{"report_id":"81fc24d6-b603-4f07-9137-331fb4dcbad0","version":6,"status":"done","tags":[],"date":"2026-03-29T15:22:51Z","url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"title":"iCloud+ Storage Solution | Acabar com Falta de Espaço no iPhone","dom":{"size":42101,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24929)","md5":"e9e38de62e3ac2f88619f3d2d6c5b6ec","sha1":"1308cf5352a22e26b3872e75c6f2458a2c383308","sha256":"8c192b40642b9707d3e8fbf478460ea71355d41c7190af7dfc76f6c6d992dbb5","sha512":"8d866c4a610eda8f983e6edb5955801556250910ed9c9f14509814a169c48e2dd42136fb7c8105335b24206606ffa5b864c834f78e55b3974446d386b0ac2070","ssdeep":"768:vEMsnB7cxksc64Jysq7vhphzSE/i6/tetlGtB:vZXx/c64Jysq7vlz1","tlshash":"bf13f8707049127e642bdae4fad4b72eb035f207dd679459f29c0086a3c3fe06da6b94","dom_hash":"domhash5ce3c7a0c1005373df090cedb1eaa7f0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-03T15:22:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"icloudpro.zakiassinaturas.shop","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-29T15:22:46.406933Z","last_seen":"2026-03-29T15:22:46.406933Z","alert_count":20,"request_count":20,"received_data":1280273,"sent_data":13881,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0083880fccc2d36ab980e54f25f15bc","sha1":"7f86fe7457e28d516ce7ace70f6c508677c00239","sha256":"847b6a00f7c845e6863210b8f715619ccd86176edc5a98cf9c533677277f342f","sha512":"e16c4cb4d55c4ec58d1aa3a543875dddffb4b56495d7fb1807f31eb67733e5920ae6e99c180b2f8d7cb9a50dcd6973ef05a957ab02dbf7deab632903f4ef8bcd","ssdeep":"","tlshash":"e7f0d45e2c53a45637fe253dc367566b3753070374c2d405ba4dc4152fd49961c419ce","size":509,"data":"","first_seen":"2026-03-29T15:22:51.403976Z","last_seen":"2026-03-29T15:22:52.947667Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/index-CJpoXziU.js","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"631279274574dc467beefb4ee4ce8f52","sha1":"6792e37ff53691e44e74b6f54a28e453bef76dc3","sha256":"5dc9940c197181fd50c84d6d127646e00901e7ae692756155ed3852ad70296c1","sha512":"da4f2dda8b761b028855b7331bb1299daaed485be299a211f79c9f1ca55b8a003a0d24c53c5c929854c62851bcd20d7d5b6933621ff4349af54ad9b0cd399265","ssdeep":"6144:+fcWexpZLooYF4GoWfki8tnfqODeueL2eqz97sDcpXo:+ofooYF4GoWfAnSODiSeVDcpXo","tlshash":"62747dd8305ab1756bb345b2507f410bb23d2902a80d8460f03dedaa7bb5545a2bbffd","size":357666,"data":"","first_seen":"2026-03-29T15:22:51.380739Z","last_seen":"2026-03-29T15:22:52.945519Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/~flock.js","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-07-23T21:41:28.270672Z","times_seen":14230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/social-proof-1-zjjW_uao.png","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/social-proof-1-zjjW_uao.png HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T22:50:57.108687Z","times_seen":17486805,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/social-proof-2-CMBeHieJ.png","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/social-proof-2-CMBeHieJ.png HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T22:50:57.108687Z","times_seen":17486805,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/files-icon-zPr57LWo.png","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/files-icon-zPr57LWo.png HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 4914\r\netag: \"5b787b627822aec70bfe05711d7c60a4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e3fded48b3fb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4914,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 182 x 182, 8-bit/color