{"report_id":"82cd25dc-af3b-4d9b-b3b1-fbc588c86ba9","version":6,"status":"done","tags":[],"date":"2026-03-07T16:40:05Z","url":{"schema":"http","addr":"app.saylessgo.com","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.67.52","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"app.saylessgo.com/","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"title":"Say Less, Go! - Travel Planner","dom":{"size":42951,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8527)","md5":"7364877455105728796eb76bd1a7a1b0","sha1":"8216b2fe43aa1f49da3699570d05dc8716d2827d","sha256":"3860bd007f8c40664bf520ac3dd929afb988d4b1423af176305d9c8e7950f204","sha512":"01b739d8d7730b8a41f3b86cf1ba4dc97fa392eb5f0694f880deaf4c4b20e3760a3f2f51d767193657e97e63bf0bde44cd28642de5a261c6838d556a8307e947","ssdeep":"768:g/mUM301qNcIfkiMyEigO5X6vgiNfActUsk73PcjcH9lW6n9gn:g/mUM301qNcIfkiMyEigO5XQgiNfTWjA","tlshash":"341395c7df11a10d3d2b31abda96420892771816f3616dcafacd8d1c8b49a725673f83","dom_hash":"domhash246c8bc16f4f7faa53be5253a23680c6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"app.saylessgo.com","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.67.52","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T16:40:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-07","alert":"Hunting_JS_WebAssembly","trigger":"app.saylessgo.com/assets/vendor-map-Cu9Irk0u.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.saylessgo.com","ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2025-10-04","domain_rank":0,"first_seen":"2026-02-02T18:06:50.742818Z","last_seen":"2026-03-02T10:25:43.567107Z","alert_count":43,"request_count":41,"received_data":8658806,"sent_data":18788,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app.saylessgo.com/assets/rolldown-runtime-GyhWBpbT.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"fc13456beccf256df2df361d59c5a578","sha1":"86d48b768d8e987f0369c07cebaaa3b57e278b00","sha256":"85a075ed7939a813c0f4ea5431522936ab98d34691638d112c1b45ca5c3807b5","sha512":"ce6d6d07934f7cdabea267fc2147cdc9b4c62d8a22773a2bfc9480c6de20fd78119c4880a43dea5890ded2beeb0db024f8427aa9051cd2df2d7aa114d4e7ccd5","ssdeep":"","tlshash":"4501bdbb2dc1e7b20382a28bdd681481e624383d853c70e4e7a489f694820c250e8e77","size":752,"data":"","first_seen":"2026-01-17T20:33:36.718779Z","last_seen":"2026-04-01T15:49:01.751258Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-dnd-BCACaNQ6.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1e60edbc998d30b95de05ff80ec01f00","sha1":"5a24205a3cf9bdb94e5fb26ae971b4aaa5a4b4f5","sha256":"c9ec50a024c04e7d468f13642b562fea4236e1b0c99d234892fd2cc165fb341d","sha512":"dceb13e2b5befb6a9b900f1b5488ef81a2782c8ea75a5f438055c31e44dd35273be6f93221d59d28444decc8e3b4dfdc24f6d56ca6c1ef4705e28a00d697c9e3","ssdeep":"1536:MPFlBKTFmAQP9KmEZHTvaGpMw02SgQa5albay89qJG:6lYT8A1mgb/QkcG","tlshash":"944309c23a917470d38fd03250ab194ab33d3aa1640d8474f37aeded356069492b6fbb","size":58164,"data":"","first_seen":"2026-03-07T16:40:13.413476Z","last_seen":"2026-03-07T16:40:13.413476Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-react-S2sdEdLj.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"beb77a3d9b28157173ca0231b30b3e0e","sha1":"0d52727cec1adc58b43a16877117c481480027c6","sha256":"001c59c51640c91a5ec96a9a3b680fed5b06fe8dfb181ac00c77c78492d18ee7","sha512":"ca340047f93e06446af9901b82a4578b5312067d57219cf7c166cb57f637c79f9c4523ac3d1775698cff86a486d32a6b13535a5d648582bad53229ed6865c55c","ssdeep":"6144:dsRN2WRUPRUZa0e/54OPafkdnOnVWCV38DA:dbP+0PaZSA","tlshash":"b2444cfc31a5b5225fa757b240af1507b3392863280d4820b264fdae36b584951fbfed","size":271729,"data":"","first_seen":"2026-03-07T16:40:13.395459Z","last_seen":"2026-03-07T16:40:13.395459Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-motion-CxfZabaO.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8395664d2b0b0d6b1bec4539b1cc82fd","sha1":"3558fe93194de1af9acb53a5f43c0f5b5f1524b8","sha256":"5226e3caa5f9b1617d59d0cb323a7e8480f6ec6d556c1c6b51d86bbc166158f3","sha512":"0fec1ca34b92d49ea9451920682478e25d53b7538dcd52a423aaa57d7560246835bc9459431d563a9795d64d2068d28add86b171293731cec3c60861c80fce8f","ssdeep":"1536:yFhQx7iVWKeAAQLjgDfTpwVOkUV9yHoGd+j//748zV/da/onF5CI:y7A2VQ7QUt2CL7xRCI","tlshash":"b3c307d633907122d3df8266c0af4b45b33b59d82809403c763da9cf296191966fbf7a","size":122465,"data":"","first_seen":"2026-03-07T16:40:13.407196Z","last_seen":"2026-03-07T16:40:13.407196Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-state-s7hQoNlj.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d4b800b7111907aab33848336793343f","sha1":"3ec92bac6c1cdc588c51483f6c6bc6c2f8b6f366","sha256":"71d0d66ac8660336c0087b240f72cb966c7bb8306f7f729e6cc72271e795a5cd","sha512":"383764ace17d9524ed08e010573ddb91270cbe680ea2c1f9841f944b2ca396358f01f43e2dab346cccce602e08ef67a9fad55d2af2a44ce3e524f5aaa9fb8c60","ssdeep":"1536:ij/2KLOyQJBsftzjwQFwNfIzYjT98cj23nLNgAO2/iljqkM2o5BfXjVNxMYOnNC9:ir9tv7Q18c6gAOMAjC2CB/jKjnmR","tlshash":"08d3c6c9b2d6f03257a76071843f500af33b6985280d4028f159e9e67cba94de67bf78","size":135420,"data":"","first_seen":"2026-03-07T16:40:13.399638Z","last_seen":"2026-03-07T16:40:13.399638Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-mui-BAeaGed_.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"154c6244f9b443726aed3b5c235952bb","sha1":"1119143f9f5659d9abd9024e8ab391deaa9baadd","sha256":"b606ad6ccb2bf4df25232da75e274e9d0aa6c981beb3f5e33030335d59263900","sha512":"8d60a030e07f68a2965b7f39a4f8c54d442c5e4572111217511dc19634ceb27913da7719918a057d8f69081d18432a13dd272251fc13e46dc0037fd7fadec9bc","ssdeep":"12288:ggDXPDcU3GKDGznvkpQe2H4+uonunjghicDisd1lhHUhksT7P05cYO:ggDXPgZJ4pB2TupDehUkCP","tlshash":"53d46dd5b290f0304fbbc296c4df440df73e6554ac0f8464f23689ac26b5a889667fb9","size":612552,"data":"","first_seen":"2026-03-07T16:40:13.404045Z","last_seen":"2026-03-07T16:40:13.404045Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-tiptap-Dd_uF_q-.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f1cb13b4be0ad70465618de1769989f7","sha1":"541d9a3bf7413c007634a25ce41d73aa73a25f87","sha256":"4d822df840d83be8d64d951124f4de5c6302ad4faa8046bdb718c73ffb93217a","sha512":"467937a5f1704bb29a3a96fd489e8ec4813fe932d22c9a8c651cb70b38e92b942f278c15b5b793c9bce5b31d59b2c198597983e8840240f65132f6386ad1055f","ssdeep":"6144:/4g1lbDMLOTLMZHweSGSxPLn6U8mWNEWhin:AgAOTLMtrS1j6U8Rc","tlshash":"309417e533a6717347de419a94aa0500f37a8998a80d002cf57cd8ef3ca5945a2fff79","size":417354,"data":"","first_seen":"2026-03-07T16:40:13.405044Z","last_seen":"2026-03-07T16:40:13.405044Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-backend-BYgx9m8v.