{"report_id":"8610e795-b785-4442-8241-4c82d60535d4","version":6,"status":"done","tags":[],"date":"2025-12-26T10:48:25Z","url":{"schema":"http","addr":"filecr.com/windows/kutools-for-excel","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":0,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"filecr.com/windows/kutools-for-excel/","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"title":"Kutools for Excel 26.10 Full Version Free Download - FileCR","dom":{"size":153621,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (59229)","md5":"778ba7ff0d02dbab6c490f75d2ff41d7","sha1":"4ff5a92ff9af366cc9fc50e119befd2a45131d00","sha256":"6a4327bc6f9b49d1b1822650b180806aae591d7325ddd439ea9b338023fbe141","sha512":"3eb332fb373b4f2a4aca3ddaecd50b9097d1935b7395abc63a1be0be3120e9cbd6fc190de3888ad15b3b0401c05107f1c32703e7cde15deec3c69e3f237bae10","ssdeep":"1536:tPmrgi3kxwUwos0Y9cV0gWv7Kb+HmG5pwU69bMnWtayezslUM2VUkCAYjFojPM8z:9mrV3kvYHPWopgokYgShoFOwGpvdn","tlshash":"aae36db1d7109d3f25234bd5d8897b48f16ea086e7824a9cebfc8a1893c5ff71611788","dom_hash":"domhash3227002d0125b124dfcc434718e49c36","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"filecr.com/windows/kutools-for-excel","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":0,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-30T10:48:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zintrack.com","ip":{"addr":"172.67.221.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-16","domain_rank":255260,"first_seen":"2023-09-17T15:11:21Z","last_seen":"2025-12-18T07:19:12.761368Z","alert_count":0,"request_count":2,"received_data":2838,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"filecr.com","ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-05-05","domain_rank":56427,"first_seen":"2015-05-31T04:28:39Z","last_seen":"2025-12-20T20:15:44.150132Z","alert_count":37,"request_count":37,"received_data":1464906,"sent_data":18446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"dash.zintrack.com","ip":{"addr":"172.67.221.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-16","domain_rank":3140261,"first_seen":"2024-07-02T22:58:40Z","last_seen":"2025-12-19T06:30:47.496905Z","alert_count":0,"request_count":1,"received_data":3416,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/620-74ff03de9b1b8437.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"40800782ec5af32213e9266fb163b6d1","sha1":"d59fc020f42395d0cfea6ca30a4bf257f47aae1b","sha256":"ac06b07bef81a173222ce096a61916afe8fb5fe45a56437a1bbd9533d03e5150","sha512":"1bf7cd08054311a65ac48633d08b1afe1f2d1743e03da3367a00878d96a3ab21cd74f4bedd028ca20db6d6ed22b18dd59bbb79ce3250028c11628e761b81be56","ssdeep":"384:6Qkulm+oatBVwqwhN3+VfQ0V5I2eAZmHK6RFTVE9KicC6PHyBKHedpJ:quX2hN3+VfQ0PKKEFTVE9KitWWpJ","tlshash":"6ea28484f6a5b01a07a36595045b144bf278ee3da48c58a8f311e4e128fadcad4bff74","size":22814,"data":"","first_seen":"2025-12-11T16:57:47.201162Z","last_seen":"2025-12-29T23:09:18.836538Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/325-d924ee7ecca49220.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ac024bc73ba572c8dce467c547c725c","sha1":"49577db9a84cf7078119705ab46af80111273e1f","sha256":"1d12ce1c1e8ac1c49bacda93a90355613b4b27cdcc917d419ada9de6fc0659c4","sha512":"b373709488e6a92d8e79111a64fb04d1db352573c3127bce0cb04c6f311444023992ff7dbd0669f91fda8e7b1916ddf39bc9502ca0314e3320a5784f50cea683","ssdeep":"1536:VcmvIlIV/wKl4UBQ5KSuolxUX8f0J14pj5JaCTbI18KqU9UIZBiR:VcmvlFcXI2mC3I18KSR","tlshash":"429319d6b230b57992eb525f925a8101b3f519887449842cb1f84cef64bda4813feff8","size":90165,"data":"","first_seen":"2025-12-13T06:10:39.160287Z","last_seen":"2026-05-30T17:54:20.795111Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/229-68220457263d81f2.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfb04b281186dd380b78fa74632f5344","sha1":"03913fa79029dabefc71295aae20ee30cd489149","sha256":"5ed213f712efea67f6263984e6bfd9875aa98bfe56e15950ea6dfa29f79bbb3e","sha512":"e1b11041bb62bf1477645d47748812d7a54534e656c64ae14fe39552859a5619308ceb142e30618af545404b23a0b866b50965da822a1096f1d18c3579d4c2fe","ssdeep":"768:RCO4+5ZGIz9xmaK89pRju5L/BXhqx2HFUq5+envBG:RGgGIBxY8pu55hqg8GvBG","tlshash":"bac2d93fe2d7fb3d479ef644d62a08042e171d2aca8561f45fe0a652a97c4ca0143b7b","size":28253,"data":"","first_seen":"2025-12-13T06:10:39.136407Z","last_seen":"2026-03-16T00:20:45.435533Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/124-94b9d5fe22581666.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"601e4feb22b860052caff7f67424b6e7","sha1":"0469fae535dba9660c03252547f852a4d69aaf49","sha256":"7cd394df53b96c19537e2585549cc8b3318a4363a7755c8457823a0e11a7e58f","sha512":"6519de7004024a1ea1a8ed0c6f8bb9d004bef82ff987ff9fb6f71172e8f257a0873a2396168fbce41eca3958bd3c97bcead3875437c4058dba59dc2f6cfcb6ec","ssdeep":"192:T1/QXDqOOUEmTDSVBxc7zj2TWURabEEtvTD2sQOX3wSznC:GzqOh9X2c7lntv32lOX3wsC","tlshash":"156201aec701abbd259d1f9f290f72ddb0ca350557e9484af9ea880d5808f41212afdd","size":15343,"data":"","first_seen":"2025-12-13T06:10:39.151541Z","last_seen":"2026-04-30T06:48:29.980059Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/webpack-21856b4bba4a7188.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f77400864f4da5cdbcb34c44d8b9949","sha1":"65714412df0e808d088e1a6e4d9776164bea717e","sha256":"03e9619965c97c3015639a23f61d7866f50fb1957b41dddd77472c23d81e7201","sha512":"6cb8ba2698ee9b93d5069761088cb9ad731686b6842b68e301a5913ef5b651f9ceba3f3eb49ae92b69674a7dd0371d213133dce98c3d79ee1e518f33566885ae","ssdeep":"","tlshash":"643143da32e2f8d82717a964482f809ab03a9973146dd5f1eb12c1b57c311584237f7a","size":1722,"data":"","first_seen":"2025-12-13T06:10:39.143016Z","last_seen":"2026-05-03T13:09:11.485325Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/main-8b99947cf8517f20.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed1e8bf7380350e3a8e952af999ec5ef","sha1":"1f639cf81a70906e28dd4f1f3af99dd3b6b45420","sha256":"aa48fbcf2604110de194a41cf16f21a27b137744a662d1934702f23521cf08c9","sha512":"84f51852927c585a9b01336b1258bdf90be6d49d6fee2bd4f43c637b4e8e866926825d660dea97fa902d292cf9fc202bb4f56acd5289cd2da090d97ef1c1e968","ssdeep":"1536:GCjb1Q792n6RJP2SU6qcPlOtYjNA1c4CMr8Mc2UK+2V1ACb:+Yn66JiNNA1nCdMVUK+2nb","tlshash":"a8d319b6b6d1f8a203c740e4843b1006f37a1cba545e6045f3aadcd7b9a499d90b3f79","size":131282,"data":"","first_seen":"2025-12-13T06:10:39.143824Z","last_seen":"2026-05-30T17:54:20.76757Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zintrack.com/js/plausible.js","fqdn":"zintrack.com","domain":"zintrack.com","tld":"com"},"ip":{"addr":"172.67.221.