u0d0GUvICz_2NmxCybHbg3Snjd_O469_fKRpuWhBCUsbEe2RxGc-hyBwUbmOYzrfPVaZTm_L4xQ6gVd1vPznlQKsM.u7Y7ggGUrPUPYgIIi3i3SQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6NzksInNlY3JldCI6ImU2NTQyM2U2Y2JkMjU0ZTk3OWExZTY1NjM2N2Y5ZmU3Iiwic2VydmljZSI6IlN0ZWFtIn0.QoXBhaKMai9J2LEh7klLyltFDrsObbuolwhB4cqegCY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":692,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6688d59f1d0b9e116ceca1708a113d0d","sha1":"d0078c573575a40a584cc92d4ccc5e8ae62aa948","sha256":"cacc3c09d432702d237265c156358a0430dd08938afbceaf4a444d26340b25e8","sha512":"116612441c802eae5cdfa4441c5757ee48298f865e1ff4e164ae1ba9ab2a0856c7e2e5c023864eee6963eda1bb89d6edcc7951c4b566eca2aac989a66ef510a4","ssdeep":"","tlshash":"b4a0020c084b7aad4f52c4bd75cd7d3488564ac015a119615189d438825464e8845588","first_seen":"2024-08-02T16:52:12Z","last_seen":"2026-08-11T11:44:26.071285Z","times_seen":1829,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-11","alert":"Phishing Block","trigger":"wynavi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"wynavi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/3wb2HFrL/team-lines-8a64e266.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.731Z","timestamp":1786448440731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /3wb2HFrL/team-lines-8a64e266.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 3179\r\nlast-modified: Sun, 13 Apr 2025 13:08:53 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":3179,"size_decoded":3543,"mime_type":"image/png","magic":"PNG image data, 1110 x 175, 8-bit/color RGBA, non-interlaced","md5":"2500f9879e1b636968e1826fefc8cc6c","sha1":"0419055cfe475b2379a6548fe2f11cdb123bbf6c","sha256":"9a97322023b5d925cfd29e421209ff49f66d4af9bc5ff738a103b3b13d0cf0f0","sha512":"ea548a8686f5e7203d93a4a2c483da0739cde60e733a6cab643066bc6cc9497cd032e460e7dfbe9b8257521cfdfb85d0bdfec3116857ef9d10c6ea6bc4f8c0e4","ssdeep":"","tlshash":"7861ac7ed651385421ab8d87b12949fd7e74021d5130844fef40e6eeadecc07e92dda0","first_seen":"2025-03-25T21:21:04.807916Z","last_seen":"2026-08-11T11:41:16.918953Z","times_seen":31,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navi66.com/_next/static/media/4e81fe9cba68eadc-s.p.woff","fqdn":"navi66.com","domain":"navi66.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.646Z","timestamp":1786448440646,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/media/4e81fe9cba68eadc-s.p.woff HTTP/1.1\r\nHost: navi66.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://wynavi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"navi66.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"navi66.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi66.com/_next/static/media/2b36e1e8f1bfdd5e-s.p.woff","fqdn":"navi66.com","domain":"navi66.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.649Z","timestamp":1786448440649,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/media/2b36e1e8f1bfdd5e-s.p.woff HTTP/1.1\r\nHost: navi66.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://wynavi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"navi66.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"navi66.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/dtTrcyg6/button-open-d7dd6b6c.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.729Z","timestamp":1786448440729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /dtTrcyg6/button-open-d7dd6b6c.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 41251\r\nlast-modified: Sun, 13 Apr 2025 13:01:40 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":41251,"size_decoded":41616,"mime_type":"image/png","magic":"PNG image data, 494 x 118, 8-bit/color RGBA, non-interlaced","md5":"e8ef544f958d34fde2a758bcf1e9fd76","sha1":"986a0819679b8221fa057e7b8aba4f982691ec89","sha256":"104fd15457dfba2050ce627d817e1981c3d45c427999143ad228ffea7c28c5d3","sha512":"23d4d6f6da2aa35a1aefd15be2a6042112d16331ce9278aa9f806575866b2ade87668bd9671605a1272779ac526bc157186019c8178f6c20fc9dec154a800fad","ssdeep":"768:Ca4EWkbgLQODARuBxh2zO2jiO2BWPxHlhEu1xja7l8S2HldNOCKErHd:CaShLxcuBSrRlh31c8dHlqCKErHd","tlshash":"b403f2a9cd63d3dcb036645751fe22e47a425362025fee2186eb8225cce73d981c3f5a","first_seen":"2025-03-25T21:21:04.766463Z","last_seen":"2026-08-11T11:41:16.920323Z","times_seen":31,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navi66.com/_next/static/media/87ddd3229135f8c9-s.p.woff","fqdn":"navi66.com","domain":"navi66.