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"74e56998957d7304221404b738937bbc","sha1":"57765f0128e3c33aa080ed45bbeb2d8e9186eb59","sha256":"aa2ab28cf079ac0f2365538cc3a05c249d660944e39774ef1789b1413b61540a","sha512":"e22812e301019579128ac1fc67b9af49ada8b6b4488d892e8686f58749b7b30e985c6b4c9d29dd2d386f95b60020568cc8094cc5b211773f40e44f1012793263","ssdeep":"1536:eJJMJ6JGJhJIJ3JCJ8J/J8JBJ8JkJXJoxJ4JvJcJXJCJWJTJKJqJ5JbJbJKJpJ/m:MJMJ6JGJhJIJ3JCJ8J/J8JBJ8JkJXJo1","tlshash":"9863d9f06380b4f203d7ef51745552f0f23a68ada4ca1428b8e045ef9ae1d46a766b73","size":71317,"data":"","first_seen":"2026-03-07T16:40:13.398311Z","last_seen":"2026-03-07T16:40:13.398311Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/loader-locale.js?v=1","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f50d528d0e96b5feeb13e28565b09d52","sha1":"5c3fe49a4c20363f27dbc30169462a1cdbe4a3bc","sha256":"6dd1f43478d327fd61ce05eb25a2937d0288862a7ff8bd5927163029c9dfd6b4","sha512":"876883dfd3e00aaee352a87b23b23e3a72b2807a5d9d7c399a259f20656ed5b23259335c03e34e8f51b26e40926eb2175f6deadd57400e6bc5638fcc1abfbf13","ssdeep":"96:Rve5qiFgwb6LbHMWa173PVVnukbdeVdT6OnaRGzubhIKCHnXT4+aX4vAfHipk1q:jSZiE1TT/hQd+OnaRyubx8cgvA/qkg","tlshash":"38e12fb55bab04ef1102d043958da9463dea01bf2f66730b355e6d6e2fdc02e423dab1","size":6924,"data":"","first_seen":"2026-03-02T22:28:50.570995Z","last_seen":"2026-03-18T17:15:42.20921Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-utils-BQfh4OET.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6d71c7b2ef2d76a78fedc8ad49f38a4f","sha1":"edcbcd526e1b3a765ca62ac09b2e41b11ed425ba","sha256":"b413cff6aca8df5f8b92dad67ff3adba83a056377437980674c657078a4e2ba9","sha512":"a418d9c5a894361f3f15c01d028c3d12085ef6c380ef0f048ca75e2973dbf86c707938e6fc64ec83194e4062bb90aa839772077b1f4c98b6caf430ef2faf9c16","ssdeep":"","tlshash":"4b514194b585e874f35391291257d53f233f3fb2355cc068e23d58a83a18886e166adf","size":2699,"data":"","first_seen":"2026-03-07T16:40:13.396554Z","last_seen":"2026-03-07T16:40:13.396554Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-map-Cu9Irk0u.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0c9341702b135a4d91a35266b2ed53b6","sha1":"4ef512c414f5e2ba01a9966e5b2df11b49abc26e","sha256":"dc0778ae15ddb5d2fa4dcf233158e0122e5f0e80cef1755ebd0cc9f89bf1b8cf","sha512":"3fececb70b7004eb4bcabbb728bf597dd1760814642faa8949b3149b6eabd0ebacb5a921f596b26e551ea77c9f6edb22eb1b2f4143f53305bbcf7a1f133f4fad","ssdeep":"49152:rQE5RoWgu52/Bdu0KQmhj/tH3TGLPl0CSDSxaG8GRGIlfNA+g1DWxbs5WFmWWZdF:X4uN0wj/tGbe","tlshash":"df953ca533526863c39761a7047a0143f33a54d4684d451cfa3ca8ffaeead4962faf34","size":1975757,"data":"","first_seen":"2026-03-07T16:40:13.416573Z","last_seen":"2026-03-07T16:40:13.416573Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-07","alert":"Hunting_JS_WebAssembly","trigger":"app.saylessgo.com/assets/vendor-map-Cu9Irk0u.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-form--BtOVA5X.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4a30f2b95019508790eb468d508af827","sha1":"675267df3bbb8aa573f8a85225c6007820eca8b0","sha256":"4150c06ad0e991d55f32a2a0360793f0c53db0d23a26d207470b593c3ed0620e","sha512":"8799c4da59c618a40e2625db8b360d28e65a1abdaa5d5aa97a347334b5546e670325a75447a9194a9f0f3f8851e63a62710cc5a5bbd15ce8466f01b3cce60499","ssdeep":"1536:xH9H97DdDX0MLn6592jSDidn5zp0zHDbhfckO8+AwtCD6HspXMb5gc1W99u+bn0o:xH9H9XdDX0MT65UuDIn5zp0uOlwtc8sn","tlshash":"eb93299333e6f5230ffe12a610a90205f7a61c382c3d5814f26886d6769ad9875f7f2d","size":93779,"data":"","first_seen":"2026-03-07T16:40:13.411745Z","last_seen":"2026-03-07T16:40:13.411745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/index-CipD5a16.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49d104a8fb0b40006416986a2344152d","sha1":"fca3dd124e0a3b3973b49424107198468ffd453a","sha256":"7260b3a3d27b1e5852ee6231dd3d1af1d48ae347e93a434fd96aedf9cbbeefde","sha512":"eb94ec5a3c5e42cef3590637744479279fc8e39f003136bae285ca07b0a9151ee7a768dfcd76f0102c59dd8298323a9b8c23c39a0f4836262033eb27b5b4245f","ssdeep":"12288:zM4UOIsCiVGz6Iqt0MTKatmsGwNrTRh51NK+:xRCIGz6t0GZt/zNK+","tlshash":"1b15395633ad3d6486ae4d688c37040923345fc8d606d42cfd2a6dfd22e9982b3daf75","size":918362,"data":"","first_seen":"2026-03-07T16:40:13.402556Z","last_seen":"2026-03-07T16:40:13.402556Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-react-S2sdEdLj.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-react-S2sdEdLj.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"beb77a3d9b28157173ca0231b30b3e0e\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.34647607803345\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 271729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":271729,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (55137)","md5":"beb77a3d9b28157173ca0231b30b3e0e","sha1":"0d52727cec1adc58b43a16877117c481480027c6","sha256":"001c59c51640c91a5ec96a9a3b680fed5b06fe8dfb181ac00c77c78492d18ee7","sha512":"ca340047f93e06446af9901b82a4578b5312067d57219cf7c166cb57f637c79f9c4523ac3d1775698cff86a486d32a6b13535a5d648582bad53229ed6865c55c","ssdeep":"6144:dsRN2WRUPRUZa0e/54OPafkdnOnVWCV38DA:dbP+0PaZSA","tlshash":"b2444cfc31a5b5225fa757b240af1507b3392863280d4820b264fdae36b584951fbfed","first_seen":"2026-03-07T16:40:13.395459Z","last_seen":"2026-03-07T16:40:13.395459Z","times_seen":1,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-utils-BQfh4OET.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-utils-BQfh4OET.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"6d71c7b2ef2d76a78fedc8ad49f38a4f\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.2728910446167\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 2699\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2699,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2650)","md5":"6d71c7b2ef2d76a78fedc8ad49f38a4f","sha1":"edcbcd526e1b3a765ca62ac09b2e41b11ed425ba","sha256":"b413cff6aca8df5f8b92dad67ff3adba83a056377437980674c657078a4e2ba9","sha512":"a418d9c5a894361f3f15c01d028c3d12085ef6c380ef0f048ca75e2973dbf86c707938e6fc64ec83194e4062bb90aa839772077b1f4c98b6caf430ef2faf9c16","ssdeep":"","tlshash":"4b514194b585e874f35391291257d53f233f3fb2355cc068e23d58a83a18886e166adf","first_seen":"2026-03-07T16:40:13.396554Z","last_seen":"2026-03-07T16:40:13.396554Z","times_seen":1,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/locales/en/collaboration.json","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /locales/en/collaboration.json HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: saylessgo-theme=light; locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\netag: \"a026b6c137a7ec2ef5b540220368910e\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.31281113624573\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 1410\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1410,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a026b6c137a7ec2ef5b540220368910e","sha1":"e157b151c6ac6e758e5a7863c2906be7b161c4c4","sha256":"0af690d7232efb1e42108d09078fb5899ac4f28ef60e72e6363e32f72b11c7d6","sha512":"ac0f80da0848c7dd6eecfdab0228f463311a71207910f24667fc1f6c95486c4f493f5f23c7d07650d7bcc5933b7b35c39cd8095bca0306ea6bef69f6c02b0007","ssdeep":"","tlshash":"56219e30cac11f6319d4745abc162112780450abcf14351ebb8eaa6d1f9e4bf7bf626e","first_seen":"2026-02-24T21:48:50.711102Z","last_seen":"2026-04-01T15:49:01.790796Z","times_seen":40,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-backend-BYgx9m8v.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-backend-BYgx9m8v.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/assets/index-CipD5a16.