{"report_id":"79f216de-1f26-4af0-bad7-e32add0ab74e","version":6,"status":"done","tags":[],"date":"2026-02-06T22:18:05Z","url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/?naps","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"172.67.168.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/?naps","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"title":"네이버 : 로그인","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T04:07:07.173396Z","times_seen":17755421,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/?naps","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"172.67.168.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-13T22:18:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"sifralgenericmed.com/avemaria/index_files/f8d35bd15d044a58dbbb.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"wtm.pstatic.net/d538d2d/f8d35bd15d044a58dbbb.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sifralgenericmed.com","ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-06T22:18:07.190623Z","last_seen":"2026-02-06T22:18:07.190623Z","alert_count":64,"request_count":21,"received_data":2076961,"sent_data":10828,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"wtm.pstatic.net","ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2011-09-06","domain_rank":2156085,"first_seen":"2024-12-31T15:52:33.77949Z","last_seen":"2026-02-02T21:14:24.192106Z","alert_count":1,"request_count":2,"received_data":667218,"sent_data":951,"comment":"","tags":null,"fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}]},{"fqdn":"ssl.pstatic.net","ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2011-09-06","domain_rank":71086,"first_seen":"2012-10-18T18:40:49Z","last_seen":"2026-02-04T22:48:13.108345Z","alert_count":0,"request_count":5,"received_data":396338,"sent_data":2352,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ntm.pstatic.net","ip":{"addr":"96.6.16.233","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2011-09-06","domain_rank":387570,"first_seen":"2022-02-04T12:44:48Z","last_seen":"2026-01-31T20:40:05.407311Z","alert_count":0,"request_count":2,"received_data":405560,"sent_data":855,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nam.veta.naver.com","ip":{"addr":"203.104.162.225","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"Germany","country_code":"DE"},"domain_registered":"1997-09-12","domain_rank":61307,"first_seen":"2023-01-11T13:24:02Z","last_seen":"2026-02-04T17:38:01.288929Z","alert_count":0,"request_count":1,"received_data":409,"sent_data":451,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nlog.naver.com","ip":{"addr":"203.104.162.225","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"Germany","country_code":"DE"},"domain_registered":"1997-09-12","domain_rank":354439,"first_seen":"2023-05-26T15:20:44Z","last_seen":"2026-02-06T06:11:27.376671Z","alert_count":0,"request_count":1,"received_data":492,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ntm.pstatic.net/ex/nlog.js","fqdn":"ntm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"96.6.16.233","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"30aeeedcdc0093b7d9c0d814f05caa04","sha1":"b08d4a2137536c358be3899eb210e14297ec622c","sha256":"34d6fc3ec2bd6cb5f9159ae093e9e49e9e97e3597a1a567272b879fc64c71443","sha512":"b1cbcc30c5ecc8ef40fc17d95f8bc6e6c3b4bd693f4d5e9aa78fd4486ec40901342931ac5963d5eb69a58e135d60fc7d5458340f2392d577c7693a07847dee4f","ssdeep":"1536:QujDhew3nDTLnoBruK+o42Z1UZPvJYRS6I7Qpkit2nzi0XLxlxB5TNTadvL2fRJ0:JtcBaBoXdoFQYZaWRJs3HGbIZ","tlshash":"36e3b78cfad2f0b546f365a0806f960af17b2a25740ee4d1d6a6c4c1ac7898f5173e3d","size":154915,"data":"","first_seen":"2026-01-02T04:49:43.006503Z","last_seen":"2026-02-11T02:54:15.804293Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/assets/js-home/queue.js?1770416262","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c3e312cf100ade3d6628b700f580adc","sha1":"be73e92e1af8d0ab5f709cf59bc2cea704d0e890","sha256":"19653805a74cab47df72d1047ec670b137001c70140923ae87183e70b0a40024","sha512":"13d09f45fd7be390280358840626b4083808055c9a25bf2bea8ae362b9cf07ad49e7e782ceff85d37acffc410e535dc60b03707c7c0aa9c18342ed2331daff22","ssdeep":"96:Hcr8oGPaYsKqJi/L6Ulr8oGOaYsKqXi/Lsolr8oG4aYsKqXi/DI5K88DsUTi/K:48oisKMON8oJsKWoN8o1sKWyIM8qsIr","tlshash":"dfa12f2a21e600151a37a39d83d7d750b63174037637e9457a0e6bcc6f9cf24bb9a7c2","size":4998,"data":"","first_seen":"2026-02-06T22:18:13.34798Z","last_seen":"2026-02-06T22:18:13.34798Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/f8d35bd15d044a58dbbb.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c52c62684d8a0ae625666df403fee87","sha1":"a618332c96f3a39d48a7c5b8de62812906a0f285","sha256":"f120337423b1173a6148ada15c2979c917d7b066aa91b7f1684fbfe74c19f6e1","sha512":"7261a2b06981b3776ef9ac32c9165e5de3d1813902104e6b5adb95bdfdbf995bd498bc5da65448623207d610bb170d7d86a2747a0ea0bda1f0ec0dae94e39e2f","ssdeep":"6144:VNudkFkpVE95+JU+zv5GxVKT0E9weB/eRI:okOVc5WlGuYq","tlshash":"7a6439c8b1d3f023079310a6046b06caf17de954254d6b90e269d8e67c74eaeb07fa7d","size":322836,"data":"","first_seen":"2025-09-01T11:46:06.291354Z","last_seen":"2026-02-06T22:18:13.366302Z","times_seen":16,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"sifralgenericmed.com/avemaria/index_files/f8d35bd15d044a58dbbb.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/?naps","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a57b9f914cd62f16732384bd681ca6ad","sha1":"95517c7644cfa971916849cd494658a4d2eed665","sha256":"cc63dcae886f2433435dd195bff546d92f10f66129a2ff224a6f58f803b6aada","sha512":"25d9e2cdc89cc76fefa1575f23f4703225d9fd788e66ec788cff31a5e64d4ea6a1f022561ef4762f20ebcf9bf5b8ccaa28fadd81f661623ff9aeb170228dc401","ssdeep":"","tlshash":"4a41aedf39af4832566aacdb4d7b470c2ef2446b1402c9a83c7e41c6af74d6850236d6","size":2169,"data":"","first_seen":"2026-02-06T22:18:13.378548Z","last_seen":"2026-02-06T22:18:13.378548Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/gfp-core.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b4326e9513c5037af1e2f42e2515a35","sha1":"95643d4fccc313a27a5b3cf1fba5c26443757ec6","sha256":"ddfc86892fc9d5ad7331d2948a9fab644f2af2581e7b7f941715325d8fb3d9f4","sha512":"aea5e91c9fefe956d713997105ac8e39bdd1a8b4610dbf7f43de8944bad5aee575dafdb36786a239f2fb3a38a88848b7b3879d2f642142eedbb2e5aef36aadd5","ssdeep":"768:yREKdLZGjMrgeBZcdOUUmsET90yxc9FbTPO00:yREKdLZGjMZyKmsgHc/+","tlshash":"9223974df2d1b0910ba3a134522f640af2b72a54745fd9c0b666d2d0ad7ba4f7063f2d","size":48903,"data":"","first_seen":"2025-09-12T04:15:47.392169Z","last_seen":"2026-02-06T22:18:13.370009Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/tveta/libs/glad/prod/3.4.2/gfp-display-sdk.js","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fa8cca939bd6b5b290de2dcfb410efd","sha1":"dd5f32ec48399f24f6cd0dac7888c017b8126ad4","sha256":"e5dd94d779bba152fb4f360f1731a27b58c1be30e2335b97d40b9aaa0adf243b","sha512":"04d782e13362d6adfb6a82fcf8a926453cd1c3c9141db416e2656634930c1257237d4a6640c2472e89fb36f2d5bb8a1a634de46810b782bf1e8af9cf99f5fd6d","ssdeep":"1536:/rWvZCnnxFTwWojflAjQyiO8FhlOeL8ssMHcju9mDEjf4i2SZ4HRJ:WZCnQyX8FhgVI+DEjf4pSZ4HRJ","tlshash":"3ad3c79cb2c3b03546a6a079507f0209b379289464de80d8f67ed8d97e3990e7673f78","size":142092,"data":"","first_seen":"2025-09-12T04:15:47.57325Z","last_seen":"2026-02-06T22:18:13.337713Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wtm.pstatic.net/d538d2d/f8d35bd15d044a58dbbb.js","fqdn":"wtm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c52c62684d8a0ae625666df403fee87","sha1":"a618332c96f3a39d48a7c5b8de62812906a0f285","sha256":"f120337423b1173a6148ada15c2979c917d7b066aa91b7f1684fbfe74c19f6e1","sha512":"7261a2b06981b3776ef9ac32c9165e5de3d1813902104e6b5adb95bdfdbf995bd498bc5da65448623207d610bb170d7d86a2747a0ea0bda1f0ec0dae94e39e2f","ssdeep":"6144:VNudkFkpVE95+JU+zv5GxVKT0E9weB/eRI:okOVc5WlGuYq","tlshash":"7a6439c8b1d3f023079310a6046b06caf17de954254d6b90e269d8e67c74eaeb07fa7d","size":322836,"data":"","first_seen":"2025-09-01T11:46:06.291354Z","last_seen":"2026-02-06T22:18:13.366302Z","times_seen":16,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"wtm.pstatic.net/d538d2d/f8d35bd15d044a58dbbb.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/ntm_109a32482d88.