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fce354514318424fd93ceb724f574d0","sha1":"4555a156f92cf24c5e68b965597019655b893ac2","sha256":"7eec3429c76cb48e5fd457c5afb71b7cf34bc4298d53023bae8aea715443b4a9","sha512":"c71512329ee1145bf975e068db5b3ab3c17d16b3cd1b3c0632c1e6e695e4e3f4ba57f0346afc0a0de67d92b0e076099f53d052ab4629752fe37a656ee3d26740","ssdeep":"","tlshash":"8521a59b6812f675cc789a62aa3f731631377174b805a4126002c6523c24e9f837cece","size":1332,"data":"","first_seen":"2023-03-07T01:03:26Z","last_seen":"2026-05-30T17:54:20.786581Z","times_seen":1252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/pages/navigation/%5Bslug%5D-e4e54cce70266efb.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f8d975ccec03d494bc8badb2fef2570","sha1":"60903cf7d3bb4b505bc88de71997b058939667c6","sha256":"75ff38cbeca663541539b5e417de4f9360305d9ebc9aec167a3d31cf8a882fb2","sha512":"a879d22739c82b246d07115b69bdb11469432601172f3a9e0e433890f8a8ff34b6431104afbd46224122e0fe236f1134810d4ee4a25cfdf4d31f08281a788599","ssdeep":"48:fbgmxAeca2QT1l3H0EngbCuOnlqEanbrlOq0q1Drs+Dv6hWXgv6hWXVK+jvx7m8T:VAmabglonfps37BanqGq5e6","tlshash":"ae8146dab496baf8f5ae8c9c116f106d721b6a049b0c0cf0fb71ac505814dd86147fcd","size":4133,"data":"","first_seen":"2025-12-13T06:10:39.156339Z","last_seen":"2026-03-16T00:20:45.401829Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/zA8r2KCvveacglzXLYFrd/_buildManifest.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"72b36dcd8cf2e443cb51a5070a693df3","sha1":"6cb1951f3a4002c9138405b87d50c508395b68ac","sha256":"be187f9e50ef2b968fc7f82d79b1f6bf42d94e84268f90a0c08e91c2f661efa9","sha512":"5269efcf720f8ef07329eaf7e6bc47e1be2412e97e81ce0b4e1f5421dce433f3e6690a44501caa28e6ce515bdde341f66290f95e3863536a88919bbc648720fc","ssdeep":"48:uoc1b/d5OKW4F9nmvxXiqy/JnXkBVh7lxof5BuPlWtSUW4vmjf5xVx+WFd:pubXJmvxty/JklzoOPxVI6","tlshash":"d691ee4b1109f2565eb0cd96b86f1773dad0c633363906e0e3ed4e386590aba4b8d833","size":4234,"data":"","first_seen":"2025-12-13T06:10:39.15239Z","last_seen":"2025-12-29T23:09:18.838158Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/pages/_app-2c2b28f0702cbfcb.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bdf80b968fd72ea6d357e86846660c1","sha1":"076538647c3b881c20f2b15c404b7478698b4f3f","sha256":"dfe52db3c196aefab1ac75fc145aa536bca49b751f6caed99539f19b780c9ede","sha512":"93ec15bab0754adf272e2eddb499ec8eee75b05d1020867848439b6b1d9a530f647e5b0bbbf42a2589af8f973eb1c11f63bba71a2e30198bd77d798c432f7629","ssdeep":"6144:YD6ZTp046lWYU1Y48JvpHBiB5rFw4K6AJu6GfM:YmphYP6SGfM","tlshash":"ab446ca5b35479be42da81ce542b4500f33a3a5c0415802cb2bdcdea7899e8571fffb9","size":268121,"data":"","first_seen":"2025-12-13T06:10:39.149984Z","last_seen":"2026-02-22T15:31:43.806221Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/50-3f2553eb6515aea9.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1d124e21d7080b1c3b7512ec23258f3","sha1":"a545e4cc15a78faae54ae5370ad4093753193b75","sha256":"b29ab22ccf0cacef8579228923ababcabf47d0b9421b2d5b2245647c521f460f","sha512":"6d9d489256b43df81a0f666eae476694e78a7467a06c795e169202e5b2213ba9a555ac11d57f3325265ea6371fe3b95a88de03376ae696a39f10f2e2c48b9c16","ssdeep":"384:G+3H6QOiuKiZSkSgQPxMbIuMbGWfOi6QeponzNOodCJu4+pIi2mJ47lWtGQxp0A5:5W97SkSg6MbvMbLmozM+8oQWt50Abbnx","tlshash":"cfa21ac236b0f05b4f7d11da60184009b7967e6a283ac4c8f3b56c57b21ad85a0cbf79","size":22652,"data":"","first_seen":"2025-12-11T16:57:47.141625Z","last_seen":"2025-12-29T23:09:18.830834Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/297-3aadb0264d95ef93.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b761dccfbe72d5832788ba442d78b7b7","sha1":"c9eb9aaaa21344b551f8dce226f4218f24945b0c","sha256":"f93aed64ca62ee045bce3eb2369e092b4e42145b7d1363077c2e8a5470741e47","sha512":"bb8b5e13d93ce1172badf369a4c0229aa96a241c0ae5042a7a804a30e4e9bc525a6e649764155def9f1e41ec74b121dee1c281d03f9fafdcb061923ae1cf6624","ssdeep":"768:0A3CMpK8+LkUxJoFaOSyw4Qq7ggayCh3FvXRj/NN3DxY:0jMpKXLxroFrS/Jq7gsChjj/Lu","tlshash":"e4f23ca6f6a3b431536f516bd07f4119f33d26d9210a8024e23a5c8d345cea962e3f7e","size":37589,"data":"","first_seen":"2025-12-13T06:10:39.157146Z","last_seen":"2026-05-30T17:54:20.810762Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/windows/kutools-for-excel/","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b415ed6a5114145b078b70c3a92e49d7","sha1":"16f6e98f0a2417fa821450d83f092dbc8f9aea41","sha256":"ffa4813ea5be196fbfff89e55d7e98d6747d756961d20b1027a28aef57631fa0","sha512":"b13d44342abb6b343629adc87bf4d223795c62c04952de576bd495f8008b8bfe778b8dd3901ae58357a46f6fa4d19e9840e6a7dd275790d1646348c2629aea4b","ssdeep":"","tlshash":"20b09234a018b24c44383000132b3307b4320816508427023602c553b832e878720f99","size":117,"data":"","first_seen":"2023-03-07T13:23:40Z","last_seen":"2026-05-30T17:54:20.832421Z","times_seen":3903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/385-9a907f5ec0a3e6cc.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9ddfe6c87c9eaa900664251b25bf669","sha1":"6e269389c756090c30c6f5f8183d577ff37eeff8","sha256":"37870d9b230b52a1621d0209fafdf695cd154293ce210b1f31f82dd3ef90c1d7","sha512":"8d8f65f7fe16fa3babddfd34a3d3841e746552cd4e2d8a04048365d10b622cae8f69e77e2db46f220aeb4a22f69ce807e0bfcdbcdaca58929a7f97414883a44d","ssdeep":"192:eVjYCTTNeZ2NKh7xkaBwSmkqE3UrF05vXBp:eF3BKh7GE34FuZp","tlshash":"6502b54ae995aeace43b49cc81ef640cb23f6a44d5890c36f974bc0154276d8b613fce","size":8977,"data":"","first_seen":"2025-12-13T06:10:39.144655Z","last_seen":"2026-04-30T06:48:29.978933Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/framework-0cbe3b56a5f66701.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a302e873a0eed7958ba636dbd03b8849","sha1":"f8f89a5e2d4b2fd343f260b361d338522c6705a2","sha256":"ad26a017bd63ad4d934fe6dd2602078fb3e25e36c66b5511466acacd797fbad2","sha512":"6947cd1baf43f78557aa6e51fbf0e4c0a206fa5d0aa7f86aeefb24b6ace7f0ce5e76964981ed96c63e5a12a10b4496f3bdd965bf498fe0d826b6b5db680670e4","ssdeep":"1536:Kv1NH6ZMumbFHH4jeUn6SJk1SNoc7I6rRTQM:Kzb5e6Sa1SRBFEM","tlshash":"a9d309e83996f6516ab311a700ef2803737d1a1b280c4960e215fd9e75b842bb17bfdd","size":139981,"data":"","first_seen":"2025-01-19T20:35:24.822478Z","last_seen":"2026-05-30T17:54:20.80016Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash.zintrack.com/js/push.js?p=2\u0026v=1.0.2\u0026onload=1","fqdn":"dash.zintrack.com","domain":"zintrack.com","tld":"com"},"ip":{"addr":"172.67.221.