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"74e56998957d7304221404b738937bbc\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.41986989974976\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 71317\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":71317,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"74e56998957d7304221404b738937bbc","sha1":"57765f0128e3c33aa080ed45bbeb2d8e9186eb59","sha256":"aa2ab28cf079ac0f2365538cc3a05c249d660944e39774ef1789b1413b61540a","sha512":"e22812e301019579128ac1fc67b9af49ada8b6b4488d892e8686f58749b7b30e985c6b4c9d29dd2d386f95b60020568cc8094cc5b211773f40e44f1012793263","ssdeep":"1536:eJJMJ6JGJhJIJ3JCJ8J/J8JBJ8JkJXJoxJ4JvJcJXJCJWJTJKJqJ5JbJbJKJpJ/m:MJMJ6JGJhJIJ3JCJ8J/J8JBJ8JkJXJo1","tlshash":"9863d9f06380b4f203d7ef51745552f0f23a68ada4ca1428b8e045ef9ae1d46a766b73","first_seen":"2026-03-07T16:40:13.398311Z","last_seen":"2026-03-07T16:40:13.398311Z","times_seen":1,"resource_available":true,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/roboto-latin-400-normal-CNwBRw8h.woff2","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/roboto-latin-400-normal-CNwBRw8h.woff2 HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/assets/index-B9yKueMq.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/octet-stream\r\netag: \"b07da7aa3e4f363c5cdbc11312239e8c\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.30633401870728\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:43 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 20612\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":20612,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-04-04T15:24:47.318676Z","times_seen":45629,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":451,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-state-s7hQoNlj.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-state-s7hQoNlj.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"d4b800b7111907aab33848336793343f\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.40985798835754\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 135420\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":135420,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46008)","md5":"d4b800b7111907aab33848336793343f","sha1":"3ec92bac6c1cdc588c51483f6c6bc6c2f8b6f366","sha256":"71d0d66ac8660336c0087b240f72cb966c7bb8306f7f729e6cc72271e795a5cd","sha512":"383764ace17d9524ed08e010573ddb91270cbe680ea2c1f9841f944b2ca396358f01f43e2dab346cccce602e08ef67a9fad55d2af2a44ce3e524f5aaa9fb8c60","ssdeep":"1536:ij/2KLOyQJBsftzjwQFwNfIzYjT98cj23nLNgAO2/iljqkM2o5BfXjVNxMYOnNC9:ir9tv7Q18c6gAOMAjC2CB/jKjnmR","tlshash":"08d3c6c9b2d6f03257a76071843f500af33b6985280d4028f159e9e67cba94de67bf78","first_seen":"2026-03-07T16:40:13.399638Z","last_seen":"2026-03-07T16:40:13.399638Z","times_seen":1,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/logo.svg","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:45.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/\r\nCookie: saylessgo-theme=light; locale=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: image/svg+xml\r\netag: \"d0678fa7b62dac29f87743d46283b7e4\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.10936713218689\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:45 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 1679\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1679,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0678fa7b62dac29f87743d46283b7e4","sha1":"6c311fb300385838625d3ebc7767c21ec975a16a","sha256":"97465ae0111f3bff4994048299bcfa0fdefa684921576309edcbea94d357ead9","sha512":"a42a8fe63d378113a6dfd8188fa4a18b882d75c523313b4bee4e696f8a673f714f485649d2c30d31a61cf05b8915ec468ad231c0b0f4b79632bc5d68ffd6f90b","ssdeep":"","tlshash":"353110dd5f755ac8dcc48af67e29a0dcad5b161f9081891ad14c0f48a8d192fee014d7","first_seen":"2026-01-15T13:22:23.872081Z","last_seen":"2026-04-01T15:49:01.768224Z","times_seen":131,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/apple-touch-icon-152x152.png","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:45.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /apple-touch-icon-152x152.png HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/\r\nCookie: saylessgo-theme=light; locale=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: image/png\r\netag: \"89543ec0b78e21762937ff1458775b75\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.13253998756409\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 936\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit colormap, non-interlaced","md5":"89543ec0b78e21762937ff1458775b75","sha1":"73f52f7d91532b36c296f790547f38d35f45edf9","sha256":"5f461884f0c26c19f8b8c83a2c9d0fed303e71f46f51418efd10c16d00ea69ac","sha512":"6915ab60099db44fabf8f3403c9aea63b201468fc556dec9feed0eed621e4cfb3d29e30f5074a7d63eec079b1c8c10b0e07b66ef31087ada9fed0635272c12b0","ssdeep":"","tlshash":"ef11c8e0f41f689eac67408273441a4814d365c562c678d427939fe657e9fc78cd2443","first_seen":"2026-01-17T10:31:16.632993Z","last_seen":"2026-04-01T15:49:01.785552Z","times_seen":107,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T16:39:42.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\netag: \"cd32fc561227c9799819ee1597077a51\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.17930603027344\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 39698\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":39698,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8521)","md5":"cf97bbe50a6e9dcb98975638e054c934","sha1":"1d057ea70ed618e4a8f5f13538d76efc2b82593b","sha256":"ceafbd2edc29a872738ecdb9b1b5bc2eb4ac560b8bb23a34d54f919989730a2e","sha512":"5f6b4fdb4c9c153a907bdab03f4541fa6a987924a95987d69f4728e4550c677079d25fce578b933f234a9823d0c452e8c9a26de198c92560942a83b36641e6df","ssdeep":"768:mKJUM301qNcIfkiMyEigO5XnYgiNf9tUsk73Pcjcq9WW6nUU:mKJUM301qNcIfkiMyEigO5XYgiNf9WkY","tlshash":"030395cbdf11a14d2d2b35abda56410892372856f3616dcafacd8d1ccb49a720673f83","first_seen":"2026-03-07T16:40:13.401621Z","last_seen":"2026-03-07T16:40:13.401621Z","times_seen":1,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":62,"dns":1,"connect":26,"send":0,"wait":327,"receive":11,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/index-CipD5a16.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/index-CipD5a16.