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b008c9e4ab7d6953dcfc429ca03e13b","sha1":"3e938a3fc0e981813ef7639a04fb9c487d9370da","sha256":"e0be3e937f5a05e1f06dccb1e73a9415fc01d1de9e9c168dfaaacd2d019771a6","sha512":"c9c6ff2dc8cdf93fc94e8aa9fcd7a85665bc844c597f3b153bae065e26c34b1d6d2197be83b64da9287c18fdd9fde46f38f17a7a17e2a5c148c36dd47785a086","ssdeep":"3072:wbuNTDNsO+18C9wdYI4JJa8JJj6vdluTxm1d1Rhs0:wwuO+18MJOvdB1rs0","tlshash":"c234b78cfe92f0b956e3a1a4802f550af17b2a25701ed4d1daa2c5d1ac7898f4173f3d","size":249611,"data":"","first_seen":"2024-12-22T16:31:50.016921Z","last_seen":"2026-06-24T10:29:23.464828Z","times_seen":460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/srcOnError.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fd3d66cf5a6316b6b3415eb5c6aff48","sha1":"73f8b8c7a8f192484f19aee389a537d625c00d1e","sha256":"f3a0cb5e6e03b07b8a211598949ddab384398d43913f7f7f3af96c7a64a06d76","sha512":"a1d0d1f3d988e2bb2a12eacdae751707aed6f7a870348557fe97c14a3892ef06e62d633be2ef47761084416475be64b50540e18dea3953aaa1357ac16ba23475","ssdeep":"96:Y1TS5hgIMS8SMNes3pGC7puCKevbkiQW6Ki6zcNyE:YdIM3SMNzGC7NKHiQW64IyE","tlshash":"6b9186cd2ceb0af248a3257a5f4f730421e261679a16cc60bd0c96904f089bfd596bdc","size":4257,"data":"","first_seen":"2025-04-04T12:10:18.373869Z","last_seen":"2026-06-24T10:29:23.474414Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/assets/js-home/ping.js?1770416262","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc3363eca164288770379ddfaafc4f02","sha1":"8f6e4ff662dab0317011d6d5b6fe6a0768971525","sha256":"c965ff5fc2bdacbbc0d9936d3313c9b56050cd724b5fa44c8f17507b181e6c08","sha512":"1cfa1f6b4dc860ebebb0d14ad085d62bf85d390edc716d099b5d987a9ef2b61697cbedf2162965a2ddc56a8740c04933b50a846f3e542fac5d74e1acd7c465b4","ssdeep":"","tlshash":"6c11520e9cfe08081e37b1a14b17b0037a2a590b531aed8a3f4e07553fc4fb866603e9","size":1014,"data":"","first_seen":"2025-11-01T03:06:07.076527Z","last_seen":"2026-02-06T22:18:13.342472Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/assets/js-home/update_user.js?1770416262","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3166f6d6f74ed42ca600644495dce4e6","sha1":"b1f3016f2ee5ed225137aa246663346387dc4ccb","sha256":"55ac7405fbb9dc1ebb95c9f8a0c09751b9bb0c81cdc2ac22935fca7db3fd6ee2","sha512":"452fedc1d9800186bef2aafca717120cc400d0676bae037bef390eaff85520bbd074be8a7f8f07fb18a83349860959822eb397fed51a53483aff6070d6a71411","ssdeep":"192:Oyt/lv2FegvzqtI/vYIefB5E4JLZfKxLeWiHmdbr4:Oyt92FegSWYbRXKSmJr4","tlshash":"d9d17b4932e3f0e466393577d89bc0a473e87941a80a8744e62c42d94be971bfe1dc6e","size":6323,"data":"","first_seen":"2026-02-06T22:18:13.373057Z","last_seen":"2026-02-06T22:18:13.373057Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/?naps","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"536a12b47204a817b7977df5255a4450","sha1":"930b735992896cb69c04a30019ae54d09ef894af","sha256":"d3af700f10fdf8780650a46058bd7f389b675b7f48527b606c88dd415fe9782b","sha512":"841ebf77b46b6f3985ac878ae6aecedd818890655cf81e5e5cb0e91c8d0b744b4fd081128fe599b1cb7c3dc4dad90aaa8bfe4c2f7916bc2c1f97c50d72b1d2be","ssdeep":"192:naC/cuAcpuaCccuAcpURxXALgk5ljsq6q+q+qYvrTq7:muUukwLJ","tlshash":"8312ef0976f759895233312d5aab8200652661172804ec1c7d4cbbb06f9ce3fe9b77ee","size":9089,"data":"","first_seen":"2025-11-01T03:06:07.100231Z","last_seen":"2026-02-06T22:18:13.380425Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/gfp-display-sdk.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fa8cca939bd6b5b290de2dcfb410efd","sha1":"dd5f32ec48399f24f6cd0dac7888c017b8126ad4","sha256":"e5dd94d779bba152fb4f360f1731a27b58c1be30e2335b97d40b9aaa0adf243b","sha512":"04d782e13362d6adfb6a82fcf8a926453cd1c3c9141db416e2656634930c1257237d4a6640c2472e89fb36f2d5bb8a1a634de46810b782bf1e8af9cf99f5fd6d","ssdeep":"1536:/rWvZCnnxFTwWojflAjQyiO8FhlOeL8ssMHcju9mDEjf4i2SZ4HRJ:WZCnQyX8FhgVI+DEjf4pSZ4HRJ","tlshash":"3ad3c79cb2c3b03546a6a079507f0209b379289464de80d8f67ed8d97e3990e7673f78","size":142092,"data":"","first_seen":"2025-09-12T04:15:47.57325Z","last_seen":"2026-02-06T22:18:13.337713Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/?naps","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0cf57e4fcc72cd914498ae80dcafff1f","sha1":"ea90df24e43e35e64abf7ef7b16e8c728e21a415","sha256":"15e2f8cadd73d2f0c75b68746c29fe1cecbd8760063cb748acd143c7037ee529","sha512":"a8ecca1a9c0b39e7070ff0640b31db3e13e4326f8b72e981f195a390fbab5e45cf8b9831c2e9012f3c7befafdb55777daba3d6ee2b2170974c2d89431ea56ed2","ssdeep":"96:0dDnlFgtnlFpPnlF8lnlFnInHoFXonW9AXOroFF:0dD4tBPEl/IHsoxcE","tlshash":"8ab120a532f51bf10667612f13df9b80e5b461bb3004cd64f81e4f8b5f89aa4e1a32d6","size":5392,"data":"","first_seen":"2025-11-01T03:06:07.102407Z","last_seen":"2026-02-06T22:18:13.382625Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/synchronizer.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"867952280538f37644afdbfd98a92979","sha1":"3444c40c4610806539c3208dbff646299d33dcc8","sha256":"a071e796adb442dbd8af4e03a0f8b90c6b8b3b5f333bf456a7236099e434ca1a","sha512":"e5f948ce93c06fa76e25d7ec681d9445d79f4dec24886de039dfca7ee8da3e2b4d7f345d31729d4c3868d4d761c79e7d24a0251df9bd0c360b3a87695f91c631","ssdeep":"1536:yAKljBZ08a9zMvD0WCa1451fvfXj63WSXkTN5AaU3/I4iz7w:h8aFMv3W9rpU3oY","tlshash":"eb73744dfed1f0904763f666926fa41ab2bb1a55b40fc8d0926ad1e0dc7898f4133e2d","size":75445,"data":"","first_seen":"2024-12-11T11:55:27.291019Z","last_seen":"2026-03-25T21:03:06.748946Z","times_seen":6638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/assets/js-home/log.js?1770416262","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd223c89eb6cab38cd1ff04d6c016234","sha1":"a055b763da75165e86bed055d445a6b5cbd3237d","sha256":"48c49b873846126a9f587cb00d43b74add0030294271f75c6afdcfce9e1c631c","sha512":"bba0b3f8f83a52c26eea6b5389e1bff2ca8ceae48d5368a03a2cb0831dea5ce79919a03dcdbfbcbd764b057faca3b853069ae91d148b7c9d736142f7d63b7b6a","ssdeep":"","tlshash":"fe11ce1e18a508170b57326c8b0f660ab36b15176609d80affff87657f20a2494129d7","size":922,"data":"","first_seen":"2026-02-06T22:18:13.36751Z","last_seen":"2026-02-06T22:18:13.36751Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/?naps","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06ae2886495be083b1181139d743b9e5","sha1":"8125c09d5b735145a933564f6bb7c86d174a1d8e","sha256":"49654fbdfa5f01cf08948e6deba29d4b7ac80af3bc4ebef2b1d0c6486dcad75f","sha512":"dff50d8f229346fb5622658ae20b114e6a0c28de5c621d95248f103d0cd1017a103c834ad1e6df914bcaf8c2404f7a8714dcdaef4d06e0556e494e1bd9454831","ssdeep":"192:09RLvoE8kmW1W/ubGnRQ2pgpyzOR1iXfpc425lc4F+//5gyQYz:wEE8pWIHnRR6L1iXfpcb5lcu+f","tlshash":"c102cd6af2e6327319f770be2b9b65102c3600272440d8347d7dc6495fe5c4897babe9","size":8938,"data":"","first_seen":"2025-11-01T03:06:07.10391Z","last_seen":"2026-02-06T22:18:13.384697Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/melona/libs/gfp-nac-module/synchronizer.js","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ce17d152fc2bb12f6ed770034ec6a4e","sha1":"b5aa3ebfcc22f2db16dc8fe323b8d6e5db5517d4","sha256":"99f7af6da4faf08024434899bf9c4641946122b04adf19261c26b491841ff4af","sha512":"86024bc33623da36aa77ab5df34ac5e80319636e32e759ef79891549eadce13493b9d76b5ec6fe5f7776cddc1808c50eaddbf373eed381d34e9abbe95086be1e","ssdeep":"768:tokhl+D7gPNlNE9uf36AY8/GSQt9RQrjiXFHmsHwzsN4UMB8T22Gx4jXdTVsAV:K+l+wlCGQS+TUiXFBYBtY","tlshash":"bb2362cdb1d3f4a453a76078103f510af33a2d94a89e9198e1bad4d17d3881ad27bf9c","size":45816,"data":"","first_seen":"2026-01-27T08:35:11.915541Z","last_seen":"2026-08-06T19:58:41.013245Z","times_seen":6593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/default_202105.