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a7080f00f2f799464d881aea0a54beb","sha1":"953f65c79f45ce9847d736a28b9368e3b8d0ae3e","sha256":"4ec1bb598438634acad6a0e583ba2bc7f91bd4b0725323773d57eec0d789391b","sha512":"9edb8e5c7e36439bb02bf375e13640627f6a0453d1bf2817e5482b26b2197f318651a51297da563599aa6e25423b46a71d76b16cb2af449289ff145890949b40","ssdeep":"","tlshash":"a2317362ef88f12201eb2433ecdb607011330b461a0550b492e06f1d60eff4db6a39e5","size":1800,"data":"","first_seen":"2024-08-19T13:13:24.71053Z","last_seen":"2026-05-30T17:54:20.813601Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/zA8r2KCvveacglzXLYFrd/_ssgManifest.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f429f27509edb4a4eb85f444d927a782","sha1":"15381d938977554aedab169416f0bba21e19e666","sha256":"ccce158f7d05df382c284b9c2be5885339b60dce2b73bf8d60f863fd61e0ede6","sha512":"208f68cb74ea820d6092ebb5319bf53a5d3ecfa22354393aa9024a9160185fce9f962c9ffe350c0efb7b567c82880dd552875c6f0cce7238b66af81fca6f3afe","ssdeep":"","tlshash":"0bc04cf1453cbca4de37cd1d1e701f968f606612e52d288789e95555d0351514a01d60","size":163,"data":"","first_seen":"2025-09-03T04:15:13.740411Z","last_seen":"2026-03-16T00:20:45.419748Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/58-fa09ef9dd6660609.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eb4e9714e65fae03e1dddea1eacb4f7","sha1":"32bb4feb03458407d9f0fa5ce98a92e91a0b0818","sha256":"0f64ab05b47a65b8b0e28f4e57f326993764b32093db6420884544f63dd94c7a","sha512":"ff7e3a57952b851d3ed61591509de0bb367adc9a1796b2645929e17fe03c21d30e708b46193f5ff76af8648507568f4f56bc3850e6ec1fc869ca5eb327122030","ssdeep":"768:gdjS3ErjidIh+nKyf/l456dhnaqTJflM39Dhtt5ciNNdEPAshk:YFyftU8aEFlMtXt9Ndjh","tlshash":"40f22ae57ba2b07253af60b9806f0502f33d9a69644d0068f2649cdb29b540ec7fbf75","size":35417,"data":"","first_seen":"2025-12-13T06:10:39.164419Z","last_seen":"2025-12-29T23:09:18.840554Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/pages/%5BcategorySlug%5D/%5BpostSlug%5D-226a587f6dbe2352.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"25b2e5cb277f9343f79c79487d3f57c0","sha1":"561dfaf2c143104caf79c0a6e4edf494d696d060","sha256":"25a176d4e42f05d323ccd430637aa787bda912d58889c06fec09a9c6c732e7db","sha512":"66b59a41d3f4234cc18a6abb45a017cf35bd5f11f3c96d0fd37bc79192ca68261a414b7341c5e9967aa9b6efe29ba4c788ed4bc8b5720e8538c0e11f0bd717b2","ssdeep":"768:vHACtRrXvVD0IgizjZiKSDIzDWeKJFgiTF//RZPa0SVW:vgCrrf/jYxDuDqFPPa0d","tlshash":"a813a8dae399feecb47a18c5807f800c761f2e4987794860f8b96855251ce847227fde","size":43769,"data":"","first_seen":"2025-12-13T06:10:39.153889Z","last_seen":"2025-12-29T23:09:18.853857Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zintrack.com/api/event","fqdn":"zintrack.com","domain":"zintrack.com","tld":"com"},"ip":{"addr":"172.67.221.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zintrack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 23:22:14 GMT","end":"Sun, 22 Mar 2026 00:18:41 GMT"},"fingerprint":{"sha1":"DF:17:69:2D:11:FB:BD:8C:B6:D6:6E:7C:6E:15:32:AE:01:B2:0A:1A","sha256":"1B:6B:4D:28:32:A3:D4:7B:AA:D0:61:AB:8F:C7:4A:B3:9C:20:DD:24:F0:5E:AC:41:ED:EC:9C:A5:67:D4:A7:9A"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: zintrack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://filecr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":103,"data":"{\"n\":\"pageview\",\"u\":\"https://filecr.com/windows/kutools-for-excel/\",\"d\":\"filecr.com\",\"r\":null,\"w\":1280}"}},"response":{"raw":"HTTP/3 202 Accepted\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 10:48:04 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GIS-M-vPrKtkO2EALOAh\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r8kaDKNpITM%2BM4nDfwrMep93s8dLnnGvrPkgYFxWFCOzN5KqUg6Aficc5XB%2F5WJUGeLnthJhzfIFDMwLgOfWhhCYPWbACckE6ExBMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b4000f0c9b38deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-30T18:00:36.801289Z","times_seen":419425,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/css/e55ef4f217c16d9f.css","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/css/e55ef4f217c16d9f.css HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Tue, 09 Dec 2025 08:03:06 GMT\r\netag: W/\"13b67-19b0222af9a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80743,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d1b1f64206050d97ea6afb92675d0d36","sha1":"ddf9b3542ccbd36f46282b7153c2aa4802df0db4","sha256":"51fe2a338772dec8a9b5ee2d564c0811afbdb65f8474f33fd4a1b6f891ef7cc1","sha512":"f8ab5977f6301453e30148978b26325f6683072608b396b4ee82a5631f2b3a7f00268df24449389527f7dbfbe18f3b4d4f1b96745e584de11a00172a2be9a18d","ssdeep":"768:LB1bhGP/OV9w+q1PK4bP/FmqIutoXuPPKXTlUdvzdVvdWWdg5dId6+6dKdUo5dlJ:TOejuL6Zdp6728QI2Qzll","tlshash":"0183e892a114613c63238775e7c8894d723df583d9225febf24e541982c73dd23baa8e","first_seen":"2025-12-11T16:57:47.157738Z","last_seen":"2026-05-30T17:54:20.795701Z","times_seen":115,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/50-3f2553eb6515aea9.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/50-3f2553eb6515aea9.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Tue, 09 Dec 2025 08:03:06 GMT\r\netag: W/\"587c-19b0222af9f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22652,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (22652), with no line terminators","md5":"f1d124e21d7080b1c3b7512ec23258f3","sha1":"a545e4cc15a78faae54ae5370ad4093753193b75","sha256":"b29ab22ccf0cacef8579228923ababcabf47d0b9421b2d5b2245647c521f460f","sha512":"6d9d489256b43df81a0f666eae476694e78a7467a06c795e169202e5b2213ba9a555ac11d57f3325265ea6371fe3b95a88de03376ae696a39f10f2e2c48b9c16","ssdeep":"384:G+3H6QOiuKiZSkSgQPxMbIuMbGWfOi6QeponzNOodCJu4+pIi2mJ47lWtGQxp0A5:5W97SkSg6MbvMbLmozM+8oQWt50Abbnx","tlshash":"cfa21ac236b0f05b4f7d11da60184009b7967e6a283ac4c8f3b56c57b21ad85a0cbf79","first_seen":"2025-12-11T16:57:47.141625Z","last_seen":"2025-12-29T23:09:18.830834Z","times_seen":19,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/zA8r2KCvveacglzXLYFrd/_ssgManifest.