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"49d104a8fb0b40006416986a2344152d\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.11938095092773\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:43 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 918362\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":918362,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"49d104a8fb0b40006416986a2344152d","sha1":"fca3dd124e0a3b3973b49424107198468ffd453a","sha256":"7260b3a3d27b1e5852ee6231dd3d1af1d48ae347e93a434fd96aedf9cbbeefde","sha512":"eb94ec5a3c5e42cef3590637744479279fc8e39f003136bae285ca07b0a9151ee7a768dfcd76f0102c59dd8298323a9b8c23c39a0f4836262033eb27b5b4245f","ssdeep":"12288:zM4UOIsCiVGz6Iqt0MTKatmsGwNrTRh51NK+:xRCIGz6t0GZt/zNK+","tlshash":"1b15395633ad3d6486ae4d688c37040923345fc8d606d42cfd2a6dfd22e9982b3daf75","first_seen":"2026-03-07T16:40:13.402556Z","last_seen":"2026-03-07T16:40:13.402556Z","times_seen":1,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-map-CQ3wR81S.css","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-map-CQ3wR81S.css HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/css; charset=utf-8\r\netag: \"d0ba300c4758409ab38e34f5a029ce91\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.30679202079773\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:43 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 38654\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38654,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (38653)","md5":"d0ba300c4758409ab38e34f5a029ce91","sha1":"2094fbf0b22b9f930cb91a37075b13b2d2ce9ea5","sha256":"28bf236f9db6e0b717847176f2d6b79c9fcf21344a7933d60b9f6790c799150c","sha512":"d2f8bcf9baccb7c11054d0b69d1cebbdf2c1fccd595a7eb9b5c6f6ed6bde56522209021c0c95aaf1f86123390ae24cdf54bb2993b1a9ef0ad78de047083d62ed","ssdeep":"768:liiq6MzQGaxQ+OLBOiBQ+OLBOjA/q43HVq43Hmq43H2esz:+6MOxlOtOiBlOtOjAd3D3m3q","tlshash":"6c039793ab4964afea464632cd3b5095b23f99c7bdbd42d4ad3dc738c26bd849307024","first_seen":"2026-01-17T20:33:36.740546Z","last_seen":"2026-04-04T04:38:16.12031Z","times_seen":95,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-mui-BAeaGed_.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-mui-BAeaGed_.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"154c6244f9b443726aed3b5c235952bb\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.32182598114014\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 612552\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":612552,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60800)","md5":"154c6244f9b443726aed3b5c235952bb","sha1":"1119143f9f5659d9abd9024e8ab391deaa9baadd","sha256":"b606ad6ccb2bf4df25232da75e274e9d0aa6c981beb3f5e33030335d59263900","sha512":"8d60a030e07f68a2965b7f39a4f8c54d442c5e4572111217511dc19634ceb27913da7719918a057d8f69081d18432a13dd272251fc13e46dc0037fd7fadec9bc","ssdeep":"12288:ggDXPDcU3GKDGznvkpQe2H4+uonunjghicDisd1lhHUhksT7P05cYO:ggDXPgZJ4pB2TupDehUkCP","tlshash":"53d46dd5b290f0304fbbc296c4df440df73e6554ac0f8464f23689ac26b5a889667fb9","first_seen":"2026-03-07T16:40:13.404045Z","last_seen":"2026-03-07T16:40:13.404045Z","times_seen":1,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-tiptap-Dd_uF_q-.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-tiptap-Dd_uF_q-.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"f1cb13b4be0ad70465618de1769989f7\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.35863399505615\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 417354\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":417354,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23780)","md5":"f1cb13b4be0ad70465618de1769989f7","sha1":"541d9a3bf7413c007634a25ce41d73aa73a25f87","sha256":"4d822df840d83be8d64d951124f4de5c6302ad4faa8046bdb718c73ffb93217a","sha512":"467937a5f1704bb29a3a96fd489e8ec4813fe932d22c9a8c651cb70b38e92b942f278c15b5b793c9bce5b31d59b2c198597983e8840240f65132f6386ad1055f","ssdeep":"6144:/4g1lbDMLOTLMZHweSGSxPLn6U8mWNEWhin:AgAOTLMtrS1j6U8Rc","tlshash":"309417e533a6717347de419a94aa0500f37a8998a80d002cf57cd8ef3ca5945a2fff79","first_seen":"2026-03-07T16:40:13.405044Z","last_seen":"2026-03-07T16:40:13.405044Z","times_seen":1,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/locales/en/settings.json","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /locales/en/settings.json HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: saylessgo-theme=light; locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\netag: \"a46c9f816513f38f6392d97dc09f366c\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.34524917602539\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 3879\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3879,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a46c9f816513f38f6392d97dc09f366c","sha1":"6ead32a31181788eb019293892e985d3dd314cb0","sha256":"4e1dce45ebcd7232cc6ce94f14cbfeea43b89d51e6ceae4acf80667c2d328760","sha512":"86478c0355f6be3a5d82e47496ece8d82f4b55484ba8d446aa7095d811c04f9ed0ecf17c46adf396fbd138764cc070630e11909d1d35f258716d27b016d515e5","ssdeep":"","tlshash":"5c818525c6404cab0895a612bca341977a1541770f21381d7bdc748c1faed6f64fb73e","first_seen":"2026-03-03T15:47:06.966813Z","last_seen":"2026-04-01T15:49:01.811469Z","times_seen":33,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":403,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/locales/en/trips.json","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /locales/en/trips.json HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: saylessgo-theme=light; locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\netag: \"9c33c2b0ea8229115c139442c598b74c\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.28963589668274\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 3256\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3256,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c33c2b0ea8229115c139442c598b74c","sha1":"137a8c0505a0e0966d940d03165de8930f502420","sha256":"704472b2a2311d81583fed1ad59ab0607951ff629e7fdc10fee8111b097e5161","sha512":"1dbe89a4446342ae4e6598fb1f6342bb049b7d4a06dda7be6148e2dfffef10109b631f2e146acfd47f3e4d6069a6bbef4ea078543027ef1305d0c55edd5455f9","ssdeep":"","tlshash":"f261cd15fed10da724a49422f82619a3380951c30f8cb4aaf79ca09d1fee5af54fb13d","first_seen":"2026-03-04T18:52:01.982885Z","last_seen":"2026-03-11T23:29:52.088986Z","times_seen":26,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/locales/en/countries.json","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /locales/en/countries.json HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: saylessgo-theme=light; locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\netag: \"59f2f83bb87f5ec829fb7a2bd604a6fb\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.30868697166443\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 1206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"59f2f83bb87f5ec829fb7a2bd604a6fb","sha1":"94f18052904e76f83f8173d257aa651e0e177237","sha256":"d0988e6a7c4c3a582ab4b7685ed5f52be94a572f0152b0c161a804d9e6c01d51","sha512":"3fa6a16fd4ec2872385f2630daa1566e5b4f11cd7b28decc1002b33ef6ca6b6a375fc7f9960e79b641471137d8a7dad9fd7c4661b708e0d3c798283053a4f641","ssdeep":"","tlshash":"e121af7ac8644c770be4e24a8c6245536520835b8d15786d739ca65c0f1f97f20bdb7f","first_seen":"2026-02-27T16:06:57.999725Z","last_seen":"2026-04-01T15:49:01.800387Z","times_seen":38,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-react-S2sdEdLj.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-react-S2sdEdLj.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/assets/index-CipD5a16.