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"981870cd1196002d23ac59c6066978a4","sha1":"00ff32f42d0bf998955718ff5ff0ebe49c93ee0a","sha256":"287113a1f920ab8383cacc2282891fe62a7d7a371e3872b113e4f94fa971a84b","sha512":"bd874dfdeb617e144ff592bc1994f1e1264f5efc0a9747aab752f470eedd3a7bb1420e549f923f7fc3bd339fef93d50e9c73ba89956620880bae9234245232d7","ssdeep":"3072:0VrNRNpy9LTolFaFITYlo52KiGoqU5MUN5:0VrkolFaykq527BL","tlshash":"0934178cb6d6b07203e720a5113f110bf23b5969744e94d4e2a5d9f1adb888e813bf7d","size":233015,"data":"","first_seen":"2025-08-19T12:23:02.17477Z","last_seen":"2026-02-06T22:18:13.364592Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/melona/libs/gfp-nac-module/synchronizer.js","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ce17d152fc2bb12f6ed770034ec6a4e","sha1":"b5aa3ebfcc22f2db16dc8fe323b8d6e5db5517d4","sha256":"99f7af6da4faf08024434899bf9c4641946122b04adf19261c26b491841ff4af","sha512":"86024bc33623da36aa77ab5df34ac5e80319636e32e759ef79891549eadce13493b9d76b5ec6fe5f7776cddc1808c50eaddbf373eed381d34e9abbe95086be1e","ssdeep":"768:tokhl+D7gPNlNE9uf36AY8/GSQt9RQrjiXFHmsHwzsN4UMB8T22Gx4jXdTVsAV:K+l+wlCGQS+TUiXFBYBtY","tlshash":"bb2362cdb1d3f4a453a76078103f510af33a2d94a89e9198e1bad4d17d3881ad27bf9c","size":45816,"data":"","first_seen":"2026-01-27T08:35:11.915541Z","last_seen":"2026-08-06T19:58:41.013245Z","times_seen":6593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/js/jquery-3.7.1.min.js?1770416262","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-07T03:57:52.320162Z","times_seen":184348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/assets/js-home/controller.js?1770416262","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11853308abfd55b2cf7ff7f9f9a2b7f5","sha1":"43b9a6878f347f064fd569c0b0d5b8eff0a200d5","sha256":"25166fec8e851d864b84ad995658fafec5d110bdac00d2dcd69f8e71a133090d","sha512":"5e38575968f1dd864f81de8b448ae0926a981ba102ca784a5a79300a88adbc13dac8ebc910569d88d36cb08b9950d80fa5d2d7126b69fd3fcb1e23fcfd00e2d8","ssdeep":"384:U5ykj7oBULARk6R9DRkeRueRrrRLrRD4Ro4ROgRFgR4vROvRSdIvpmWe1xZ3S7HD:U0vpmWe1xZ3S7HxluJXIKsHKKIWk6","tlshash":"50d2239ad0fe025345a7c238ab9ff112605b105b5404d86a3f8ccb88df84b5f9667fd4","size":29345,"data":"","first_seen":"2026-02-06T22:18:13.354401Z","last_seen":"2026-02-06T22:18:13.354401Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/passkeyApi.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1f425e369fcc73a81f2ad645f008a49","sha1":"6ad7959be0556b6ce8fae53546b9f6e981429ef8","sha256":"08fe1bd155cc631ccc1d564e498851f785b22db22e798ab0367fd0e95014a662","sha512":"3a4d54c00d5a4ec28b4e09787d773bd550b9b09a17f26505a8fd3d0007fb20011f36b61101bc1d2ff36f1f16bbbf8b6203f8b7a6b8953eba65f1252340646967","ssdeep":"1536:foC9HFEKQERch/6t7JyMin9RrYEsRHh89NtleEVgMwyyZmjsGG20zUdVZKW4XVDn:AC9HFEKDK/qKn36BGt4Ao/dX32ecp0","tlshash":"c5d4735002a2ddf6ffe50995c2b21818387d5a7b646125b0aad2bdfe6c1adc480f1f1f","size":653032,"data":"","first_seen":"2025-04-04T12:10:18.360001Z","last_seen":"2026-02-06T22:18:13.356328Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/?naps","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"07127e88ad5a18d9c664455975b9b7a6","sha1":"5deb881943ecae8805247679af51a07e721dfb38","sha256":"0ab604db343f924bfe1ec96501da4ecae29ca79721339d42077f35ee622c122f","sha512":"d6f98167e56c288292213e555dde93b5b2ec3e5aadf7b32fb41a3c52885ea4f0d0e4b974e4fdb12959d59b47c22a0873f5ebefffed07c1ed875b7432e534401c","ssdeep":"","tlshash":"5d2134283be816334af376667bcf5244e225c5536c88cd61397e47431f61da08272aee","size":1392,"data":"","first_seen":"2025-11-01T03:06:07.105232Z","last_seen":"2026-02-06T22:18:13.386696Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/ncaptcha-api.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e71bd8fb09b97e24a87a07d87de49d31","sha1":"c9d097d487e3adce218daedad5d6fa7f71f1070c","sha256":"6a5988907a80a0a584bc5a48fa443da654fd1c5b72f8209f2845873eca271ce9","sha512":"00139764481f5c14bdb64a8b978bfb57923dddb52301f46f7321ece886898d2c795607fd01d083a376bdb0c84059308198050aa2f6f5216f3f9e20adb4899712","ssdeep":"384:ZYi0NDeGjbbq+8foHtTwqyFYoVZwXLfvG++Cd+97TK/JQv4U1TccGOhBi:Zsqci+8foNTXyFYoVZw7fvG++i+dTK/3","tlshash":"0ca27350b5ac9eec16b33e329df75911a8124b104463709099a0df94dbfbb9a0bc7ef0","size":23016,"data":"","first_seen":"2025-09-01T11:46:06.283022Z","last_seen":"2026-02-06T22:18:13.368632Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntm.pstatic.net/scripts/ntm_109a32482d88.js","fqdn":"ntm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"96.6.16.233","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b008c9e4ab7d6953dcfc429ca03e13b","sha1":"3e938a3fc0e981813ef7639a04fb9c487d9370da","sha256":"e0be3e937f5a05e1f06dccb1e73a9415fc01d1de9e9c168dfaaacd2d019771a6","sha512":"c9c6ff2dc8cdf93fc94e8aa9fcd7a85665bc844c597f3b153bae065e26c34b1d6d2197be83b64da9287c18fdd9fde46f38f17a7a17e2a5c148c36dd47785a086","ssdeep":"3072:wbuNTDNsO+18C9wdYI4JJa8JJj6vdluTxm1d1Rhs0:wwuO+18MJOvdB1rs0","tlshash":"c234b78cfe92f0b956e3a1a4802f550af17b2a25701ed4d1daa2c5d1ac7898f4173f3d","size":249611,"data":"","first_seen":"2024-12-22T16:31:50.016921Z","last_seen":"2026-06-24T10:29:23.464828Z","times_seen":460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/gfp-display-sdk.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/index_files/gfp-display-sdk.js HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:42 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 20:51:06 GMT\r\netag: \"22b0c-63f69fa6fa280-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 40290\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6pd4Ty2vSaJfPUxYWrdVWxxs5ppubbUbusbRb437UrQx302XO6DCv8ADqjBC3OK7cMjG%2FJnbE5Xz1zO%2FE%2FCEywfZMbDvE9NN9yYy2fQmrf1ug%3D%3D\"}]}\r\ncf-ray: 9c9e04e7ba32b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142092,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"3fa8cca939bd6b5b290de2dcfb410efd","sha1":"dd5f32ec48399f24f6cd0dac7888c017b8126ad4","sha256":"e5dd94d779bba152fb4f360f1731a27b58c1be30e2335b97d40b9aaa0adf243b","sha512":"04d782e13362d6adfb6a82fcf8a926453cd1c3c9141db416e2656634930c1257237d4a6640c2472e89fb36f2d5bb8a1a634de46810b782bf1e8af9cf99f5fd6d","ssdeep":"1536:/rWvZCnnxFTwWojflAjQyiO8FhlOeL8ssMHcju9mDEjf4i2SZ4HRJ:WZCnQyX8FhgVI+DEjf4pSZ4HRJ","tlshash":"3ad3c79cb2c3b03546a6a079507f0209b379289464de80d8f67ed8d97e3990e7673f78","first_seen":"2025-09-12T04:15:47.57325Z","last_seen":"2026-02-06T22:18:13.337713Z","times_seen":27,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/assets/js-home/ping.js?1770416262","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /assets/js-home/ping.js?1770416262 HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:42 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Nov 2025 21:55:42 GMT\r\netag: \"3f6-6434497b01380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 535\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FpiCzbtc%2FPtcMWDoIP6I8W2B2ewKe84w7t1ee5CKern%2BGB1Iej8vOyxcslA%2B7olOclPLKg6Sc%2F5KCa9az0ZDGc%2BfKEeOhxwINnKTJL3gcaBEKw%3D%3D\"}]}\r\ncf-ray: 9c9e04e7ca38b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"fc3363eca164288770379ddfaafc4f02","sha1":"8f6e4ff662dab0317011d6d5b6fe6a0768971525","sha256":"c965ff5fc2bdacbbc0d9936d3313c9b56050cd724b5fa44c8f17507b181e6c08","sha512":"1cfa1f6b4dc860ebebb0d14ad085d62bf85d390edc716d099b5d987a9ef2b61697cbedf2162965a2ddc56a8740c04933b50a846f3e542fac5d74e1acd7c465b4","ssdeep":"","tlshash":"6c11520e9cfe08081e37b1a14b17b0037a2a590b531aed8a3f4e07553fc4fb866603e9","first_seen":"2025-11-01T03:06:07.076527Z","last_seen":"2026-02-06T22:18:13.342472Z","times_seen":2,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wtm.pstatic.net/d538d2d/40948ca2af0480f8432e.wasm","fqdn":"wtm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:48.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /d538d2d/40948ca2af0480f8432e.wasm HTTP/1.1\r\nHost: wtm.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sifralgenericmed.com/\r\nOrigin: https://sifralgenericmed.