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/zA8r2KCvveacglzXLYFrd/_ssgManifest.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 163\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:27:00 GMT\r\netag: W/\"a3-19b1174b6a0\"\r\nvary: Accept-Encoding\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f429f27509edb4a4eb85f444d927a782","sha1":"15381d938977554aedab169416f0bba21e19e666","sha256":"ccce158f7d05df382c284b9c2be5885339b60dce2b73bf8d60f863fd61e0ede6","sha512":"208f68cb74ea820d6092ebb5319bf53a5d3ecfa22354393aa9024a9160185fce9f962c9ffe350c0efb7b567c82880dd552875c6f0cce7238b66af81fca6f3afe","ssdeep":"","tlshash":"0bc04cf1453cbca4de37cd1d1e701f968f606612e52d288789e95555d0351514a01d60","first_seen":"2025-09-03T04:15:13.740411Z","last_seen":"2026-03-16T00:20:45.419748Z","times_seen":169,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2023%2F03%2Fbatch-excel-to-pdf-converter-pro%2Fbatch-excel-to-pdf-converter-pro-logo.png\u0026w=64\u0026q=75","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2023%2F03%2Fbatch-excel-to-pdf-converter-pro%2Fbatch-excel-to-pdf-converter-pro-logo.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 764\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 0im0yZ1dmGYsfrVDYyd+KsUXuLmri5zWN5Urv--krCA=\r\ncontent-disposition: inline; filename=\"batch-excel-to-pdf-converter-pro-logo.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nserver: FileCR-Proxy/1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e949bb95d3f76bddb4155e640005df3d","sha1":"a770850502693560f09c9c9ad981ab62d6d141d2","sha256":"d229b4c99d5d98662c7eb54363277e2ac517b8b9ab8b9cd637952bbfffe4ac20","sha512":"212623b64f3a8ef6d8b0d1cf0f6245ce5a3d710347db069304b49b06edc3ac8f17555e8339ad133a0d04938c146d3eb54ab7de65f4c1f6f330a05f27f562cebb","ssdeep":"","tlshash":"7801b5451d2b80bb6f0b52e8808ff423ecbbc541de72f628a2039d0345917ad0a3a8d8","first_seen":"2025-12-26T10:48:29.133579Z","last_seen":"2025-12-26T10:48:29.133579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2024%2F01%2Frons-data-edit-pro%2F663a1d1a768f1-rons-data-edit-pro-Icon.webp\u0026w=64\u0026q=75","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2024%2F01%2Frons-data-edit-pro%2F663a1d1a768f1-rons-data-edit-pro-Icon.webp\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1862\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: HT4UgaFVr+ddKKOBUV7CF7fN8ZLSg-x3-oP3WfFbwt4=\r\ncontent-disposition: inline; filename=\"663a1d1a768f1-rons-data-edit-pro-Icon.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nserver: FileCR-Proxy/1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea7122b1fc2d1afb1da1a145e721c66b","sha1":"6034421f66c43291afbf5963399654fcbd4501e5","sha256":"1d3e1481a155afe75d28a381515ec217b7cdf192d283fc77fe83f759f15bc2de","sha512":"a3adec5e5e944cd2e7728ff55cf97377203077fa4f244b06e70b6439f5570fbf935fac79e2f33d893b09571bde2d82c070751f184775b73757a53df5330f2f52","ssdeep":"","tlshash":"b131294eb6bb4b118ecf18fc6c142be8050240453c136292849e6d6fed6b2414ed34fe","first_seen":"2025-12-26T10:48:29.135974Z","last_seen":"2025-12-26T10:48:29.135974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/pages/navigation/%5Bslug%5D-e4e54cce70266efb.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:04.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/pages/navigation/%5Bslug%5D-e4e54cce70266efb.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:26:33 GMT\r\netag: W/\"1025-19b11744ee3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4133,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4133), with no line terminators","md5":"8f8d975ccec03d494bc8badb2fef2570","sha1":"60903cf7d3bb4b505bc88de71997b058939667c6","sha256":"75ff38cbeca663541539b5e417de4f9360305d9ebc9aec167a3d31cf8a882fb2","sha512":"a879d22739c82b246d07115b69bdb11469432601172f3a9e0e433890f8a8ff34b6431104afbd46224122e0fe236f1134810d4ee4a25cfdf4d31f08281a788599","ssdeep":"48:fbgmxAeca2QT1l3H0EngbCuOnlqEanbrlOq0q1Drs+Dv6hWXgv6hWXVK+jvx7m8T:VAmabglonfps37BanqGq5e6","tlshash":"ae8146dab496baf8f5ae8c9c116f106d721b6a049b0c0cf0fb71ac505814dd86147fcd","first_seen":"2025-12-13T06:10:39.156339Z","last_seen":"2026-03-16T00:20:45.401829Z","times_seen":70,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/webpack-21856b4bba4a7188.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/webpack-21856b4bba4a7188.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:26:33 GMT\r\netag: W/\"6ba-19b11744ee3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1722,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1722), with no line terminators","md5":"5f77400864f4da5cdbcb34c44d8b9949","sha1":"65714412df0e808d088e1a6e4d9776164bea717e","sha256":"03e9619965c97c3015639a23f61d7866f50fb1957b41dddd77472c23d81e7201","sha512":"6cb8ba2698ee9b93d5069761088cb9ad731686b6842b68e301a5913ef5b651f9ceba3f3eb49ae92b69674a7dd0371d213133dce98c3d79ee1e518f33566885ae","ssdeep":"","tlshash":"643143da32e2f8d82717a964482f809ab03a9973146dd5f1eb12c1b57c311584237f7a","first_seen":"2025-12-13T06:10:39.143016Z","last_seen":"2026-05-03T13:09:11.485325Z","times_seen":94,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/297-3aadb0264d95ef93.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/297-3aadb0264d95ef93.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:26:33 GMT\r\netag: W/\"92d5-19b11744ee4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37589,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (36458)","md5":"b761dccfbe72d5832788ba442d78b7b7","sha1":"c9eb9aaaa21344b551f8dce226f4218f24945b0c","sha256":"f93aed64ca62ee045bce3eb2369e092b4e42145b7d1363077c2e8a5470741e47","sha512":"bb8b5e13d93ce1172badf369a4c0229aa96a241c0ae5042a7a804a30e4e9bc525a6e649764155def9f1e41ec74b121dee1c281d03f9fafdcb061923ae1cf6624","ssdeep":"768:0A3CMpK8+LkUxJoFaOSyw4Qq7ggayCh3FvXRj/NN3DxY:0jMpKXLxroFrS/Jq7gsChjj/Lu","tlshash":"e4f23ca6f6a3b431536f516bd07f4119f33d26d9210a8024e23a5c8d345cea962e3f7e","first_seen":"2025-12-13T06:10:39.157146Z","last_seen":"2026-05-30T17:54:20.810762Z","times_seen":113,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/58-fa09ef9dd6660609.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/58-fa09ef9dd6660609.