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"beb77a3d9b28157173ca0231b30b3e0e\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.34647607803345\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:43 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 271729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":271729,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (55137)","md5":"beb77a3d9b28157173ca0231b30b3e0e","sha1":"0d52727cec1adc58b43a16877117c481480027c6","sha256":"001c59c51640c91a5ec96a9a3b680fed5b06fe8dfb181ac00c77c78492d18ee7","sha512":"ca340047f93e06446af9901b82a4578b5312067d57219cf7c166cb57f637c79f9c4523ac3d1775698cff86a486d32a6b13535a5d648582bad53229ed6865c55c","ssdeep":"6144:dsRN2WRUPRUZa0e/54OPafkdnOnVWCV38DA:dbP+0PaZSA","tlshash":"b2444cfc31a5b5225fa757b240af1507b3392863280d4820b264fdae36b584951fbfed","first_seen":"2026-03-07T16:40:13.395459Z","last_seen":"2026-03-07T16:40:13.395459Z","times_seen":1,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-motion-CxfZabaO.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-motion-CxfZabaO.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/assets/index-CipD5a16.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"8395664d2b0b0d6b1bec4539b1cc82fd\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.428386926651\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 122465\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":122465,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8395664d2b0b0d6b1bec4539b1cc82fd","sha1":"3558fe93194de1af9acb53a5f43c0f5b5f1524b8","sha256":"5226e3caa5f9b1617d59d0cb323a7e8480f6ec6d556c1c6b51d86bbc166158f3","sha512":"0fec1ca34b92d49ea9451920682478e25d53b7538dcd52a423aaa57d7560246835bc9459431d563a9795d64d2068d28add86b171293731cec3c60861c80fce8f","ssdeep":"1536:yFhQx7iVWKeAAQLjgDfTpwVOkUV9yHoGd+j//748zV/da/onF5CI:y7A2VQ7QUt2CL7xRCI","tlshash":"b3c307d633907122d3df8266c0af4b45b33b59d82809403c763da9cf296191966fbf7a","first_seen":"2026-03-07T16:40:13.407196Z","last_seen":"2026-03-07T16:40:13.407196Z","times_seen":1,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-utils-BQfh4OET.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-utils-BQfh4OET.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/assets/index-CipD5a16.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"6d71c7b2ef2d76a78fedc8ad49f38a4f\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.2728910446167\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:43 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 2699\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2699,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2650)","md5":"6d71c7b2ef2d76a78fedc8ad49f38a4f","sha1":"edcbcd526e1b3a765ca62ac09b2e41b11ed425ba","sha256":"b413cff6aca8df5f8b92dad67ff3adba83a056377437980674c657078a4e2ba9","sha512":"a418d9c5a894361f3f15c01d028c3d12085ef6c380ef0f048ca75e2973dbf86c707938e6fc64ec83194e4062bb90aa839772077b1f4c98b6caf430ef2faf9c16","ssdeep":"","tlshash":"4b514194b585e874f35391291257d53f233f3fb2355cc068e23d58a83a18886e166adf","first_seen":"2026-03-07T16:40:13.396554Z","last_seen":"2026-03-07T16:40:13.396554Z","times_seen":1,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-map-Cu9Irk0u.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-map-Cu9Irk0u.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"0c9341702b135a4d91a35266b2ed53b6\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.46638202667236\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 1975757\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1975757,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37393)","md5":"393a19499c8beddaf7936f6becdc83e6","sha1":"0ac2001475c6b912082b001f9deaff8dae0bc7a3","sha256":"c7b0c54c2c1f9c696139bac6abc37e76eaaa2925d57019539be92aebef40e0e9","sha512":"d1aa5578babcec14a2f21063c68d687b443155caab97d144f0b74cbc9b0e7c610c937e8087478a78632bb8a007b3be40a41e46d7ec561bcc40816d4c78356ac6","ssdeep":"24576:rQEdmGRXYWgu52/Bdu0KQBi/MqjBRt4WX3TE:rQE5RoWgu52/Bdu0KQmhj/tH3TE","tlshash":"8a251ce833527862c3975266047b1143f33a6490684d851cf678e8efaee9d5d21faf38","first_seen":"2026-03-07T16:40:13.408038Z","last_seen":"2026-03-07T16:40:13.408038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-07","alert":"Hunting_JS_WebAssembly","trigger":"app.saylessgo.com/assets/vendor-map-Cu9Irk0u.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-motion-CxfZabaO.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-motion-CxfZabaO.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"8395664d2b0b0d6b1bec4539b1cc82fd\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.428386926651\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 122465\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":122465,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8395664d2b0b0d6b1bec4539b1cc82fd","sha1":"3558fe93194de1af9acb53a5f43c0f5b5f1524b8","sha256":"5226e3caa5f9b1617d59d0cb323a7e8480f6ec6d556c1c6b51d86bbc166158f3","sha512":"0fec1ca34b92d49ea9451920682478e25d53b7538dcd52a423aaa57d7560246835bc9459431d563a9795d64d2068d28add86b171293731cec3c60861c80fce8f","ssdeep":"1536:yFhQx7iVWKeAAQLjgDfTpwVOkUV9yHoGd+j//748zV/da/onF5CI:y7A2VQ7QUt2CL7xRCI","tlshash":"b3c307d633907122d3df8266c0af4b45b33b59d82809403c763da9cf296191966fbf7a","first_seen":"2026-03-07T16:40:13.407196Z","last_seen":"2026-03-07T16:40:13.407196Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/locales/en/auth.json","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /locales/en/auth.json HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: saylessgo-theme=light; locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\netag: \"2423c1386a958fdc0705aa97893181a2\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.30540609359741\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 2250\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2250,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2423c1386a958fdc0705aa97893181a2","sha1":"77ed1cb314f55ad6e586713d7aa5b8ec7ca2be55","sha256":"38a83700efce576886591722a0e5b72c9e530bf82cd8d52b414e306d689a6632","sha512":"0874f0d2b49ea9df3e14daccd5949520ae0350ffdd33711b55beaa046f842f22efc56497430206b556c0c29682a2d507cde49a972ffe237b99817551b546f94d","ssdeep":"","tlshash":"54417b12c8100cd309d197a9b86126027e61842b0f56b12f6ff5958c2f7fd7f3ab266e","first_seen":"2026-02-24T21:48:50.69578Z","last_seen":"2026-04-01T15:49:01.776265Z","times_seen":40,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/locales/en/pwa.json","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /locales/en/pwa.json HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: saylessgo-theme=light; locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\netag: \"a455715bbe08e6d8fd6cfb0d423441e1\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.30489492416382\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 968\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":968,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a455715bbe08e6d8fd6cfb0d423441e1","sha1":"52522db1702a3cbcc0a0d151c73fa55b96f1ded7","sha256":"b8292f1f296ff00c9d966be6a55665af95b5f8b372be166aa921ce8f0f67c9b8","sha512":"e1c13a67bc109a096e6e55a505b91d3476c39a88ae8f8d529976aaa6e4b20250f544799bef7269fd394cdc3155f2275985d3f7fb3a1d7ea269edf870db584170","ssdeep":"","tlshash":"fc11e291c1214e737942079ee6db0911313120a30aa27019ffcb495d0f8f52f62a77af","first_seen":"2026-03-07T16:40:13.409267Z","last_seen":"2026-04-01T15:49:01.817354Z","times_seen":21,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/rolldown-runtime-GyhWBpbT.