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/wasm\r\nlast-modified: Wed, 27 Aug 2025 03:00:54 GMT\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\ncache-control: public, max-age=2592000\r\ndate: Fri, 06 Feb 2026 22:17:49 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}],"data":{"size":343751,"size_decoded":0,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"29cb31009a2d354808e40b125a191075","sha1":"7909704f1ce6edd31ed3c96bba62a27b5ab3f32d","sha256":"ec1c7d2520199b0b59270f4af2fc285ff585f32530c61a32f7b09964f8944d4f","sha512":"1d0a3304d9d21158d2f3564d9ce9747a64b5c42b2b31dc8db67ee36dbb56427bd5b18b10c549a7b92fcde1bbbf0b3f665d5bee7933aadfb8ebbe30e438852e9c","ssdeep":"6144:+rmhFIt8y28/bLOtOJY1vtHm6eyqIZqpGn:+r3t8yjAiqEZyfn","tlshash":"47742e12d2b20c26f511ae71790c962b6b39e44076adc2ebc78d44972cbf50e7efa750","first_seen":"2025-09-01T11:46:06.305704Z","last_seen":"2026-02-06T22:18:13.345622Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/assets/js-home/queue.js?1770416262","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /assets/js-home/queue.js?1770416262 HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:42 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Nov 2025 18:37:42 GMT\r\netag: \"1386-6441f1bd6c980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 953\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vr0ei%2FKgrn73lu%2Bdkg8UnmziBQZS6NstKZrW6lGV6UxoQla7yo%2BjvODxFDF5KPKJIhiM5J9DeBOgDjQTXKekAxLH441e3g2MdtpyE8tVVGOGVA%3D%3D\"}]}\r\ncf-ray: 9c9e04e7ca37b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4998,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"5c3e312cf100ade3d6628b700f580adc","sha1":"be73e92e1af8d0ab5f709cf59bc2cea704d0e890","sha256":"19653805a74cab47df72d1047ec670b137001c70140923ae87183e70b0a40024","sha512":"13d09f45fd7be390280358840626b4083808055c9a25bf2bea8ae362b9cf07ad49e7e782ceff85d37acffc410e535dc60b03707c7c0aa9c18342ed2331daff22","ssdeep":"96:Hcr8oGPaYsKqJi/L6Ulr8oGOaYsKqXi/Lsolr8oG4aYsKqXi/DI5K88DsUTi/K:48oisKMON8oJsKWoN8o1sKWyIM8qsIr","tlshash":"dfa12f2a21e600151a37a39d83d7d750b63174037637e9457a0e6bcc6f9cf24bb9a7c2","first_seen":"2026-02-06T22:18:13.34798Z","last_seen":"2026-02-06T22:18:13.34798Z","times_seen":1,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/melona/libs/gfp-nac-module/synchronizer.js","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:46.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /melona/libs/gfp-nac-module/synchronizer.js HTTP/1.1\r\nHost: ssl.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Testa/6.2.11\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 27 Jan 2026 05:45:58 GMT\r\netag: \"b2f8-64958234beb78-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD\r\naccess-control-allow-headers: Range\r\ncontent-length: 18363\r\ncontent-type: application/javascript\r\ncache-control: max-age=472\r\ndate: Fri, 06 Feb 2026 22:17:46 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45816,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45814)","md5":"8ce17d152fc2bb12f6ed770034ec6a4e","sha1":"b5aa3ebfcc22f2db16dc8fe323b8d6e5db5517d4","sha256":"99f7af6da4faf08024434899bf9c4641946122b04adf19261c26b491841ff4af","sha512":"86024bc33623da36aa77ab5df34ac5e80319636e32e759ef79891549eadce13493b9d76b5ec6fe5f7776cddc1808c50eaddbf373eed381d34e9abbe95086be1e","ssdeep":"768:tokhl+D7gPNlNE9uf36AY8/GSQt9RQrjiXFHmsHwzsN4UMB8T22Gx4jXdTVsAV:K+l+wlCGQS+TUiXFBYBtY","tlshash":"bb2362cdb1d3f4a453a76078103f510af33a2d94a89e9198e1bad4d17d3881ad27bf9c","first_seen":"2026-01-27T08:35:11.915541Z","last_seen":"2026-08-06T19:58:41.013245Z","times_seen":6593,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/synchronizer.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/index_files/synchronizer.js HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:45 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 20:51:06 GMT\r\netag: \"126b5-63f69fa6fa280-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 25205\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BrLC0Oo6kT5C8HsZrZ39bxxNlctRux6IaqnrKdrO5DqeDOnUnvT8xVqDWwCDdOx7CBQyeSv0Py4%2BkBg%2FoHQIQsmN2%2FHqznov4u4EkvcvK2R7%2BA%3D%3D\"}]}\r\ncf-ray: 9c9e04e7ba33b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75445,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"867952280538f37644afdbfd98a92979","sha1":"3444c40c4610806539c3208dbff646299d33dcc8","sha256":"a071e796adb442dbd8af4e03a0f8b90c6b8b3b5f333bf456a7236099e434ca1a","sha512":"e5f948ce93c06fa76e25d7ec681d9445d79f4dec24886de039dfca7ee8da3e2b4d7f345d31729d4c3868d4d761c79e7d24a0251df9bd0c360b3a87695f91c631","ssdeep":"1536:yAKljBZ08a9zMvD0WCa1451fvfXj63WSXkTN5AaU3/I4iz7w:h8aFMv3W9rpU3oY","tlshash":"eb73744dfed1f0904763f666926fa41ab2bb1a55b40fc8d0926ad1e0dc7898f4133e2d","first_seen":"2024-12-11T11:55:27.291019Z","last_seen":"2026-03-25T21:03:06.748946Z","times_seen":6638,"resource_available":true,"data":null}},"time_used":2869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2727,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/favicon.ico","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/favicon.ico HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:44 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 21:07:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fHmP%2BydGHJVPqsn2o3ehDGti8UPxH3zSkROt1TaL6kM0SV1LLcDFsIuxc%2Fmuqucrb78aczaDttzg%2BijtPZVeeQDTWrKWvWuKNkklGMVy1WwfvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"1536-63f6a36c18780\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9c9e04e7ca3bb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b707378e4db3fcca990f228c4d865f86","sha1":"8feaa55c2973a7e40fb1d09d65ab762c5d6bdcc4","sha256":"4059be15d3943507390a124da698cf6f46da07582d846d30eb46e51f1000974c","sha512":"e4945fd998c8c678238edbca7de4374a04e2faf6cbf1a083411bc9c186f757bb3139b39150de5ede47a8d55a20820004bce0cc2c4b19fbe238b6b1a71ca5e94b","ssdeep":"96:jjqH++uzH++nXANy1g9E++++++++++++++++++++++++++++++x999999999999z:jg++uzH++nQNAgC++++++++++++++++P","tlshash":"4db108f3846623a9f4471db1580443c259b2ac8e3a275eb4f2cd3de8c4ba467c1a17b7","first_seen":"2023-04-06T12:49:18Z","last_seen":"2026-08-04T09:12:56.602412Z","times_seen":1090,"resource_available":false,"data":null}},"time_used":1702,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1702,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/assets/js-home/controller.js?1770416262","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /assets/js-home/controller.js?1770416262 HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:42 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 17:48:20 GMT\r\netag: \"72ad-6446ee2a7c100-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 3912\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sm8RUM9fGD6jYn5vYbWdmrHfXjN%2Fmd%2FPIo5zJ9lHcNWqd%2F%2B42JMlaZMoleRDY3Y9ycImGc97hWYXbi05B7ISVSPnap%2FzR1Dg%2BWWHHLt2dLr10Q%3D%3D\"}]}\r\ncf-ray: 9c9e04e7ca39b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29357,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"11853308abfd55b2cf7ff7f9f9a2b7f5","sha1":"43b9a6878f347f064fd569c0b0d5b8eff0a200d5","sha256":"25166fec8e851d864b84ad995658fafec5d110bdac00d2dcd69f8e71a133090d","sha512":"5e38575968f1dd864f81de8b448ae0926a981ba102ca784a5a79300a88adbc13dac8ebc910569d88d36cb08b9950d80fa5d2d7126b69fd3fcb1e23fcfd00e2d8","ssdeep":"384:U5ykj7oBULARk6R9DRkeRueRrrRLrRD4Ro4ROgRFgR4vROvRSdIvpmWe1xZ3S7HD:U0vpmWe1xZ3S7HxluJXIKsHKKIWk6","tlshash":"50d2239ad0fe025345a7c238ab9ff112605b105b5404d86a3f8ccb88df84b5f9667fd4","first_seen":"2026-02-06T22:18:13.354401Z","last_seen":"2026-02-06T22:18:13.354401Z","times_seen":1,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/passkeyApi.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/index_files/passkeyApi.js HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:45 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 20:51:08 GMT\r\netag: \"9f6e8-63f69fa8e2700-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrCYWyavArApoD5wS2D7wiLl6EBMFYZLwpu99%2FhGDdo9023ujCGtmC%2FD4FzHAgzE%2FU%2BxoUnHThbDKQPA%2FYNqZOe0tcICGyMeeW%2BlkcDFbPLB0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9c9e04e7ea40b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":653032,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65468), with escape sequences","md5":"c1f425e369fcc73a81f2ad645f008a49","sha1":"6ad7959be0556b6ce8fae53546b9f6e981429ef8","sha256":"08fe1bd155cc631ccc1d564e498851f785b22db22e798ab0367fd0e95014a662","sha512":"3a4d54c00d5a4ec28b4e09787d773bd550b9b09a17f26505a8fd3d0007fb20011f36b61101bc1d2ff36f1f16bbbf8b6203f8b7a6b8953eba65f1252340646967","ssdeep":"1536:foC9HFEKQERch/6t7JyMin9RrYEsRHh89NtleEVgMwyyZmjsGG20zUdVZKW4XVDn:AC9HFEKDK/qKn36BGt4Ao/dX32ecp0","tlshash":"c5d4735002a2ddf6ffe50995c2b21818387d5a7b646125b0aad2bdfe6c1adc480f1f1f","first_seen":"2025-04-04T12:10:18.360001Z","last_seen":"2026-02-06T22:18:13.356328Z","times_seen":151,"resource_available":true,"data":null}},"time_used":3242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2710,"receive":532,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ntm.pstatic.net/ex/nlog.js","fqdn":"ntm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"96.6.16.233","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:43.