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:26:33 GMT\r\netag: W/\"8a59-19b11744ee4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35417,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (35417), with no line terminators","md5":"2eb4e9714e65fae03e1dddea1eacb4f7","sha1":"32bb4feb03458407d9f0fa5ce98a92e91a0b0818","sha256":"0f64ab05b47a65b8b0e28f4e57f326993764b32093db6420884544f63dd94c7a","sha512":"ff7e3a57952b851d3ed61591509de0bb367adc9a1796b2645929e17fe03c21d30e708b46193f5ff76af8648507568f4f56bc3850e6ec1fc869ca5eb327122030","ssdeep":"768:gdjS3ErjidIh+nKyf/l456dhnaqTJflM39Dhtt5ciNNdEPAshk:YFyftU8aEFlMtXt9Ndjh","tlshash":"40f22ae57ba2b07253af60b9806f0502f33d9a69644d0068f2649cdb29b540ec7fbf75","first_seen":"2025-12-13T06:10:39.164419Z","last_seen":"2025-12-29T23:09:18.840554Z","times_seen":17,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/325-d924ee7ecca49220.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/325-d924ee7ecca49220.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:26:33 GMT\r\netag: W/\"16035-19b11744ee4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90165,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6ac024bc73ba572c8dce467c547c725c","sha1":"49577db9a84cf7078119705ab46af80111273e1f","sha256":"1d12ce1c1e8ac1c49bacda93a90355613b4b27cdcc917d419ada9de6fc0659c4","sha512":"b373709488e6a92d8e79111a64fb04d1db352573c3127bce0cb04c6f311444023992ff7dbd0669f91fda8e7b1916ddf39bc9502ca0314e3320a5784f50cea683","ssdeep":"1536:VcmvIlIV/wKl4UBQ5KSuolxUX8f0J14pj5JaCTbI18KqU9UIZBiR:VcmvlFcXI2mC3I18KSR","tlshash":"429319d6b230b57992eb525f925a8101b3f519887449842cb1f84cef64bda4813feff8","first_seen":"2025-12-13T06:10:39.160287Z","last_seen":"2026-05-30T17:54:20.795111Z","times_seen":103,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2023%2F03%2Fkutools-for-excel%2FKutools-for-Excel-free-download.jpg\u0026w=1080\u0026q=75","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2023%2F03%2Fkutools-for-excel%2FKutools-for-Excel-free-download.jpg\u0026w=1080\u0026q=75 HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26142\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: MaVSVgXIH0VokZuLaRBgEnw6E80EfmWC7lWW2njhlyE=\r\ncontent-disposition: inline; filename=\"Kutools-for-Excel-free-download.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nserver: FileCR-Proxy/1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26142,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 836x484, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d6869c5836e0760e5c2547767959f765","sha1":"966e0a9b1df94dbb76b99b031c82f9ccf6499e25","sha256":"31a5525605c81f4568919b8b691060127c3a13cd047e6582ee5596da78e19721","sha512":"407cc2d0b2d030fa9ab568ff12d2370d2638eab04a2dd56e2c5105e0f5971f7941e37328fb996b8056d2c54973eb568172fab380967af8ae773e10016e4a8043","ssdeep":"384:qFgVaVXaGAzyC3iVWl5AmoDYk/tfGjR5DafUak+sFDM2ube8Xb31D61Fs0+19Is3:5mabJyVHxluHaM3FD1ub5RD61y716y","tlshash":"e4c2e1d1e028c5dc3a758ec2c509a99fa76de65b78ce630545088abc4373caeb1d13ec","first_seen":"2025-12-26T10:48:29.142573Z","last_seen":"2025-12-26T10:48:29.142573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/css/2dbe46fe14a4b4c2.css","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/css/2dbe46fe14a4b4c2.css HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Tue, 09 Dec 2025 08:03:06 GMT\r\netag: W/\"45a4-19b0222af9f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17828,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (17828), with no line terminators","md5":"d5ccdc78708e5be720853223d35da96a","sha1":"1d037e765f877687929faf1286b87a8f1b64bd60","sha256":"1f98db4c0e35583b906888eb195e82c4c9f062fa721e46ba48a602bcb2f018f2","sha512":"d8fce93c39702e3ee9f724780ba540abbeeb3e0ad4521f9d0c72ef04dc556c4d0dfeead0b9e9a7182133d72f269b60d2d4545b59f8998c3ba98b12dae9ecbc1d","ssdeep":"192:3mUJbiKnekJlXZzZ+Sme+jeYdYJNFLiRzKlPb+fpwN97b:2UbekJdZzZ+W+SrftUp29b","tlshash":"56825310e6101c372c136e6647ccde6cc91ac0d349eb1a9e7fcf184dc696bea17a9746","first_seen":"2025-12-11T16:57:47.114472Z","last_seen":"2026-05-30T17:54:20.784233Z","times_seen":105,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/css/2a3dfd2ff48fce35.css","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/css/2a3dfd2ff48fce35.css HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Tue, 09 Dec 2025 08:03:06 GMT\r\netag: W/\"4e32-19b0222af9f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20018,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20018), with no line terminators","md5":"3a7df6b7d9b22166a70fa754d0685a5f","sha1":"0a29d7ceafb33c161cb30f7ffd2cabb943543e65","sha256":"08ab618039e0e2ffab3e67b20bd2869c11ecccaa73c912832b8bc31c609ffe2b","sha512":"a6ac5e7daf130b38988473f8efc909c319d4180e4442b6cccb638fb930960248f6b8e30962989028228550f1febabe0cf755a7d4e47646c7813fce2e268ad208","ssdeep":"384:gGKOi3kemwUw3oRMTyTpJTyThUKrWtYzMRpRq:gIi3kxwUw3oRMTyTPTyTh0Ygnq","tlshash":"0a92f8f07f20716d781b4a3bfe152ac97039d8d99e061b6c9ead162881c21f71263adc","first_seen":"2025-08-04T07:44:45.527592Z","last_seen":"2026-05-30T17:54:20.791541Z","times_seen":209,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/main-8b99947cf8517f20.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/main-8b99947cf8517f20.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:26:33 GMT\r\netag: W/\"200d2-19b11744ee0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131282,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ed1e8bf7380350e3a8e952af999ec5ef","sha1":"1f639cf81a70906e28dd4f1f3af99dd3b6b45420","sha256":"aa48fbcf2604110de194a41cf16f21a27b137744a662d1934702f23521cf08c9","sha512":"84f51852927c585a9b01336b1258bdf90be6d49d6fee2bd4f43c637b4e8e866926825d660dea97fa902d292cf9fc202bb4f56acd5289cd2da090d97ef1c1e968","ssdeep":"1536:GCjb1Q792n6RJP2SU6qcPlOtYjNA1c4CMr8Mc2UK+2V1ACb:+Yn66JiNNA1nCdMVUK+2nb","tlshash":"a8d319b6b6d1f8a203c740e4843b1006f37a1cba545e6045f3aadcd7b9a499d90b3f79","first_seen":"2025-12-13T06:10:39.143824Z","last_seen":"2026-05-30T17:54:20.76757Z","times_seen":113,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/620-74ff03de9b1b8437.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/620-74ff03de9b1b8437.