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/rolldown-runtime-GyhWBpbT.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/assets/index-CipD5a16.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"fc13456beccf256df2df361d59c5a578\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.31530785560608\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:43 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 752\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":752,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (752), with no line terminators","md5":"fc13456beccf256df2df361d59c5a578","sha1":"86d48b768d8e987f0369c07cebaaa3b57e278b00","sha256":"85a075ed7939a813c0f4ea5431522936ab98d34691638d112c1b45ca5c3807b5","sha512":"ce6d6d07934f7cdabea267fc2147cdc9b4c62d8a22773a2bfc9480c6de20fd78119c4880a43dea5890ded2beeb0db024f8427aa9051cd2df2d7aa114d4e7ccd5","ssdeep":"","tlshash":"4501bdbb2dc1e7b20382a28bdd681481e624383d853c70e4e7a489f694820c250e8e77","first_seen":"2026-01-17T20:33:36.718779Z","last_seen":"2026-04-01T15:49:01.751258Z","times_seen":93,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/locales/en/pricing.json","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:45.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /locales/en/pricing.json HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: saylessgo-theme=light; locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\netag: \"e95d4e75b68913a9f2eadaa04ebb283b\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.18101906776428\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:45 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 6227\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":6227,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e95d4e75b68913a9f2eadaa04ebb283b","sha1":"a6c723ac51e008605e9ca59f5193ced8711b7b97","sha256":"38751071022195392d014837109304fa7b0b72f3d71686e0a9efd9e08c79446f","sha512":"2fef716a66fd98a4c4b5073d15939226b50893775a305940c21922ee2b6ea5d53eb57ea4155dfe1ab46f939a1e3ac4d785697514f49f4d1148af8aa796515591","ssdeep":"96:ACFCE+5yttnCSuJLIAxjBLLq9CG7zpAPX8WouR6LNx+5GN7xJ6HleZAlPmtd/JlR:AJEzzJ9CKAUPC6zNGFHPmLhL","tlshash":"60d15134e2612ea719d13107786f4982b06951e75f74343a794c026c3f9e52f50fb3ad","first_seen":"2026-03-05T20:02:14.8876Z","last_seen":"2026-03-08T13:26:05.555494Z","times_seen":13,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/index-B9yKueMq.css","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/index-B9yKueMq.css HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/css; charset=utf-8\r\netag: \"75c8529455ada17fadcf909bbae20232\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.31768989562988\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:43 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 48582\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":48582,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (48581)","md5":"75c8529455ada17fadcf909bbae20232","sha1":"fdada8488e121105c230b738ec7ab05d59070ade","sha256":"912fdac2c5f0bf9831bff202887b93be6c1d836cecf01332b5d93888fc76d9f1","sha512":"da82d00c94558a9ce7d187427c343422a13ebccbcaa3ec0351ce63bcda971ebfa8d12730cdd53026ac83dcf0a308b82760792a26fb79e52eecdb8fd457df3748","ssdeep":"768:zTreLfAMkuV5oysD6ZnTFMW4qoRY3RSqB6ogWsy9FTl6DCB+AoJl:zTF4nseZ9+Y3RSNMRl6oS","tlshash":"ea23273650126d84c3f75c6220ce3f827d0d912773a8e026e81c6ea49ffae769798775","first_seen":"2026-03-05T20:02:14.902528Z","last_seen":"2026-04-01T15:49:01.795857Z","times_seen":41,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-map-Cu9Irk0u.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-map-Cu9Irk0u.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/assets/index-CipD5a16.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"0c9341702b135a4d91a35266b2ed53b6\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.46638202667236\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 1975757\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1975757,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37393)","md5":"393a19499c8beddaf7936f6becdc83e6","sha1":"0ac2001475c6b912082b001f9deaff8dae0bc7a3","sha256":"c7b0c54c2c1f9c696139bac6abc37e76eaaa2925d57019539be92aebef40e0e9","sha512":"d1aa5578babcec14a2f21063c68d687b443155caab97d144f0b74cbc9b0e7c610c937e8087478a78632bb8a007b3be40a41e46d7ec561bcc40816d4c78356ac6","ssdeep":"24576:rQEdmGRXYWgu52/Bdu0KQBi/MqjBRt4WX3TE:rQE5RoWgu52/Bdu0KQmhj/tH3TE","tlshash":"8a251ce833527862c3975266047b1143f33a6490684d851cf678e8efaee9d5d21faf38","first_seen":"2026-03-07T16:40:13.408038Z","last_seen":"2026-03-07T16:40:13.408038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-07","alert":"Hunting_JS_WebAssembly","trigger":"app.saylessgo.com/assets/vendor-map-Cu9Irk0u.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-state-s7hQoNlj.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-state-s7hQoNlj.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/assets/index-CipD5a16.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"d4b800b7111907aab33848336793343f\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.40985798835754\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 135420\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":135420,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46008)","md5":"d4b800b7111907aab33848336793343f","sha1":"3ec92bac6c1cdc588c51483f6c6bc6c2f8b6f366","sha256":"71d0d66ac8660336c0087b240f72cb966c7bb8306f7f729e6cc72271e795a5cd","sha512":"383764ace17d9524ed08e010573ddb91270cbe680ea2c1f9841f944b2ca396358f01f43e2dab346cccce602e08ef67a9fad55d2af2a44ce3e524f5aaa9fb8c60","ssdeep":"1536:ij/2KLOyQJBsftzjwQFwNfIzYjT98cj23nLNgAO2/iljqkM2o5BfXjVNxMYOnNC9:ir9tv7Q18c6gAOMAjC2CB/jKjnmR","tlshash":"08d3c6c9b2d6f03257a76071843f500af33b6985280d4028f159e9e67cba94de67bf78","first_seen":"2026-03-07T16:40:13.399638Z","last_seen":"2026-03-07T16:40:13.399638Z","times_seen":1,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-form--BtOVA5X.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-form--BtOVA5X.