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 30 Jun 2025 00:00:00 GMT","end":"Mon, 29 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:1A:5B:CB:CA:6F:4D:C4:54:14:EA:80:9E:58:78:0B:E5:4E:15:75","sha256":"47:40:52:1C:BD:D1:EE:A2:FF:89:F7:2D:0B:AF:6D:77:E0:59:2D:26:8C:5F:4B:A2:89:74:12:FE:8B:E9:02:27"}}},"request":{"raw":"GET /ex/nlog.js HTTP/1.1\r\nHost: ntm.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 31 Dec 2025 04:39:50 GMT\r\nserver: Testa/6.2.11\r\ncontent-type: application/javascript; charset=utf-8\r\nmutated: false\r\nx-etag: 25d2300006954a916\r\nx-object-archived: false\r\nx-object-restored: false\r\ncontent-encoding: gzip\r\ncontent-length: 48256\r\ncache-control: max-age=502\r\nexpires: Fri, 06 Feb 2026 22:26:05 GMT\r\ndate: Fri, 06 Feb 2026 22:17:43 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":154915,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65499), with no line terminators","md5":"30aeeedcdc0093b7d9c0d814f05caa04","sha1":"b08d4a2137536c358be3899eb210e14297ec622c","sha256":"34d6fc3ec2bd6cb5f9159ae093e9e49e9e97e3597a1a567272b879fc64c71443","sha512":"b1cbcc30c5ecc8ef40fc17d95f8bc6e6c3b4bd693f4d5e9aa78fd4486ec40901342931ac5963d5eb69a58e135d60fc7d5458340f2392d577c7693a07847dee4f","ssdeep":"1536:QujDhew3nDTLnoBruK+o42Z1UZPvJYRS6I7Qpkit2nzi0XLxlxB5TNTadvL2fRJ0:JtcBaBoXdoFQYZaWRJs3HGbIZ","tlshash":"36e3b78cfad2f0b546f365a0806f960af17b2a25740ee4d1d6a6c4c1ac7898f5173e3d","first_seen":"2026-01-02T04:49:43.006503Z","last_seen":"2026-02-11T02:54:15.804293Z","times_seen":118,"resource_available":true,"data":null}},"time_used":1000,"timings":{"blocked":497,"dns":487,"connect":1,"send":0,"wait":2,"receive":2,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/static/nid/login/sprite/m_sp_01_login_7b3d4fc3.png","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:44.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /static/nid/login/sprite/m_sp_01_login_7b3d4fc3.png HTTP/1.1\r\nHost: ssl.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Jun 2025 05:40:07 GMT\r\nserver: Testa/6.2.11\r\naccept-ranges: bytes\r\ncontent-length: 139004\r\nreferrer-policy: unsafe-url\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\ncache-control: max-age=516287\r\nexpires: Thu, 12 Feb 2026 21:42:31 GMT\r\ndate: Fri, 06 Feb 2026 22:17:44 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":139004,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 672 x 660, 8-bit/color RGBA, non-interlaced","md5":"7b3d4fc388d2ceca4ccf74e52ecb126a","sha1":"9109e4ac08b041e85e5022ec895990f37d4c87a5","sha256":"17ca03d40b1d0c8bef15a42027fefd730cd7b43422f8eae5a6cf5a1914838e34","sha512":"7ceddb22acad142703346524c2d740bd08f361959c19ef645da213a7d4cb66a26aabd7125484ac4479df220d1835d5c729ad6ea4e9e713ecbc65152bc3d59aed","ssdeep":"3072:OWzlQeqMiRw8eqgtrCAOO5ZRc8OrPxMJGY9JN0aAAfzP9ZXhRB:zlQnDRwtrrRcBSp9f0AL3Xt","tlshash":"55d3026e5d26418eba501130fd8bbbf9f43a90d591e59190bb24a44d2f221bfa4bf370","first_seen":"2025-04-04T12:10:18.368274Z","last_seen":"2026-06-04T14:22:42.111675Z","times_seen":665,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":398,"dns":368,"connect":3,"send":0,"wait":13,"receive":5,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nam.veta.naver.com/nac/2","fqdn":"nam.veta.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"203.104.162.225","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:44.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.naver.com","organization":"NAVER Corp."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:B3:02:B8:26:D6:90:49:71:40:F3:8C:B6:B9:2C:4D:13:30:EC:A2","sha256":"DF:1D:9B:40:32:7F:1B:B3:26:CA:00:EE:98:B6:E9:77:2D:FD:1B:4A:4E:BE:45:AF:66:92:5B:4D:3E:AB:E7:3B"}}},"request":{"raw":"GET /nac/2 HTTP/1.1\r\nHost: nam.veta.naver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sifralgenericmed.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:45 GMT\r\ncontent-type: application/json\r\nvary: Origin\r\naccess-control-allow-origin: https://sifralgenericmed.com\r\naccess-control-allow-credentials: true\r\nset-cookie: NAC=HAUtB8gc2SmC; max-age=34560000; domain=.naver.com; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"44a485baabe9611da4cb9d72a60d17d3","sha1":"1e7a227038484962dd2f3b46250b01079b01d96e","sha256":"6f6637f85870584b6c847a05177ea6ae247f03fc3bdef84b31c4cce2e2bf7a7b","sha512":"14902a1675dc616670b447ad778daf69fc4e838fcb7fb41435d5dc0c09fe4e7c40530ef758db70de5398e4dbbf16daf271edf38617a0faf31597cfbf8e65198d","ssdeep":"","tlshash":"4c7000030c8033c3020000002000223302c0888be22000ca222000088aeb000002b0c0","first_seen":"2026-02-06T22:18:13.36044Z","last_seen":"2026-02-06T22:18:13.36044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":400,"dns":254,"connect":32,"send":0,"wait":32,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/srcOnError.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/index_files/srcOnError.js HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:42 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 20:51:06 GMT\r\netag: \"10a1-63f69fa6fa280-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 1624\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qFldRmQb%2F4y8jpsI0aWV1HoMUYHrBk9W2NCUwjnhkwGmNBogV53iHndMsbx02Xuyve3cCW6MtnCMYN%2FmsmACQ4PEHUMuUkunaBmsSuMmqfZ9gg%3D%3D\"}]}\r\ncf-ray: 9c9e04e7ba31b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4257,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1fd3d66cf5a6316b6b3415eb5c6aff48","sha1":"73f8b8c7a8f192484f19aee389a537d625c00d1e","sha256":"f3a0cb5e6e03b07b8a211598949ddab384398d43913f7f7f3af96c7a64a06d76","sha512":"a1d0d1f3d988e2bb2a12eacdae751707aed6f7a870348557fe97c14a3892ef06e62d633be2ef47761084416475be64b50540e18dea3953aaa1357ac16ba23475","ssdeep":"96:Y1TS5hgIMS8SMNes3pGC7puCKevbkiQW6Ki6zcNyE:YdIM3SMNzGC7NKHiQW64IyE","tlshash":"6b9186cd2ceb0af248a3257a5f4f730421e261679a16cc60bd0c96904f089bfd596bdc","first_seen":"2025-04-04T12:10:18.373869Z","last_seen":"2026-06-24T10:29:23.474414Z","times_seen":42,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/favicon.ico","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:46.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/favicon.ico HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 21:07:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n9fo31I2XAkDT1emxWMvI59RkYvYHlP9MOtZLxt1rOw8J7SmnjD7zXRTpDhicsQ9%2BYhpSxzKjkiFiNd0m1w7QSHpYIdgM3iyoIg9ku52mjxPKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\netag: W/\"1536-63f6a36c18780\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c9e04fefb9db4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b707378e4db3fcca990f228c4d865f86","sha1":"8feaa55c2973a7e40fb1d09d65ab762c5d6bdcc4","sha256":"4059be15d3943507390a124da698cf6f46da07582d846d30eb46e51f1000974c","sha512":"e4945fd998c8c678238edbca7de4374a04e2faf6cbf1a083411bc9c186f757bb3139b39150de5ede47a8d55a20820004bce0cc2c4b19fbe238b6b1a71ca5e94b","ssdeep":"96:jjqH++uzH++nXANy1g9E++++++++++++++++++++++++++++++x999999999999z:jg++uzH++nQNAgC++++++++++++++++P","tlshash":"4db108f3846623a9f4471db1580443c259b2ac8e3a275eb4f2cd3de8c4ba467c1a17b7","first_seen":"2023-04-06T12:49:18Z","last_seen":"2026-08-04T09:12:56.602412Z","times_seen":1090,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/tveta/libs/glad/prod/3.4.2/gfp-display-sdk.js","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:46.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /tveta/libs/glad/prod/3.4.2/gfp-display-sdk.js HTTP/1.1\r\nHost: ssl.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sifralgenericmed.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Testa/6.2.11\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 09 Sep 2025 08:20:59 GMT\r\netag: \"22b0c-63e59fbdf70c0-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD\r\naccess-control-allow-headers: Range\r\ncontent-length: 44650\r\ncontent-type: application/javascript\r\ncache-control: max-age=3600\r\ndate: Fri, 06 Feb 2026 22:17:46 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":142092,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"3fa8cca939bd6b5b290de2dcfb410efd","sha1":"dd5f32ec48399f24f6cd0dac7888c017b8126ad4","sha256":"e5dd94d779bba152fb4f360f1731a27b58c1be30e2335b97d40b9aaa0adf243b","sha512":"04d782e13362d6adfb6a82fcf8a926453cd1c3c9141db416e2656634930c1257237d4a6640c2472e89fb36f2d5bb8a1a634de46810b782bf1e8af9cf99f5fd6d","ssdeep":"1536:/rWvZCnnxFTwWojflAjQyiO8FhlOeL8ssMHcju9mDEjf4i2SZ4HRJ:WZCnQyX8FhgVI+DEjf4pSZ4HRJ","tlshash":"3ad3c79cb2c3b03546a6a079507f0209b379289464de80d8f67ed8d97e3990e7673f78","first_seen":"2025-09-12T04:15:47.57325Z","last_seen":"2026-02-06T22:18:13.337713Z","times_seen":27,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/?naps","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-06T22:17:41.