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.648Z","timestamp":1786448440648,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/media/87ddd3229135f8c9-s.p.woff HTTP/1.1\r\nHost: navi66.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://wynavi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"navi66.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"navi66.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/XJzGTj8t/button-start-e161a054.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.738Z","timestamp":1786448440738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /XJzGTj8t/button-start-e161a054.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 43251\r\nlast-modified: Sun, 13 Apr 2025 13:02:26 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43251,"size_decoded":43616,"mime_type":"image/png","magic":"PNG image data, 590 x 198, 8-bit/color RGBA, non-interlaced","md5":"fee4b9ee7aa7fb903edef4b3690a695c","sha1":"d97c17984288ba71d133383b4867b6d4639981b2","sha256":"67e4155acc95920eccd99eea4995d09fe9880b160da8c7e60b1cf78c089afb1e","sha512":"6eedbdff5133d167b3d7f10930fe0e3bd10702ebbc7cedae245b28e424515f46f3c3f81c1a49f6781335dda743c3672c18c42cb2b09632744a7edacb82112296","ssdeep":"768:kxInKhLnjO84Rpv/Fs07ehanXaUj/Ucor9iqLfurtIlIaXqgmiA1PYphb1uKM+yp:yIWnnWJ7EaXbczkqLfu/iDmIp+KMaO","tlshash":"b413d0a8cd8b19910bf65576c8d2414fb81c3dca971421bf3e981a45dfc1f51636baf0","first_seen":"2025-03-25T21:21:04.817281Z","last_seen":"2026-08-11T11:41:16.921639Z","times_seen":22,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgur.com/VrizGQq.png","fqdn":"imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.757Z","timestamp":1786448440757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /VrizGQq.png HTTP/1.1\r\nHost: imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nretry-after: 0\r\nlocation: https://i.imgur.com/VrizGQq.png\r\naccept-ranges: bytes\r\ndate: Tue, 11 Aug 2026 11:40:41 GMT\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1786448441.013618,VS0,VE0\r\nserver: cat factory 1.0\r\nstrict-transport-security: max-age=300\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nx-frame-options: DENY\r\naccess-control-allow-origin: https://imgur.com\r\naccess-control-allow-credentials: false\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":9,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgur.com/gJSZkKA.png","fqdn":"imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.760Z","timestamp":1786448440760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /gJSZkKA.png HTTP/1.1\r\nHost: imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nretry-after: 0\r\nlocation: https://i.imgur.com/gJSZkKA.png\r\naccept-ranges: bytes\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1786448441.794908,VS0,VE0\r\nserver: cat factory 1.0\r\nstrict-transport-security: max-age=300\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nx-frame-options: DENY\r\naccess-control-allow-origin: https://imgur.com\r\naccess-control-allow-credentials: false\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":9,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/ZYXjN4Sf/csmoney-cc0687f8.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wynavi.com/214f7b557f0206","date":"2026-08-11T11:40:40.761Z","timestamp":1786448440761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /ZYXjN4Sf/csmoney-cc0687f8.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 11 Aug 2026 11:40:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 3879\r\nlast-modified: Sun, 13 Apr 2025 13:03:53 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3879,"size_decoded":4243,"mime_type":"image/png","magic":"PNG image data, 285 x 67, 8-bit/color RGBA, non-interlaced","md5":"71808e3bcc2e62649195ced18ed1b567","sha1":"5e1d1a96d3070639fa93e5b69a361187f804e987","sha256":"cc2087474831f2352994b10100fbc592cf49b36da50d6913dfa17e843677e5de","sha512":"a6afecc6e0273279c2aa199a74086387ab60c83757f961c7e077a9ddf1500ed0ab7b4d782226402280d9d7d72e3a833eae9b02d2640bca9493a95865a65676de","ssdeep":"","tlshash":"be816d4af4e16c73eebb08e04de213e0c25993965365f4a284671ced4da7b706905092","first_seen":"2025-03-25T21:21:04.859819Z","last_seen":"2026-08-11T11:41:16.923148Z","times_seen":13,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}