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"4a30f2b95019508790eb468d508af827\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.34420490264893\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 93779\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93779,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19956)","md5":"4a30f2b95019508790eb468d508af827","sha1":"675267df3bbb8aa573f8a85225c6007820eca8b0","sha256":"4150c06ad0e991d55f32a2a0360793f0c53db0d23a26d207470b593c3ed0620e","sha512":"8799c4da59c618a40e2625db8b360d28e65a1abdaa5d5aa97a347334b5546e670325a75447a9194a9f0f3f8851e63a62710cc5a5bbd15ce8466f01b3cce60499","ssdeep":"1536:xH9H97DdDX0MLn6592jSDidn5zp0zHDbhfckO8+AwtCD6HspXMb5gc1W99u+bn0o:xH9H9XdDX0MT65UuDIn5zp0uOlwtc8sn","tlshash":"eb93299333e6f5230ffe12a610a90205f7a61c382c3d5814f26886d6769ad9875f7f2d","first_seen":"2026-03-07T16:40:13.411745Z","last_seen":"2026-03-07T16:40:13.411745Z","times_seen":1,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/locales/en/activities.json","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /locales/en/activities.json HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: saylessgo-theme=light; locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\netag: \"1e8cc4953e98b7f0e5022e1724564ea9\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.29065585136414\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 2021\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2021,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1e8cc4953e98b7f0e5022e1724564ea9","sha1":"b48c8d180da59fa2422eccd52e075decc02d410c","sha256":"7dfac56e90dcab3416c47bac30f9945bee66c56162d82e6d1dc67b6ab516aa5b","sha512":"d30af9a50b88ff44c76185b34c1f14584ebabda4afe187ccc7800a79ee6c9f6e59457d4a6d174ced13bf542588230fad4270687a39f931fc8bedd9c018260204","ssdeep":"","tlshash":"3d41615ac22c7cb3019f4a43a87a9517251980db0f2036393f8c529d0f9ebaf11f6a1f","first_seen":"2026-02-08T22:50:00.523377Z","last_seen":"2026-03-11T23:29:52.090565Z","times_seen":48,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/locales/en/metrics.json","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /locales/en/metrics.json HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: saylessgo-theme=light; locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\netag: \"19586c7ba97cf75559682d8ccdd38dc8\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.26379704475403\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 323\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"19586c7ba97cf75559682d8ccdd38dc8","sha1":"1393ef71fcd7406a2753d45eea551197865a20cd","sha256":"46720ecb6fffbfbb3c84457c8135f244f721299327ffd6163bd0ba922ab86177","sha512":"a7ca1bd016d5e5dd759df6dccc3ddb038973246fb6b89c2b44be95f639afd786d4a74c9c2e9d940a7c6a9ed1f5ff0ead33ae2ac704c6734efe53c27b8da56cf6","ssdeep":"","tlshash":"afe02629c8600d334cae1088845d4c870839832b5d36ba5673a6194c8b4e43f41b8aae","first_seen":"2026-01-20T21:54:35.722497Z","last_seen":"2026-04-01T15:49:01.806226Z","times_seen":77,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-dnd-BCACaNQ6.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-dnd-BCACaNQ6.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"1e60edbc998d30b95de05ff80ec01f00\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.33384799957275\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 58164\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":58164,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42713)","md5":"1e60edbc998d30b95de05ff80ec01f00","sha1":"5a24205a3cf9bdb94e5fb26ae971b4aaa5a4b4f5","sha256":"c9ec50a024c04e7d468f13642b562fea4236e1b0c99d234892fd2cc165fb341d","sha512":"dceb13e2b5befb6a9b900f1b5488ef81a2782c8ea75a5f438055c31e44dd35273be6f93221d59d28444decc8e3b4dfdc24f6d56ca6c1ef4705e28a00d697c9e3","ssdeep":"1536:MPFlBKTFmAQP9KmEZHTvaGpMw02SgQa5albay89qJG:6lYT8A1mgb/QkcG","tlshash":"944309c23a917470d38fd03250ab194ab33d3aa1640d8474f37aeded356069492b6fbb","first_seen":"2026-03-07T16:40:13.413476Z","last_seen":"2026-03-07T16:40:13.413476Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-tiptap-Dd_uF_q-.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-tiptap-Dd_uF_q-.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/assets/index-CipD5a16.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"f1cb13b4be0ad70465618de1769989f7\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.35863399505615\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 417354\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":417354,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23780)","md5":"f1cb13b4be0ad70465618de1769989f7","sha1":"541d9a3bf7413c007634a25ce41d73aa73a25f87","sha256":"4d822df840d83be8d64d951124f4de5c6302ad4faa8046bdb718c73ffb93217a","sha512":"467937a5f1704bb29a3a96fd489e8ec4813fe932d22c9a8c651cb70b38e92b942f278c15b5b793c9bce5b31d59b2c198597983e8840240f65132f6386ad1055f","ssdeep":"6144:/4g1lbDMLOTLMZHweSGSxPLn6U8mWNEWhin:AgAOTLMtrS1j6U8Rc","tlshash":"309417e533a6717347de419a94aa0500f37a8998a80d002cf57cd8ef3ca5945a2fff79","first_seen":"2026-03-07T16:40:13.405044Z","last_seen":"2026-03-07T16:40:13.405044Z","times_seen":1,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-form--BtOVA5X.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-form--BtOVA5X.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/assets/index-CipD5a16.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"4a30f2b95019508790eb468d508af827\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.34420490264893\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 93779\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":93779,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19956)","md5":"4a30f2b95019508790eb468d508af827","sha1":"675267df3bbb8aa573f8a85225c6007820eca8b0","sha256":"4150c06ad0e991d55f32a2a0360793f0c53db0d23a26d207470b593c3ed0620e","sha512":"8799c4da59c618a40e2625db8b360d28e65a1abdaa5d5aa97a347334b5546e670325a75447a9194a9f0f3f8851e63a62710cc5a5bbd15ce8466f01b3cce60499","ssdeep":"1536:xH9H97DdDX0MLn6592jSDidn5zp0zHDbhfckO8+AwtCD6HspXMb5gc1W99u+bn0o:xH9H9XdDX0MT65UuDIn5zp0uOlwtc8sn","tlshash":"eb93299333e6f5230ffe12a610a90205f7a61c382c3d5814f26886d6769ad9875f7f2d","first_seen":"2026-03-07T16:40:13.411745Z","last_seen":"2026-03-07T16:40:13.411745Z","times_seen":1,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/rolldown-runtime-GyhWBpbT.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/rolldown-runtime-GyhWBpbT.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"fc13456beccf256df2df361d59c5a578\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.31530785560608\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 752\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":752,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (752), with no line terminators","md5":"fc13456beccf256df2df361d59c5a578","sha1":"86d48b768d8e987f0369c07cebaaa3b57e278b00","sha256":"85a075ed7939a813c0f4ea5431522936ab98d34691638d112c1b45ca5c3807b5","sha512":"ce6d6d07934f7cdabea267fc2147cdc9b4c62d8a22773a2bfc9480c6de20fd78119c4880a43dea5890ded2beeb0db024f8427aa9051cd2df2d7aa114d4e7ccd5","ssdeep":"","tlshash":"4501bdbb2dc1e7b20382a28bdd681481e624383d853c70e4e7a489f694820c250e8e77","first_seen":"2026-01-17T20:33:36.718779Z","last_seen":"2026-04-01T15:49:01.751258Z","times_seen":93,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/locales/en/common.json","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /locales/en/common.json HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: saylessgo-theme=light; locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\netag: \"8bb161dc21a1ffa52fa1fa2b7770073e\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.29434394836426\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:45 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 