RGBA, non-interlaced","md5":"5b787b627822aec70bfe05711d7c60a4","sha1":"d2c568366d45961b2c9791f777a12cc384dcf73a","sha256":"5d65e3e1dce04c23a7e98ed86af0aba39a3e8aa1ee09136b803d8283bc07a1ae","sha512":"cc85dc57ae3b922ab5fd82c67331dddd08f51ecbb977c90a0f482134f769731d56dda5d96feb73001cbc1f752ff4286f49b77789d288e139d8e1acfd03bf0ff3","ssdeep":"96:Z71bj6dNKhYT6SMpunQBqRBSSCndyPM/HO0pL4hHKKSa9ADlr:ZhOKGTSgQE7SLdyUmQLcg+Apr","tlshash":"7aa15bfb1d4fa151064ded0392eef8ab5ecfd70283a0e51d632bac991682cc0565b882","first_seen":"2026-03-29T15:22:51.358464Z","last_seen":"2026-03-29T15:22:52.937708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/photos-icon-CDb1-GrS.png","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/photos-icon-CDb1-GrS.png HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 29903\r\netag: \"d445a6fbc6bcf6e987070c3e0799f920\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e3fded44b00b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29903,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"d445a6fbc6bcf6e987070c3e0799f920","sha1":"5e649016d5b099fd1fe76b0a2462ab2e43161bca","sha256":"8e73e747462bd9a883c123166ca319fadc2e54af37b6d0866b682f6493d3d78e","sha512":"86c03fa43397d291cb7a72afb0f3b7dbe1a0a76cc0776075e80d58afbb40e0809e001e4b14a1b110c5686765b90ed5c8a4e26b8e8e96b707819ec398dd426add","ssdeep":"384:S8cOXnIMLBXTzGHRQA/2sEvngmSAToMbKMe7U3srDtgzcvFYoljFCTtmDLxDVol9:BIMFzrcfqRPr/sjwsDLdqz9/","tlshash":"25d2e0b6a1b4f7ada55eac739bdf0f0fdfa295c1c5f197024331a2284235d5618808ec","first_seen":"2026-03-29T15:22:51.372193Z","last_seen":"2026-03-29T15:22:52.938666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/icloud-logo-new-sOxFBC5H.webp","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/icloud-logo-new-sOxFBC5H.webp HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T22:50:57.108687Z","times_seen":17486805,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/social-proof-3-BrX8by5V.png","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/social-proof-3-BrX8by5V.png HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T22:50:57.108687Z","times_seen":17486805,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/icloud-logo-new-sOxFBC5H.webp","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/icloud-logo-new-sOxFBC5H.webp HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15044\r\netag: \"f32a63fe04c0f32a1d6862412aa37920\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e3fded48b42b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15044,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f32a63fe04c0f32a1d6862412aa37920","sha1":"4398b324c960d503e3d6c4c2e1276dd304188202","sha256":"af5da7a6e558fa37678d5464f4e3073c4a72d7f0ce92775a04864bddc1b7a4d0","sha512":"20e08170638c051cf83573b7a3d7d458227d3647e96dc56722d93e3597f75e7bb1f74a3c25e8d8f3ab2c36bf055ea5edaf7e137cd1b38fcdf046ddd274296e08","ssdeep":"384:tDC4HKRwX3VDIB0bKCuQ0oLb2Wr3iwvoC8ftY:tDCKvBw0btD0i13iwvD8+","tlshash":"3f62bee4922ba097b0461eacdf788724c49fb4b43c75560ad36c84d20dbd895fca58ab","first_seen":"2026-03-29T15:22:51.366475Z","last_seen":"2026-03-29T15:22:52.939765Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/favicon.ico","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:30 GMT\r\ncontent-type: image/x-icon\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"566e64364d6957715dc11845f4800700\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e3fded52bdab4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7645,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 73 x 74, 8-bit/color RGBA, non-interlaced","md5":"566e64364d6957715dc11845f4800700","sha1":"db98fcaaf06be921ed2b8f25ac80f0add9f4a787","sha256":"29a40d56580a5366083461297773dbf146ec043d1156f432f5472cb3487f506b","sha512":"d93824f3088a249625d0bbb64a99d1e320aa4e375ceea0205c961de73d04c635c97a7788865260e3ca13aba38a8dd95435f2183869f17a41afd4ee7d9364bc74","ssdeep":"192:NUNBikqtkfu6b+DkwFy3/0sRmz4fL5AHtHyhaFg63/:uNkkdfakwFy3/Xk6lepy6P","tlshash":"40f19e9f7f833802d90c95bf5492c75189c9d5551558c23fb0fd6132acaf5d3629f085","first_seen":"2025-05-20T14:46:56.545075Z","last_seen":"2026-07-23T15:33:52.439323Z","times_seen":1847,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/~api/analytics","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nContent-Type: application/json\r\nContent-Length: 351\r\nOrigin: https://icloudpro.zakiassinaturas.