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/?naps HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OUw%2B1je0oygyHBtMopwh7rC7eNt2ySFsmI%2BDz%2BjlHYUS7X9jt2FJAdv0uK7mM9lpFE5WBKNxMoXgGQ2WSMixK7O1aG0BNqV%2Fzk7Qaph0iRoRuQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c9e04e3197d5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":102584,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (414)","md5":"246b752314104998da6ca81af5607369","sha1":"eb1018b501878deb4472d5061205db4c2fc6decd","sha256":"b0bd5fb16ed2ff75fcabe356a90578a8c5e2059c088eb2833e52c05e9c0e57ee","sha512":"c859cea95223e0c743e676020deae8588ee3fa189eccdc970a01dbc75ad6837d8734888c9fb27fd9db01c179073f62f3ce4c0aa2c5bc8185da167c3015ee32f7","ssdeep":"1536:0txNuUud+79r+or4Y5Td7p/nwR8cqQOc2:+xNuUudoaOc2","tlshash":"54a30181a2ff8926053b81c66dab432434f6b16be0895d44faec13bc1fdec947423a5d","first_seen":"2026-02-06T22:18:13.362918Z","last_seen":"2026-02-06T22:18:13.362918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":80,"dns":64,"connect":1,"send":0,"wait":553,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/default_202105.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/index_files/default_202105.js HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:45 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 20:51:08 GMT\r\netag: \"38e37-63f69fa8e2700-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6cdFXz17IkSLvZzntLCDi5pGtTIdCIFD2p%2BHkHvPz1UTibQ6Zm4vSNVlKXgKfsrz9eqsvosk0gz1WY9jPwXYcKtL%2BB4CN3Ak1v4nujFTaz1ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9c9e04e7ea42b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233015,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65463), with escape sequences","md5":"981870cd1196002d23ac59c6066978a4","sha1":"00ff32f42d0bf998955718ff5ff0ebe49c93ee0a","sha256":"287113a1f920ab8383cacc2282891fe62a7d7a371e3872b113e4f94fa971a84b","sha512":"bd874dfdeb617e144ff592bc1994f1e1264f5efc0a9747aab752f470eedd3a7bb1420e549f923f7fc3bd339fef93d50e9c73ba89956620880bae9234245232d7","ssdeep":"3072:0VrNRNpy9LTolFaFITYlo52KiGoqU5MUN5:0VrkolFaykq527BL","tlshash":"0934178cb6d6b07203e720a5113f110bf23b5969744e94d4e2a5d9f1adb888e813bf7d","first_seen":"2025-08-19T12:23:02.17477Z","last_seen":"2026-02-06T22:18:13.364592Z","times_seen":234,"resource_available":true,"data":null}},"time_used":2988,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2704,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/f8d35bd15d044a58dbbb.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/index_files/f8d35bd15d044a58dbbb.js HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:42 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 20:51:06 GMT\r\netag: \"4ed14-63f69fa6fa280-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qaX6hVSGLz19H646jnOtCbgK8zo%2B%2FHjJiqGG9f4%2BQSfk2rwt46QRnbqnjwEnK2ZNaE6y9bXlTpddKGB3WwCdDyrkSPcm1mz6S%2BjhqO6dPctijA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9c9e04e7ba34b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":322836,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"1c52c62684d8a0ae625666df403fee87","sha1":"a618332c96f3a39d48a7c5b8de62812906a0f285","sha256":"f120337423b1173a6148ada15c2979c917d7b066aa91b7f1684fbfe74c19f6e1","sha512":"7261a2b06981b3776ef9ac32c9165e5de3d1813902104e6b5adb95bdfdbf995bd498bc5da65448623207d610bb170d7d86a2747a0ea0bda1f0ec0dae94e39e2f","ssdeep":"6144:VNudkFkpVE95+JU+zv5GxVKT0E9weB/eRI:okOVc5WlGuYq","tlshash":"7a6439c8b1d3f023079310a6046b06caf17de954254d6b90e269d8e67c74eaeb07fa7d","first_seen":"2025-09-01T11:46:06.291354Z","last_seen":"2026-02-06T22:18:13.366302Z","times_seen":16,"resource_available":true,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":405,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"sifralgenericmed.com/avemaria/index_files/f8d35bd15d044a58dbbb.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/assets/js-home/log.js?1770416262","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /assets/js-home/log.js?1770416262 HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:42 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 05 Nov 2025 10:18:34 GMT\r\netag: \"39a-642d645569280-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 463\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f028mwcGHk2601MeBvgu%2FgrPZkRm8iwySNUqi%2FHpWABJkI%2BgaefogRKA%2Fu2U0nSxbE7oEpN2bpRT0QfiaQQrFNIgLfbXwqiw6N205%2BBTjsGFFg%3D%3D\"}]}\r\ncf-ray: 9c9e04e7ba36b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":922,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"cd223c89eb6cab38cd1ff04d6c016234","sha1":"a055b763da75165e86bed055d445a6b5cbd3237d","sha256":"48c49b873846126a9f587cb00d43b74add0030294271f75c6afdcfce9e1c631c","sha512":"bba0b3f8f83a52c26eea6b5389e1bff2ca8ceae48d5368a03a2cb0831dea5ce79919a03dcdbfbcbd764b057faca3b853069ae91d148b7c9d736142f7d63b7b6a","ssdeep":"","tlshash":"fe11ce1e18a508170b57326c8b0f660ab36b15176609d80affff87657f20a2494129d7","first_seen":"2026-02-06T22:18:13.36751Z","last_seen":"2026-02-06T22:18:13.36751Z","times_seen":1,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/ncaptcha-api.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/index_files/ncaptcha-api.js HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:45 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 20:51:08 GMT\r\netag: \"59e8-63f69fa8e2700-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 7681\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFThQNToH%2BZJbOzGovsCJyi51OeGRJ7e3277jFgv0Sd9u5j2Qnue62EHtgyjDwkUPhStkn1eEEEE%2FJAsYeXNIBiIdQE20eTJUWFpGzbQhPQz7g%3D%3D\"}]}\r\ncf-ray: 9c9e04e7ea43b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23016,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23012)","md5":"e71bd8fb09b97e24a87a07d87de49d31","sha1":"c9d097d487e3adce218daedad5d6fa7f71f1070c","sha256":"6a5988907a80a0a584bc5a48fa443da654fd1c5b72f8209f2845873eca271ce9","sha512":"00139764481f5c14bdb64a8b978bfb57923dddb52301f46f7321ece886898d2c795607fd01d083a376bdb0c84059308198050aa2f6f5216f3f9e20adb4899712","ssdeep":"384:ZYi0NDeGjbbq+8foHtTwqyFYoVZwXLfvG++Cd+97TK/JQv4U1TccGOhBi:Zsqci+8foNTXyFYoVZw7fvG++i+dTK/3","tlshash":"0ca27350b5ac9eec16b33e329df75911a8124b104463709099a0df94dbfbb9a0bc7ef0","first_seen":"2025-09-01T11:46:06.283022Z","last_seen":"2026-02-06T22:18:13.368632Z","times_seen":16,"resource_available":true,"data":null}},"time_used":2696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/gfp-core.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/index_files/gfp-core.js HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 20:51:08 GMT\r\netag: \"bf07-63f69fa8e2700-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 16725\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QXKNbyz0%2BIttkHcgfyiD%2F0BBf9Emp56tJfgU069OldLN2aaQLGwFc1vgj6IJuP3uw%2BnCFCoAZ76QID3MkAWKX9ZBf8DPuXd7W6kJCZ%2FQvYJzsA%3D%3D\"}]}\r\ncf-ray: 9c9e04e7ea3eb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48903,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25475), with NEL line terminators","md5":"4b4326e9513c5037af1e2f42e2515a35","sha1":"95643d4fccc313a27a5b3cf1fba5c26443757ec6","sha256":"ddfc86892fc9d5ad7331d2948a9fab644f2af2581e7b7f941715325d8fb3d9f4","sha512":"aea5e91c9fefe956d713997105ac8e39bdd1a8b4610dbf7f43de8944bad5aee575dafdb36786a239f2fb3a38a88848b7b3879d2f642142eedbb2e5aef36aadd5","ssdeep":"768:yREKdLZGjMrgeBZcdOUUmsET90yxc9FbTPO00:yREKdLZGjMZyKmsgHc/+","tlshash":"9223974df2d1b0910ba3a134522f640af2b72a54745fd9c0b666d2d0ad7ba4f7063f2d","first_seen":"2025-09-12T04:15:47.392169Z","last_seen":"2026-02-06T22:18:13.370009Z","times_seen":26,"resource_available":true,"data":null}},"time_used":3847,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3711,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ntm.pstatic.net/scripts/ntm_109a32482d88.js","fqdn":"ntm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"96.6.16.233","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:45.