7316\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7316,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8bb161dc21a1ffa52fa1fa2b7770073e","sha1":"e2f83519f998e968c3e6224985df634738f256b2","sha256":"47170a77f26c48e6b88b293380b8962bae69657795c205a98f7a583c140c8a36","sha512":"acdaa8fe3ce1543a4e8e467df5ddaf775e3e03ee357c5e5484c5f1e7f30d64469cf9305f3516367d863725e5e9a5c4bc69b16b833f2a634df43fd0d56e4fcace","ssdeep":"96:KnwGqbpfyYpXPuIvbshwuwYaJGaC238QftwpO27Kzq1gVek9078c1Pblzd+JJwQ/:ewv9JBPpofvak038Qftw/UaxZJUe0/B","tlshash":"53e1412ec6410da706e5919abc6b1943283541eb0f0432297b88958c2fdfe6f60fb57e","first_seen":"2026-03-07T16:40:13.414427Z","last_seen":"2026-03-08T13:26:05.572739Z","times_seen":5,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":356,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/locales/en/layers.json","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /locales/en/layers.json HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: saylessgo-theme=light; locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\netag: \"4dcfa5a7b5e613f7955391eb73928b9e\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.29471516609192\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 1578\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1578,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4dcfa5a7b5e613f7955391eb73928b9e","sha1":"4bf280f34fa8246617744f20e88588a6febfd10d","sha256":"8af99fde9cc78fbf750d677cf28fd669241b991db37d7ef5a7d88e892c1cfc0a","sha512":"a850b0d70fdb7a0a8f15be2a6a320e9e2d4c4bf8cf88aa45af455a6d9a5f4994f21550a4de5a9f45d8302791db61525355ccb43c7a3a5a325cffc5eb16d845f8","ssdeep":"","tlshash":"0231893ed52a4c7300ae54462c690c0351a5529b1f243a5dbbdca24c8fcf93f51baa6f","first_seen":"2026-01-20T21:54:35.72327Z","last_seen":"2026-04-01T15:49:01.755993Z","times_seen":77,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/loader-locale.js?v=1","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /loader-locale.js?v=1 HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"f50d528d0e96b5feeb13e28565b09d52\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.30665493011475\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:43 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 6924\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6924,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f50d528d0e96b5feeb13e28565b09d52","sha1":"5c3fe49a4c20363f27dbc30169462a1cdbe4a3bc","sha256":"6dd1f43478d327fd61ce05eb25a2937d0288862a7ff8bd5927163029c9dfd6b4","sha512":"876883dfd3e00aaee352a87b23b23e3a72b2807a5d9d7c399a259f20656ed5b23259335c03e34e8f51b26e40926eb2175f6deadd57400e6bc5638fcc1abfbf13","ssdeep":"96:Rve5qiFgwb6LbHMWa173PVVnukbdeVdT6OnaRGzubhIKCHnXT4+aX4vAfHipk1q:jSZiE1TT/hQd+OnaRyubx8cgvA/qkg","tlshash":"38e12fb55bab04ef1102d043958da9463dea01bf2f66730b355e6d6e2fdc02e423dab1","first_seen":"2026-03-02T22:28:50.570995Z","last_seen":"2026-03-18T17:15:42.20921Z","times_seen":44,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-dnd-BCACaNQ6.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-dnd-BCACaNQ6.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/assets/index-CipD5a16.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"1e60edbc998d30b95de05ff80ec01f00\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.33384799957275\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:43 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 58164\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":58164,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42713)","md5":"1e60edbc998d30b95de05ff80ec01f00","sha1":"5a24205a3cf9bdb94e5fb26ae971b4aaa5a4b4f5","sha256":"c9ec50a024c04e7d468f13642b562fea4236e1b0c99d234892fd2cc165fb341d","sha512":"dceb13e2b5befb6a9b900f1b5488ef81a2782c8ea75a5f438055c31e44dd35273be6f93221d59d28444decc8e3b4dfdc24f6d56ca6c1ef4705e28a00d697c9e3","ssdeep":"1536:MPFlBKTFmAQP9KmEZHTvaGpMw02SgQa5albay89qJG:6lYT8A1mgb/QkcG","tlshash":"944309c23a917470d38fd03250ab194ab33d3aa1640d8474f37aeded356069492b6fbb","first_seen":"2026-03-07T16:40:13.413476Z","last_seen":"2026-03-07T16:40:13.413476Z","times_seen":1,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-mui-BAeaGed_.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:43.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-mui-BAeaGed_.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.saylessgo.com/assets/index-CipD5a16.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"154c6244f9b443726aed3b5c235952bb\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.32182598114014\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 07 Mar 2026 16:39:43 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 612552\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":612552,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60800)","md5":"154c6244f9b443726aed3b5c235952bb","sha1":"1119143f9f5659d9abd9024e8ab391deaa9baadd","sha256":"b606ad6ccb2bf4df25232da75e274e9d0aa6c981beb3f5e33030335d59263900","sha512":"8d60a030e07f68a2965b7f39a4f8c54d442c5e4572111217511dc19634ceb27913da7719918a057d8f69081d18432a13dd272251fc13e46dc0037fd7fadec9bc","ssdeep":"12288:ggDXPDcU3GKDGznvkpQe2H4+uonunjghicDisd1lhHUhksT7P05cYO:ggDXPgZJ4pB2TupDehUkCP","tlshash":"53d46dd5b290f0304fbbc296c4df440df73e6554ac0f8464f23689ac26b5a889667fb9","first_seen":"2026-03-07T16:40:13.404045Z","last_seen":"2026-03-07T16:40:13.404045Z","times_seen":1,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.saylessgo.com/assets/vendor-backend-BYgx9m8v.js","fqdn":"app.saylessgo.com","domain":"saylessgo.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.saylessgo.com/","date":"2026-03-07T16:39:44.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.saylessgo.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sat, 21 Feb 2026 23:16:48 GMT","end":"Mon, 23 Mar 2026 23:16:47 GMT"},"fingerprint":{"sha1":"13:A2:E0:41:2F:17:E8:7A:29:E2:9F:6E:2C:DA:16:27:E7:37:AA:89","sha256":"01:14:99:3A:CE:BB:60:74:B2:55:7F:18:B7:0C:53:88:A3:8D:BC:2D:66:9B:D2:79:F2:B8:A7:31:C4:DB:B9:68"}}},"request":{"raw":"GET /assets/vendor-backend-BYgx9m8v.js HTTP/1.1\r\nHost: app.saylessgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.saylessgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"74e56998957d7304221404b738937bbc\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 688a21f30019ae4ab0f6\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.41986989974976\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 16:39:44 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 71317\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71317,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"74e56998957d7304221404b738937bbc","sha1":"57765f0128e3c33aa080ed45bbeb2d8e9186eb59","sha256":"aa2ab28cf079ac0f2365538cc3a05c249d660944e39774ef1789b1413b61540a","sha512":"e22812e301019579128ac1fc67b9af49ada8b6b4488d892e8686f58749b7b30e985c6b4c9d29dd2d386f95b60020568cc8094cc5b211773f40e44f1012793263","ssdeep":"1536:eJJMJ6JGJhJIJ3JCJ8J/J8JBJ8JkJXJoxJ4JvJcJXJCJWJTJKJqJ5JbJbJKJpJ/m:MJMJ6JGJhJIJ3JCJ8J/J8JBJ8JkJXJo1","tlshash":"9863d9f06380b4f203d7ef51745552f0f23a68ada4ca1428b8e045ef9ae1d46a766b73","first_seen":"2026-03-07T16:40:13.398311Z","last_seen":"2026-03-07T16:40:13.398311Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"app.saylessgo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}