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Tue, 09 Dec 2025 08:03:06 GMT\r\netag: W/\"591e-19b0222af9f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22814,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (22814), with no line terminators","md5":"40800782ec5af32213e9266fb163b6d1","sha1":"d59fc020f42395d0cfea6ca30a4bf257f47aae1b","sha256":"ac06b07bef81a173222ce096a61916afe8fb5fe45a56437a1bbd9533d03e5150","sha512":"1bf7cd08054311a65ac48633d08b1afe1f2d1743e03da3367a00878d96a3ab21cd74f4bedd028ca20db6d6ed22b18dd59bbb79ce3250028c11628e761b81be56","ssdeep":"384:6Qkulm+oatBVwqwhN3+VfQ0V5I2eAZmHK6RFTVE9KicC6PHyBKHedpJ:quX2hN3+VfQ0PKKEFTVE9KitWWpJ","tlshash":"6ea28484f6a5b01a07a36595045b144bf278ee3da48c58a8f311e4e128fadcad4bff74","first_seen":"2025-12-11T16:57:47.201162Z","last_seen":"2025-12-29T23:09:18.836538Z","times_seen":19,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/pages/navigation/%5Bslug%5D-e4e54cce70266efb.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:04.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/pages/navigation/%5Bslug%5D-e4e54cce70266efb.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:26:33 GMT\r\netag: W/\"1025-19b11744ee3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4133,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4133), with no line terminators","md5":"8f8d975ccec03d494bc8badb2fef2570","sha1":"60903cf7d3bb4b505bc88de71997b058939667c6","sha256":"75ff38cbeca663541539b5e417de4f9360305d9ebc9aec167a3d31cf8a882fb2","sha512":"a879d22739c82b246d07115b69bdb11469432601172f3a9e0e433890f8a8ff34b6431104afbd46224122e0fe236f1134810d4ee4a25cfdf4d31f08281a788599","ssdeep":"48:fbgmxAeca2QT1l3H0EngbCuOnlqEanbrlOq0q1Drs+Dv6hWXgv6hWXVK+jvx7m8T:VAmabglonfps37BanqGq5e6","tlshash":"ae8146dab496baf8f5ae8c9c116f106d721b6a049b0c0cf0fb71ac505814dd86147fcd","first_seen":"2025-12-13T06:10:39.156339Z","last_seen":"2026-03-16T00:20:45.401829Z","times_seen":70,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/windows/kutools-for-excel/","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-26T10:48:02.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /windows/kutools-for-excel/ HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-nextjs-cache: HIT\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000, stale-while-revalidate\r\netag: \"9jg7ybuvmu1l8n\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":74190,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41938)","md5":"22162241c9a492b3aa6535e326691f64","sha1":"67326b00727cb53db8cb2371139bc6fc855b4af6","sha256":"45f179260e0162d145b43e5e1e6b45d186b9cccb04892f52568c55df003da9f7","sha512":"58ffa726e1e1d747a56cecab943ed930a7067690fcd62c7e7da37093e30b3b57380a930f0176f6ef4133013717a18a1c92f7ce079f41d53a125e9f370b8a94e4","ssdeep":"1536:vl7cV0uk2K+R5QsUnCYYX+XsQFojbh2iYyQBkYgShoFOwGuGvdZ:9yBdokYgShoFOwGpvdZ","tlshash":"cb733be7e2508d7a132307c194aa3749f2efb05be2c14e88e5fccb1463d9e76c512699","first_seen":"2025-12-26T10:48:29.148581Z","last_seen":"2025-12-26T10:48:29.148581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/framework-0cbe3b56a5f66701.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/framework-0cbe3b56a5f66701.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Tue, 09 Dec 2025 08:03:06 GMT\r\netag: W/\"222cd-19b0222af9f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139981,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a302e873a0eed7958ba636dbd03b8849","sha1":"f8f89a5e2d4b2fd343f260b361d338522c6705a2","sha256":"ad26a017bd63ad4d934fe6dd2602078fb3e25e36c66b5511466acacd797fbad2","sha512":"6947cd1baf43f78557aa6e51fbf0e4c0a206fa5d0aa7f86aeefb24b6ace7f0ce5e76964981ed96c63e5a12a10b4496f3bdd965bf498fe0d826b6b5db680670e4","ssdeep":"1536:Kv1NH6ZMumbFHH4jeUn6SJk1SNoc7I6rRTQM:Kzb5e6Sa1SRBFEM","tlshash":"a9d309e83996f6516ab311a700ef2803737d1a1b280c4960e215fd9e75b842bb17bfdd","first_seen":"2025-01-19T20:35:24.822478Z","last_seen":"2026-05-30T17:54:20.80016Z","times_seen":152,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/css/d127eb0a3b6ee924.css","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/css/d127eb0a3b6ee924.css HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Tue, 09 Dec 2025 08:03:06 GMT\r\netag: W/\"368d-19b0222af9d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13965,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (13965), with no line terminators","md5":"8f0d8a56bdfdd6874e074eaaab86091c","sha1":"25ac76176c0aaef0193d180ac5332c2dfa0c9315","sha256":"169ec04675936bfd77f378ec0b8b775c32dea63cd1bf421026d45dd47bdd7638","sha512":"b79a11059f6d606f381fd1457284628d7bbadd876185e6656df93fde59a5109698a6110e77b3ee8cdbdeb22c49fc575b3bc59c01f3ee30e840ae7f4c31e7b200","ssdeep":"192:bcmj4kOU2uM3zoNXV28oOgPaIVda6d4ROutQEc6swPn2zXj19S3MVAKOhO/vYI3O:Bj47fzoto8x1UBcPnCXj19LVFYz","tlshash":"625286127e25e63eb9379a27d9c2a65d2328d6019617cbfdeb00a514d1c73f72722b0c","first_seen":"2025-08-04T07:44:45.512204Z","last_seen":"2026-04-30T06:48:29.960846Z","times_seen":174,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/124-94b9d5fe22581666.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/124-94b9d5fe22581666.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:26:33 GMT\r\netag: W/\"3bef-19b11744ee4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15343,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15343), with no line terminators","md5":"601e4feb22b860052caff7f67424b6e7","sha1":"0469fae535dba9660c03252547f852a4d69aaf49","sha256":"7cd394df53b96c19537e2585549cc8b3318a4363a7755c8457823a0e11a7e58f","sha512":"6519de7004024a1ea1a8ed0c6f8bb9d004bef82ff987ff9fb6f71172e8f257a0873a2396168fbce41eca3958bd3c97bcead3875437c4058dba59dc2f6cfcb6ec","ssdeep":"192:T1/QXDqOOUEmTDSVBxc7zj2TWURabEEtvTD2sQOX3wSznC:GzqOh9X2c7lntv32lOX3wsC","tlshash":"156201aec701abbd259d1f9f290f72ddb0ca350557e9484af9ea880d5808f41212afdd","first_seen":"2025-12-13T06:10:39.151541Z","last_seen":"2026-04-30T06:48:29.980059Z","times_seen":90,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/css/2a3dfd2ff48fce35.css","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/css/2a3dfd2ff48fce35.css HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Tue, 09 Dec 2025 08:03:06 GMT\r\netag: W/\"4e32-19b0222af9f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20018,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20018), with no line terminators","md5":"3a7df6b7d9b22166a70fa754d0685a5f","sha1":"0a29d7ceafb33c161cb30f7ffd2cabb943543e65","sha256":"08ab618039e0e2ffab3e67b20bd2869c11ecccaa73c912832b8bc31c609ffe2b","sha512":"a6ac5e7daf130b38988473f8efc909c319d4180e4442b6cccb638fb930960248f6b8e30962989028228550f1febabe0cf755a7d4e47646c7813fce2e268ad208","ssdeep":"384:gGKOi3kemwUw3oRMTyTpJTyThUKrWtYzMRpRq:gIi3kxwUw3oRMTyTPTyTh0Ygnq","tlshash":"0a92f8f07f20716d781b4a3bfe152ac97039d8d99e061b6c9ead162881c21f71263adc","first_seen":"2025-08-04T07:44:45.527592Z","last_seen":"2026-05-30T17:54:20.791541Z","times_seen":209,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/385-9a907f5ec0a3e6cc.