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 30 Jun 2025 00:00:00 GMT","end":"Mon, 29 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:1A:5B:CB:CA:6F:4D:C4:54:14:EA:80:9E:58:78:0B:E5:4E:15:75","sha256":"47:40:52:1C:BD:D1:EE:A2:FF:89:F7:2D:0B:AF:6D:77:E0:59:2D:26:8C:5F:4B:A2:89:74:12:FE:8B:E9:02:27"}}},"request":{"raw":"GET /scripts/ntm_109a32482d88.js HTTP/1.1\r\nHost: ntm.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 13 Dec 2024 03:03:14 GMT\r\nserver: Testa/6.2.11\r\nx-error-code: NotModified\r\nx-error-message: file's lastModifiedTime:2024-12-13 12:03:14.822997758 +0900 KST, IfModifiedSince:2024-12-13 03:03:14 +0000 GMT\r\ncontent-type: text/javascript\r\nmutated: false\r\nx-etag: 3cf370000675ba3f2\r\nx-object-archived: false\r\nx-object-restored: false\r\ncontent-encoding: gzip\r\ncontent-length: 69969\r\ncache-control: max-age=671\r\nexpires: Fri, 06 Feb 2026 22:28:56 GMT\r\ndate: Fri, 06 Feb 2026 22:17:45 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":249655,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62946)","md5":"1b008c9e4ab7d6953dcfc429ca03e13b","sha1":"3e938a3fc0e981813ef7639a04fb9c487d9370da","sha256":"e0be3e937f5a05e1f06dccb1e73a9415fc01d1de9e9c168dfaaacd2d019771a6","sha512":"c9c6ff2dc8cdf93fc94e8aa9fcd7a85665bc844c597f3b153bae065e26c34b1d6d2197be83b64da9287c18fdd9fde46f38f17a7a17e2a5c148c36dd47785a086","ssdeep":"3072:wbuNTDNsO+18C9wdYI4JJa8JJj6vdluTxm1d1Rhs0:wwuO+18MJOvdB1rs0","tlshash":"c234b78cfe92f0b956e3a1a4802f550af17b2a25701ed4d1daa2c5d1ac7898f4173f3d","first_seen":"2024-12-22T16:31:50.016921Z","last_seen":"2026-06-24T10:29:23.464828Z","times_seen":460,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/dynamicKey/Kc4GDS5YIpn_TS7MfJVeiawzK7gLI1jE-olTt6f5cmfcjcJiXi9m3N6gJfIFhHyx1BzbtsdpEMW_J7emTW_2WCCKqFkCd5DvCKm81ZEoitw","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:45.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /dynamicKey/Kc4GDS5YIpn_TS7MfJVeiawzK7gLI1jE-olTt6f5cmfcjcJiXi9m3N6gJfIFhHyx1BzbtsdpEMW_J7emTW_2WCCKqFkCd5DvCKm81ZEoitw HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 06 Feb 2026 22:17:45 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p10d7qUgrbRl1TiBqauzBO%2Btp8bkQjRpNmW%2FFnjGyhVSvbX2PxN2mU3AXgedDfuFT%2ByNLBy20cHYdSHGLcbLY5fKcZp7LLhbaBdrPfzF3GKk9w%3D%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9e04fcbb8db4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"202982abe601e58c8b6c626828254872","sha1":"5da750ac2d684a311e3ee90a2facc6f21acff1b7","sha256":"1cfe94be31c4e3438829d7c4ca3aede31bb99be55ab4240c1a8a26f5f1b25371","sha512":"29f0fc9d169d57dbfcd009487166b756a581bf45fce766f67136e9adccf12e3c8bfe2c49e5e875c55053cbabd736649e28d64e84493f86d86f6867dc3c757021","ssdeep":"","tlshash":"22d027df504363574412155035c155c2174d12e97435c5e42d86d447519867ecd9a5dc","first_seen":"2026-02-06T22:18:13.371878Z","last_seen":"2026-02-06T22:18:13.371878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wtm.pstatic.net/d538d2d/f8d35bd15d044a58dbbb.js","fqdn":"wtm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.76.121","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:45.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /d538d2d/f8d35bd15d044a58dbbb.js HTTP/1.1\r\nHost: wtm.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sifralgenericmed.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 27 Aug 2025 03:00:54 GMT\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\ncache-control: public, max-age=2592000\r\ndate: Fri, 06 Feb 2026 22:17:47 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":322836,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"1c52c62684d8a0ae625666df403fee87","sha1":"a618332c96f3a39d48a7c5b8de62812906a0f285","sha256":"f120337423b1173a6148ada15c2979c917d7b066aa91b7f1684fbfe74c19f6e1","sha512":"7261a2b06981b3776ef9ac32c9165e5de3d1813902104e6b5adb95bdfdbf995bd498bc5da65448623207d610bb170d7d86a2747a0ea0bda1f0ec0dae94e39e2f","ssdeep":"6144:VNudkFkpVE95+JU+zv5GxVKT0E9weB/eRI:okOVc5WlGuYq","tlshash":"7a6439c8b1d3f023079310a6046b06caf17de954254d6b90e269d8e67c74eaeb07fa7d","first_seen":"2025-09-01T11:46:06.291354Z","last_seen":"2026-02-06T22:18:13.366302Z","times_seen":16,"resource_available":true,"data":null}},"time_used":3059,"timings":{"blocked":820,"dns":774,"connect":1,"send":0,"wait":1420,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-06","alert":"Hunting_JS_WebAssembly","trigger":"wtm.pstatic.net/d538d2d/f8d35bd15d044a58dbbb.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/ntm_109a32482d88.js","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/index_files/ntm_109a32482d88.js HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:43 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 20:51:06 GMT\r\netag: \"3cf37-63f69fa6fa280-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oy1zSUdOKsjh%2B7UoKjmXisUgDzbarecN4M6QACD7UED4Uu9XrzZj3slpWJE%2Be4%2FJind57vPXrdH%2FiaatMPKkpm8zWKTig4omkhyiSiYdf%2B382A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9c9e04e7ba30b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249655,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62946)","md5":"1b008c9e4ab7d6953dcfc429ca03e13b","sha1":"3e938a3fc0e981813ef7639a04fb9c487d9370da","sha256":"e0be3e937f5a05e1f06dccb1e73a9415fc01d1de9e9c168dfaaacd2d019771a6","sha512":"c9c6ff2dc8cdf93fc94e8aa9fcd7a85665bc844c597f3b153bae065e26c34b1d6d2197be83b64da9287c18fdd9fde46f38f17a7a17e2a5c148c36dd47785a086","ssdeep":"3072:wbuNTDNsO+18C9wdYI4JJa8JJj6vdluTxm1d1Rhs0:wwuO+18MJOvdB1rs0","tlshash":"c234b78cfe92f0b956e3a1a4802f550af17b2a25701ed4d1daa2c5d1ac7898f4173f3d","first_seen":"2024-12-22T16:31:50.016921Z","last_seen":"2026-06-24T10:29:23.464828Z","times_seen":460,"resource_available":true,"data":null}},"time_used":1006,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/assets/js-home/update_user.js?1770416262","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /assets/js-home/update_user.js?1770416262 HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:42 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Nov 2025 14:53:14 GMT\r\netag: \"18b3-64352ceabaa80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 1671\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWP06wWr6ZM7t%2BL5sd%2BrIbUNftpMPC5Dv2thIjanEfOKkbUoeGwT%2B2Jhmy6hLygbFprjTqvY2P1X3aCr4pXKXds%2F59j5oC5JLZjFsCRAfJexOQ%3D%3D\"}]}\r\ncf-ray: 9c9e04e7ca3ab4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6323,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"3166f6d6f74ed42ca600644495dce4e6","sha1":"b1f3016f2ee5ed225137aa246663346387dc4ccb","sha256":"55ac7405fbb9dc1ebb95c9f8a0c09751b9bb0c81cdc2ac22935fca7db3fd6ee2","sha512":"452fedc1d9800186bef2aafca717120cc400d0676bae037bef390eaff85520bbd074be8a7f8f07fb18a83349860959822eb397fed51a53483aff6070d6a71411","ssdeep":"192:Oyt/lv2FegvzqtI/vYIefB5E4JLZfKxLeWiHmdbr4:Oyt92FegSWYbRXKSmJr4","tlshash":"d9d17b4932e3f0e466393577d89bc0a473e87941a80a8744e62c42d94be971bfe1dc6e","first_seen":"2026-02-06T22:18:13.373057Z","last_seen":"2026-02-06T22:18:13.373057Z","times_seen":1,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/static/nid/login/sprite/m_sp_00_common_978240a6.png","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:44.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /static/nid/login/sprite/m_sp_00_common_978240a6.png HTTP/1.1\r\nHost: ssl.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Jun 2025 05:40:08 GMT\r\nserver: Testa/6.2.11\r\naccept-ranges: bytes\r\ncontent-length: 21505\r\nreferrer-policy: unsafe-url\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\ncache-control: max-age=248997\r\nexpires: Mon, 09 Feb 2026 19:27:41 GMT\r\ndate: Fri, 06 Feb 2026 22:17:44 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 488 x 214, 8-bit/color RGBA, non-interlaced","md5":"978240a64630afc18684d2b835a27ae2","sha1":"d4605e0721901ac73e8b9e92526c06d715e964f9","sha256":"3be89f766c6a9ac418ec1c6f33dc7a24607a6e067c0731e77b8cc01fb3355bc7","sha512":"49da669a13e87333d599ceba735df00fa73e70c1446f1296a6f14e9dfea7b7853858f914019be10560347c86a0e743b79f20a0fe09bee561d6ae7fa6673c8561","ssdeep":"384:32utVj9x+pdRkpT1KM31767kkbMw6t8oce2zEeT3ae/5kxVKT7Z:GaZVTu7kJhqc09/Cxq7Z","tlshash":"54a2e1c0443de6df34e6bf310a5a114c28ae674b202a1fbbdd14d8eda5d604c8c4acd3","first_seen":"2023-05-17T15:15:42Z","last_seen":"2026-08-02T17:18:00.750632Z","times_seen":1296,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":400,"dns":368,"connect":3,"send":0,"wait":5,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/melona/libs/gfp-nac-module/synchronizer.js","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:44.