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq; session-id=aedb65ef-e367-4b7f-aa90-67e4b4c71697\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":351,"data":"{\"timestamp\":\"2026-03-29T15:22:30.705Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"aedb65ef-e367-4b7f-aa90-67e4b4c71697\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://icloudpro.zakiassinaturas.shop/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:31 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e3fded5fcafb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-07-07T11:17:12.578135Z","times_seen":12919,"resource_available":true,"data":null}},"time_used":1248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/videos-icon-BVcUE6UI.png","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/videos-icon-BVcUE6UI.png HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 31460\r\netag: \"e9defe75f7c1a6254afa98acc92dcde8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e3fded44b05b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"e9defe75f7c1a6254afa98acc92dcde8","sha1":"a6b12b9acd386f04d68534409224dbb98b8f3681","sha256":"5fb2403ac853c3db99052f57f63e50cf6189685cabcc0ff8debab2a8e027a517","sha512":"55036c332537e1726f7f68a061c9a5bad46bfd5034f3ca43dfb730666e66446630ec5253d980bed2c243891651f921d0df5fb89a74030ba4b61723c58623e4d1","ssdeep":"768:LvEVTle7JLBhYwIwBBn8lk7NcrPFW1TGY0bO+bSx14Gi1ups:LveTc7JdiLwr8a7MPFuabbC14GJs","tlshash":"54e2e182832a876a0374d9adb90f0fef5a214493262f3d05611355e68bf552e2fb50ff","first_seen":"2026-03-29T15:22:51.361882Z","last_seen":"2026-03-29T15:22:52.941768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/files-icon-zPr57LWo.png","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/files-icon-zPr57LWo.png HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T22:50:57.108687Z","times_seen":17486805,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/backup-icon-Bpo_vaVf.png","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/backup-icon-Bpo_vaVf.png HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T22:50:57.108687Z","times_seen":17486805,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/social-proof-2-CMBeHieJ.png","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/social-proof-2-CMBeHieJ.png HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 249693\r\netag: \"388972acd7718344f3db4dd2ae7108f2\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e3fded48b4db4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 562 x 642, 8-bit/color RGBA, non-interlaced","md5":"388972acd7718344f3db4dd2ae7108f2","sha1":"b47e0ab97b99bcfe79ed9215d79f2041657bbc57","sha256":"11c2e87394ce415f29294692bb54e24e8d4807df551cbbb17544c87c8e3edf82","sha512":"ca7d6828bf68034630c1438a98f806077baa8009288a580f7ef976df921f09f1be72be9ff918b9b3ede80c9909cd6637e3f46c891e2da00ef66957b480c53997","ssdeep":"6144:Zhi8+VRCcpJnYZcozDBTMyHmvuFEmPpTKQi+YOoAxG6AShAB:LiwcpJnA7NTIvCPp9i+JLYZ8AB","tlshash":"5034235c8198f24c7e615ff1f45a1784e3ec9481eee94b1a0ef6b6641b07cca1138ba7","first_seen":"2026-03-29T15:22:51.36935Z","last_seen":"2026-03-29T15:22:52.942337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/social-proof-3-BrX8by5V.png","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/social-proof-3-BrX8by5V.png HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 216927\r\netag: \"5115537d9c94b3480ed68a96866ce473\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e3fded48b51b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":216927,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 558 x 703, 8-bit/color RGBA, non-interlaced","md5":"5115537d9c94b3480ed68a96866ce473","sha1":"909e7c79f24030be01c7e500b497e306c5228415","sha256":"d60418b77d35d813d5dcab7c977c132ec805f23fa81080e8bbd4da3dc2d32886","sha512":"d389fb7eee0731a0831648a6cda2a4400df7dcc4d8013d9533216b2f049695783d73ccd3c7b881b848c038e13d1addf6db87795662a178e5407d6d260e604c55","ssdeep":"6144:s0XFmy1tXolwQ0nvVV7AtrOeG5jPoYBEA:s0xMlU9VGrOe0oqx","tlshash":"2d24120b2067576c01f06fed675bd06ea663be60a98d0db2ef576ac3974b1f008c07a5","first_seen":"2026-03-29T15:22:51.382507Z","last_seen":"2026-03-29T15:22:52.942922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T15:22:30.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq; HttpOnly; Secure; Path=/; Domain=icloudpro.zakiassinaturas.shop; Expires=Sun, 29 Mar 2026 15:52:30 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"b7d8249e028e702225b9fa5e3995c2fe\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e3fded1c8d5b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2388,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f816d49804a148835783486c3eb1d158","sha1":"2587c0e32bc945e66175a0bac2d1c067d1feb7dc","sha256":"ffa2aa829a2317e2d1ba0cc1868ca2cb48ae25fc5d189b04f2b5510efb108694","sha512":"71e283e6da10a5754f9db7a38c7a907695b6c18c54fa2c26b9adbf1061f4e0b735604eb3db7c529de61aa0fba19fc038d2fc1a484b64c89db18f9563922006a4","ssdeep":"","tlshash":"4d4185570de3d00663b4513859ebf10bbda146c39144dc41ba8c1a0d2fc9bc08997aee","first_seen":"2026-03-29T15:22:51.378792Z","last_seen":"2026-03-29T15:22:52.943525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":26,"dns":0,"connect":1,"send":0,"wait":67,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/backup-icon-Bpo_vaVf.png","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/backup-icon-Bpo_vaVf.png HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 13091\r\netag: \"d0b21126bf01e687e4a9f4250bf4f1d6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e3fded48b48b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"d0b21126bf01e687e4a9f4250bf4f1d6","sha1":"668ab29966edadc48df7823c5ace433ea6fddf8d","sha256":"3417f6f6ba42c76f359326a0821123014afb4babd0aaf6e80b765b1f31c3c6e8","sha512":"ba41a9bcd0aca65ce2eea27f390cae5628ea508c3b28444410239a0015b42ed0f1f8a4ce89a789920bd03957a53d9704fe906136c66b5a6307c3f0d6ad327390","ssdeep":"192:uIpJ7K4V5gRgzhSdVJD5RH4ggaJKR2g2t+lmiouKYtmFXuii/w6cTLOaJB:uIbV5DAdLDXYgJG2t+YNAQXzjBLOMB","tlshash":"3e42c0462432d62179d673f3fb421ffbc06aea26f69249882935dc07281bb7441c7976","first_seen":"2026-03-29T15:22:51.376696Z","last_seen":"2026-03-29T15:22:52.944102Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/social-proof-1-zjjW_uao.png","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/social-proof-1-zjjW_uao.png HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 250043\r\netag: \"fb3e3fd182fd01fdb348d8d123061087\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e3fded48b4bb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 555 x 748, 8-bit/color