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/385-9a907f5ec0a3e6cc.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:26:33 GMT\r\netag: W/\"2311-19b11744ee4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8977,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8977), with no line terminators","md5":"d9ddfe6c87c9eaa900664251b25bf669","sha1":"6e269389c756090c30c6f5f8183d577ff37eeff8","sha256":"37870d9b230b52a1621d0209fafdf695cd154293ce210b1f31f82dd3ef90c1d7","sha512":"8d8f65f7fe16fa3babddfd34a3d3841e746552cd4e2d8a04048365d10b622cae8f69e77e2db46f220aeb4a22f69ce807e0bfcdbcdaca58929a7f97414883a44d","ssdeep":"192:eVjYCTTNeZ2NKh7xkaBwSmkqE3UrF05vXBp:eF3BKh7GE34FuZp","tlshash":"6502b54ae995aeace43b49cc81ef640cb23f6a44d5890c36f974bc0154276d8b613fce","first_seen":"2025-12-13T06:10:39.144655Z","last_seen":"2026-04-30T06:48:29.978933Z","times_seen":90,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/229-68220457263d81f2.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/229-68220457263d81f2.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:26:33 GMT\r\netag: W/\"6e5d-19b11744ee4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28253,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (28253), with no line terminators","md5":"cfb04b281186dd380b78fa74632f5344","sha1":"03913fa79029dabefc71295aae20ee30cd489149","sha256":"5ed213f712efea67f6263984e6bfd9875aa98bfe56e15950ea6dfa29f79bbb3e","sha512":"e1b11041bb62bf1477645d47748812d7a54534e656c64ae14fe39552859a5619308ceb142e30618af545404b23a0b866b50965da822a1096f1d18c3579d4c2fe","ssdeep":"768:RCO4+5ZGIz9xmaK89pRju5L/BXhqx2HFUq5+envBG:RGgGIBxY8pu55hqg8GvBG","tlshash":"bac2d93fe2d7fb3d479ef644d62a08042e171d2aca8561f45fe0a652a97c4ca0143b7b","first_seen":"2025-12-13T06:10:39.136407Z","last_seen":"2026-03-16T00:20:45.435533Z","times_seen":70,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2024%2F10%2Fperfectxl-risk-finder%2F6708ced25ce69-perfectxl-risk-finder-Icon.webp\u0026w=64\u0026q=75","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2024%2F10%2Fperfectxl-risk-finder%2F6708ced25ce69-perfectxl-risk-finder-Icon.webp\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1470\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: dPHvh0bDyQ9cRbrp0gTCgglErI2QFgSMz+aM0B1jh-4=\r\ncontent-disposition: inline; filename=\"6708ced25ce69-perfectxl-risk-finder-Icon.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nserver: FileCR-Proxy/1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1470,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86b5dba26dfbf79a9289604993411678","sha1":"2e6868e8d259e09f22e2a55a8b92f052c387d9fb","sha256":"74f1ef8746c3c90f5c45bae9d204c2820944ac8d9016048ccfe68cd01d6387fe","sha512":"9757320f57f17ce4d278b89f6a0f7c3d0d927a101a4dc4b5fea9830e37a8fba253f0bc58b3191233827557ec7642e3b6328a937c17a77fd69ea088aa55a69d13","ssdeep":"","tlshash":"c6311cd7c0dc1ead8665a33c8c4c84fc4dc5c4d51044ca1ff298562692c40d85d75686","first_seen":"2025-12-26T10:48:29.156407Z","last_seen":"2025-12-26T10:48:29.156407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2025%2F02%2Faquaforest-autobahn-dx%2F67a5a85e71ef6-aquaforest-autobahn-dx-Icon.webp\u0026w=64\u0026q=75","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2025%2F02%2Faquaforest-autobahn-dx%2F67a5a85e71ef6-aquaforest-autobahn-dx-Icon.webp\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1970\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: TA2VxpnRzToI9dinumkzPajXuxoR-8LzIu+bfS92I0Y=\r\ncontent-disposition: inline; filename=\"67a5a85e71ef6-aquaforest-autobahn-dx-Icon.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nserver: FileCR-Proxy/1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1970,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c2cc10452654b009e3b1a30e73a18b1","sha1":"e49c6ba1cd61a52a4619a12b165a7b5a3837308a","sha256":"4c0d95c699d1cd3a08f5d8a7ba69333da8d7bb1a11ffc2f322ef9b7d2f762346","sha512":"1e426e70d69d0edb2e382297e17c9d319118bd4bcca1533c15726b7714c9948ceff0d5cdc4f03167e3fede23b8bb979a228c356a0dc41d45b3e6946fbfb1562d","ssdeep":"","tlshash":"88412cf51a324ba0d377bb6f8d68534d24228fd1d47a8fbef2f9a2e884401769c12545","first_seen":"2025-12-26T10:48:29.159242Z","last_seen":"2025-12-26T10:48:29.159242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2023%2F03%2Ftalkhelper-pdf-converter-ocr%2FTalkHelper-PDF-Converter-OCR-Icon.png\u0026w=64\u0026q=75","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2023%2F03%2Ftalkhelper-pdf-converter-ocr%2FTalkHelper-PDF-Converter-OCR-Icon.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1372\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: -KJ5ZGLynr4lHHR11qIZYW7qVu7CrQgD+I2SpcEp1eE=\r\ncontent-disposition: inline; filename=\"TalkHelper-PDF-Converter-OCR-Icon.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nserver: FileCR-Proxy/1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1372,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c9c784f922b3bb2a206cc65783a34c8","sha1":"5c05298a3ec756c4e4d2f47580f6d090dd62f0f5","sha256":"fca2796462f29ebe251c7475d6a219616eea56eec2ad0803f88d92a5c129d5e1","sha512":"66e323668865bd28db934bbfe4f13d55462c3fa4e1069b27b49438bcb7851ec530edad355cc9634bd710d00a8917c81a96799269bd040ab059791feee40b8fc5","ssdeep":"","tlshash":"bf2108ebc182fc21de10b35c8c4014920277bffb959fbe01b6f886f00d4993a201b000","first_seen":"2025-12-26T10:48:29.161964Z","last_seen":"2025-12-26T10:48:29.161964Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zintrack.com/js/plausible.js","fqdn":"zintrack.com","domain":"zintrack.com","tld":"com"},"ip":{"addr":"172.67.221.