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /melona/libs/gfp-nac-module/synchronizer.js HTTP/1.1\r\nHost: ssl.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Testa/6.2.11\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 27 Jan 2026 05:45:58 GMT\r\netag: \"b2f8-64958234beb78-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD\r\naccess-control-allow-headers: Range\r\ncontent-length: 18363\r\ncontent-type: application/javascript\r\ncache-control: max-age=474\r\ndate: Fri, 06 Feb 2026 22:17:44 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45816,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45814)","md5":"8ce17d152fc2bb12f6ed770034ec6a4e","sha1":"b5aa3ebfcc22f2db16dc8fe323b8d6e5db5517d4","sha256":"99f7af6da4faf08024434899bf9c4641946122b04adf19261c26b491841ff4af","sha512":"86024bc33623da36aa77ab5df34ac5e80319636e32e759ef79891549eadce13493b9d76b5ec6fe5f7776cddc1808c50eaddbf373eed381d34e9abbe95086be1e","ssdeep":"768:tokhl+D7gPNlNE9uf36AY8/GSQt9RQrjiXFHmsHwzsN4UMB8T22Gx4jXdTVsAV:K+l+wlCGQS+TUiXFBYBtY","tlshash":"bb2362cdb1d3f4a453a76078103f510af33a2d94a89e9198e1bad4d17d3881ad27bf9c","first_seen":"2026-01-27T08:35:11.915541Z","last_seen":"2026-08-06T19:58:41.013245Z","times_seen":6593,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":350,"dns":320,"connect":1,"send":0,"wait":3,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/w_20250702.css","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/index_files/w_20250702.css HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:44 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 20:51:06 GMT\r\netag: \"ffee-63f69fa6fa280-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 11440\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EVwF98gj%2FXXw0gNJ%2FfMNG3ND%2BrJZuJvTboiRDjp5gLYDSB7oFwK5TLpRPJ2q0%2FwkQ9FL2Lh9tegjYLyxQmNEh1etkXDa7Q6xWbj2uirdQ5b3PQ%3D%3D\"}]}\r\ncf-ray: 9c9e04e7ba2fb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65518,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65513)","md5":"a5f4d956473b6550965e52760552b50b","sha1":"48a3091efbc2ac64a3e7a3a534b1744c0be517f0","sha256":"a77fca2b647a787ad3265972ee1122c947cd0416f5f56f1d02de07278bca784d","sha512":"b7e648eb4a67b29c5d963913fb553609ac0bc5c27ae4473b768801de1c36b8677307dd3b22ced66d392a9e425dccb3d10d4f60913c7c67cbfd771d1d634824a6","ssdeep":"768:YGuI4276hnh5T3g0/2qHlGXyx9yVA6cvIptcyPYStT0QNd8C:YJhvLStf","tlshash":"10538436b668a11ef5bbc611f9417bde3020c217d4234f6dd6cab63c85c38e61663b89","first_seen":"2025-09-04T04:08:56.2786Z","last_seen":"2026-04-15T05:56:37.471528Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1719,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/js/jquery-3.7.1.min.js?1770416262","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:42.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /js/jquery-3.7.1.min.js?1770416262 HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 22:17:42 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 06 Apr 2025 23:39:36 GMT\r\netag: \"155ed-63224a1db9e00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 30362\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVXnZOf07ERD0eL1jsuIp%2B0cSNohdpwGjA0iytL8B8avj6e7yZnq%2B3SQc9YLyJNPD12xM%2B7KidxNpQ1wOM5hRzLNQHRVioaPRX4E9dWOcZDWZA%3D%3D\"}]}\r\ncf-ray: 9c9e04e7ba35b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-07T03:57:52.320162Z","times_seen":184348,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sifralgenericmed.com/avemaria/index_files/40948ca2af0480f8432e.wasm","fqdn":"sifralgenericmed.com","domain":"sifralgenericmed.com","tld":"com"},"ip":{"addr":"104.21.54.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:44.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sifralgenericmed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:27:05 GMT","end":"Wed, 29 Apr 2026 01:24:45 GMT"},"fingerprint":{"sha1":"89:72:CA:7F:26:12:08:F0:76:B7:DB:07:B4:AC:3C:7F:52:07:87:D0","sha256":"61:1D:9C:79:1F:33:4A:44:0E:68:3F:E4:7B:50:01:DB:54:4F:34:07:2C:43:90:52:66:66:09:CC:59:B2:E1:4C"}}},"request":{"raw":"GET /avemaria/index_files/40948ca2af0480f8432e.wasm HTTP/1.1\r\nHost: sifralgenericmed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sifralgenericmed.com/avemaria/?naps\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=k3cmbm9m429nfegm4dool0afdd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 06 Feb 2026 22:17:44 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2Byn5dSPYYO1LhCj3joxoXLkvEmT3aoZI0N7yKzvZbC0doPVbG%2BWm4YkmAy0PNgIaWuH8itfk6nwPQg7dfHxEpwqsyxUWOqPwrE02dX5emAwmg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9e04f39b16b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"202982abe601e58c8b6c626828254872","sha1":"5da750ac2d684a311e3ee90a2facc6f21acff1b7","sha256":"1cfe94be31c4e3438829d7c4ca3aede31bb99be55ab4240c1a8a26f5f1b25371","sha512":"29f0fc9d169d57dbfcd009487166b756a581bf45fce766f67136e9adccf12e3c8bfe2c49e5e875c55053cbabd736649e28d64e84493f86d86f6867dc3c757021","ssdeep":"","tlshash":"22d027df504363574412155035c155c2174d12e97435c5e42d86d447519867ecd9a5dc","first_seen":"2026-02-06T22:18:13.371878Z","last_seen":"2026-02-06T22:18:13.371878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"sifralgenericmed.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"sifralgenericmed.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nlog.naver.com/n","fqdn":"nlog.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"203.104.162.225","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://sifralgenericmed.com/avemaria/?naps","date":"2026-02-06T22:17:45.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.naver.com","organization":"NAVER Corp."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:B3:02:B8:26:D6:90:49:71:40:F3:8C:B6:B9:2C:4D:13:30:EC:A2","sha256":"DF:1D:9B:40:32:7F:1B:B3:26:CA:00:EE:98:B6:E9:77:2D:FD:1B:4A:4E:BE:45:AF:66:92:5B:4D:3E:AB:E7:3B"}}},"request":{"raw":"POST /n HTTP/1.1\r\nHost: nlog.naver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 1016\r\nOrigin: https://sifralgenericmed.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sifralgenericmed.com/\r\nCookie: NAC=HAUtB8gc2SmC\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1016,"data":"{\"corp\":\"naver\",\"svc\":\"nid\",\"location\":\"korea_real/korea\",\"svc_tags\":{},\"send_ts\":1770416265861,\"tool\":{\"name\":\"ntm-web\",\"ver\":\"nlogLibVersion=v0.1.60; verName=1.0.1; ntmVersion=v1.4.0\"},\"usr\":{},\"env\":{\"os\":\"Win32\",\"br_ln\":\"en-US\",\"br_sr\":\"1280x1024\",\"device_sr\":\"1280x1024\",\"platform_type\":\"web\",\"device_pr\":\"1\",\"timezone\":\"UTC\"},\"evts\":[{\"page_url\":\"https://sifralgenericmed.com/avemaria/?naps\",\"page_ref\":\"\",\"page_id\":\"46b0d5d67a7658675d3a9348df2b90e9\",\"timing\":{\"type\":\"navigate\",\"unloadEventStart\":0,\"unloadEventEnd\":0,\"redirectStart\":0,\"redirectEnd\":0,\"workerStart\":0,\"fetchStart\":1,\"domainLookupStart\":17,\"domainLookupEnd\":81,\"connectStart\":81,\"secureConnectionStart\":84,\"connectEnd\":100,\"requestStart\":100,\"responseStart\":653,\"responseEnd\":653,\"domInteractive\":4208,\"domContentLoadedEventStart\":4212,\"domContentLoadedEventEnd\":4217,\"domComplete\":0,\"loadEventStart\":0,\"loadEventEnd\":0,\"first_contentful_paint\":2852},\"type\":\"pageview\",\"evt_ts\":1770416265855,\"nlog_id\":\"21f745d7-697a-45df-98f1-c664ce90ece5\"}]}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 06 Feb 2026 22:17:45 GMT\r\nset-cookie: NNB=UPR54M4KNCDGS; expires=Sat, 01 Jan 2050 09:00:00 GMT; path=/; domain=.naver.com; SameSite=None; Secure\nSRT30=1770416266; expires=Fri, 06 Feb 2026 22:47:46 GMT; path=/; domain=.naver.com; SameSite=None; Secure\nSRT5=1770416266; expires=Fri, 06 Feb 2026 22:22:46 GMT; path=/; domain=.naver.com; SameSite=None; Secure\r\nx-envoy-upstream-service-time: 0\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T04:07:07.173396Z","times_seen":17755421,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}