RGBA, non-interlaced","md5":"fb3e3fd182fd01fdb348d8d123061087","sha1":"16d97c69b8e0b14c39d797a4e2612ab989d2f886","sha256":"82125928773f6783442211dfef905b117d56fc6174a7e9f383329afb12a71c45","sha512":"28f6d31fce2d57746634741186e651248a27ab165236c7da869ddc8cf86890e9d028093266a83a2ff0b1e0da6a0bf9d2427e32ae8167b776ea0205bc48d7bfde","ssdeep":"6144:JSUFMjve647Qgc+SOYkJObAh3vxHeTvhZdrsU:JIjG64E+CkJAcvezB","tlshash":"d1342361e6c9ef04bde5bf585a684980d189be1c8948cf79bdd835a33641389e32f390","first_seen":"2026-03-29T15:22:51.374423Z","last_seen":"2026-03-29T15:22:52.944716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/index-CJpoXziU.js","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/index-CJpoXziU.js HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"631279274574dc467beefb4ee4ce8f52\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e3fded32a15b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":357666,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"631279274574dc467beefb4ee4ce8f52","sha1":"6792e37ff53691e44e74b6f54a28e453bef76dc3","sha256":"5dc9940c197181fd50c84d6d127646e00901e7ae692756155ed3852ad70296c1","sha512":"da4f2dda8b761b028855b7331bb1299daaed485be299a211f79c9f1ca55b8a003a0d24c53c5c929854c62851bcd20d7d5b6933621ff4349af54ad9b0cd399265","ssdeep":"6144:+fcWexpZLooYF4GoWfki8tnfqODeueL2eqz97sDcpXo:+ofooYF4GoWfAnSODiSeVDcpXo","tlshash":"62747dd8305ab1756bb345b2507f410bb23d2902a80d8460f03dedaa7bb5545a2bbffd","first_seen":"2026-03-29T15:22:51.380739Z","last_seen":"2026-03-29T15:22:52.945519Z","times_seen":2,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/assets/index-CxmaKe_9.css","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /assets/index-CxmaKe_9.css HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:30 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"d2479f5446d96647c718dd0423252bae\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e3fded32a1ab4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74774,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d2479f5446d96647c718dd0423252bae","sha1":"c91b0e2ed0c5f608557a0e3b3d267bfc43a4da88","sha256":"606ba72f83c843fbf0e524ab7b936001927efb41d1bf781e02807919e6e9225e","sha512":"476099dbc996cd40960258ba7be43d94d20cb7c4d90336823ee61944e4008ae1031d59d7dc645bd8bc6bad28394d84f0f8aababd74868f185be4c8a8ced1a58b","ssdeep":"1536:kCDCChxSYTkg6LEUZaG+Cr378VQZkt5FNCoL5:kCDCChx5kWUZaG+Cr378VQZkt5FfL5","tlshash":"3c738419b959603f3c2790f8c3ccb9aca11af0c0de3b05b9be96412567d27f65dab904","first_seen":"2026-03-29T15:22:51.399821Z","last_seen":"2026-03-29T15:22:52.946397Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icloudpro.zakiassinaturas.shop/~flock.js","fqdn":"icloudpro.zakiassinaturas.shop","domain":"zakiassinaturas.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icloudpro.zakiassinaturas.shop/","date":"2026-03-29T15:22:30.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icloudpro.zakiassinaturas.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:47:09 GMT","end":"Thu, 25 Jun 2026 17:46:57 GMT"},"fingerprint":{"sha1":"83:87:A2:F5:36:AA:6B:EB:24:AE:B8:B4:6F:20:D6:12:9B:AE:77:9A","sha256":"9E:DE:98:BB:9E:69:B9:3B:EA:B9:E9:A4:76:20:E5:BC:1F:71:6D:A4:E9:14:4E:DB:E1:23:A2:8D:30:3A:1B:77"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: icloudpro.zakiassinaturas.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://icloudpro.zakiassinaturas.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=qENTnbGD2M9gI5c6qCsSSwTF2TX4JgDv3_aL6PuwQiQ-1774797750.046849-1.0.1.1-97eKUA2Yhi3n4fcZHztPGCtnYbJzvcBUJbpLzCjRORfvRHj5izPDExdlERINVaFxONyb_Pieg0wepDI4rebQO6ZoO4n0RslQmiJTyLA9xW2sjWgDk_VbiahFyUFndljq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:22:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e3fded32a1eb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-07-23T21:41:28.270672Z","times_seen":14230,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"icloudpro.zakiassinaturas.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}