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zintrack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 23:22:14 GMT","end":"Sun, 22 Mar 2026 00:18:41 GMT"},"fingerprint":{"sha1":"DF:17:69:2D:11:FB:BD:8C:B6:D6:6E:7C:6E:15:32:AE:01:B2:0A:1A","sha256":"1B:6B:4D:28:32:A3:D4:7B:AA:D0:61:AB:8F:C7:4A:B3:9C:20:DD:24:F0:5E:AC:41:ED:EC:9C:A5:67:D4:A7:9A"}}},"request":{"raw":"GET /js/plausible.js HTTP/1.1\r\nHost: zintrack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=73kgODADN47jOzlx%2Flik4vWy3qpzeilX9sZ4quRjPDVJrqcszWpvS5JM1n08PGLt0TrKTNW%2FIq4z1zMcSRBcnvLen%2FB5OOuqMDTTRQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, private, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b4000ef89978deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1332), with no line terminators","md5":"5fce354514318424fd93ceb724f574d0","sha1":"4555a156f92cf24c5e68b965597019655b893ac2","sha256":"7eec3429c76cb48e5fd457c5afb71b7cf34bc4298d53023bae8aea715443b4a9","sha512":"c71512329ee1145bf975e068db5b3ab3c17d16b3cd1b3c0632c1e6e695e4e3f4ba57f0346afc0a0de67d92b0e076099f53d052ab4629752fe37a656ee3d26740","ssdeep":"","tlshash":"8521a59b6812f675cc789a62aa3f731631377174b805a4126002c6523c24e9f837cece","first_seen":"2023-03-07T01:03:26Z","last_seen":"2026-05-30T17:54:20.786581Z","times_seen":1252,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/css/2dbe46fe14a4b4c2.css","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/css/2dbe46fe14a4b4c2.css HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Tue, 09 Dec 2025 08:03:06 GMT\r\netag: W/\"45a4-19b0222af9f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17828,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (17828), with no line terminators","md5":"d5ccdc78708e5be720853223d35da96a","sha1":"1d037e765f877687929faf1286b87a8f1b64bd60","sha256":"1f98db4c0e35583b906888eb195e82c4c9f062fa721e46ba48a602bcb2f018f2","sha512":"d8fce93c39702e3ee9f724780ba540abbeeb3e0ad4521f9d0c72ef04dc556c4d0dfeead0b9e9a7182133d72f269b60d2d4545b59f8998c3ba98b12dae9ecbc1d","ssdeep":"192:3mUJbiKnekJlXZzZ+Sme+jeYdYJNFLiRzKlPb+fpwN97b:2UbekJdZzZ+W+SrftUp29b","tlshash":"56825310e6101c372c136e6647ccde6cc91ac0d349eb1a9e7fcf184dc696bea17a9746","first_seen":"2025-12-11T16:57:47.114472Z","last_seen":"2026-05-30T17:54:20.784233Z","times_seen":105,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/css/d127eb0a3b6ee924.css","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/css/d127eb0a3b6ee924.css HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Tue, 09 Dec 2025 08:03:06 GMT\r\netag: W/\"368d-19b0222af9d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13965,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (13965), with no line terminators","md5":"8f0d8a56bdfdd6874e074eaaab86091c","sha1":"25ac76176c0aaef0193d180ac5332c2dfa0c9315","sha256":"169ec04675936bfd77f378ec0b8b775c32dea63cd1bf421026d45dd47bdd7638","sha512":"b79a11059f6d606f381fd1457284628d7bbadd876185e6656df93fde59a5109698a6110e77b3ee8cdbdeb22c49fc575b3bc59c01f3ee30e840ae7f4c31e7b200","ssdeep":"192:bcmj4kOU2uM3zoNXV28oOgPaIVda6d4ROutQEc6swPn2zXj19S3MVAKOhO/vYI3O:Bj47fzoto8x1UBcPnCXj19LVFYz","tlshash":"625286127e25e63eb9379a27d9c2a65d2328d6019617cbfdeb00a514d1c73f72722b0c","first_seen":"2025-08-04T07:44:45.512204Z","last_seen":"2026-04-30T06:48:29.960846Z","times_seen":174,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/favicon.png","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 523\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\nlast-modified: Tue, 09 Dec 2025 07:55:36 GMT\r\netag: W/\"20b-19b021bd2dc\"\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: MISS\r\ncache-control: public, max-age=0, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":523,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit colormap, non-interlaced","md5":"02429627618ce7034bf50ee1cfd8f412","sha1":"8e59d2aa06700ebbf8af9c7dd62a7907fd204788","sha256":"315a4de01e3460f9db386e90b8207396dbc637540e00a2e6ba6cf84dba3609ea","sha512":"d5d27a2300e5a760944dcb83b1b2e6e09f466ed49a0aadb68c65d50eb7ce0e80aa3e6ba471cf62b5cf5ccf72e6da7bf9fa78041f7fe6da5846a984a04ebe5599","ssdeep":"","tlshash":"36f0f1d31108246f51d0c4b78317d2106d0f3d99403b3a458465aa52c260040b2f4bb1","first_seen":"2023-05-10T22:27:47Z","last_seen":"2026-05-30T17:54:20.783678Z","times_seen":222,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/windows/kutools-for-excel","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-26T10:48:02.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /windows/kutools-for-excel HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 Permanent Redirect\r\ndate: Fri, 26 Dec 2025 10:48:02 GMT\r\nlocation: /windows/kutools-for-excel/\r\nrefresh: 0;url=/windows/kutools-for-excel/\r\nserver: FileCR-Proxy/1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":null,"data":{"size":74190,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41938)","md5":"22162241c9a492b3aa6535e326691f64","sha1":"67326b00727cb53db8cb2371139bc6fc855b4af6","sha256":"45f179260e0162d145b43e5e1e6b45d186b9cccb04892f52568c55df003da9f7","sha512":"58ffa726e1e1d747a56cecab943ed930a7067690fcd62c7e7da37093e30b3b57380a930f0176f6ef4133013717a18a1c92f7ce079f41d53a125e9f370b8a94e4","ssdeep":"1536:vl7cV0uk2K+R5QsUnCYYX+XsQFojbh2iYyQBkYgShoFOwGuGvdZ:9yBdokYgShoFOwGpvdZ","tlshash":"cb733be7e2508d7a132307c194aa3749f2efb05be2c14e88e5fccb1463d9e76c512699","first_seen":"2025-12-26T10:48:29.148581Z","last_seen":"2025-12-26T10:48:29.148581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":138,"dns":12,"connect":18,"send":0,"wait":143,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/pages/_app-2c2b28f0702cbfcb.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-2c2b28f0702cbfcb.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:26:33 GMT\r\netag: W/\"41759-19b11744ee0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":268121,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9bdf80b968fd72ea6d357e86846660c1","sha1":"076538647c3b881c20f2b15c404b7478698b4f3f","sha256":"dfe52db3c196aefab1ac75fc145aa536bca49b751f6caed99539f19b780c9ede","sha512":"93ec15bab0754adf272e2eddb499ec8eee75b05d1020867848439b6b1d9a530f647e5b0bbbf42a2589af8f973eb1c11f63bba71a2e30198bd77d798c432f7629","ssdeep":"6144:YD6ZTp046lWYU1Y48JvpHBiB5rFw4K6AJu6GfM:YmphYP6SGfM","tlshash":"ab446ca5b35479be42da81ce542b4500f33a3a5c0415802cb2bdcdea7899e8571fffb9","first_seen":"2025-12-13T06:10:39.149984Z","last_seen":"2026-02-22T15:31:43.806221Z","times_seen":54,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/chunks/pages/%5BcategorySlug%5D/%5BpostSlug%5D-226a587f6dbe2352.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/chunks/pages/%5BcategorySlug%5D/%5BpostSlug%5D-226a587f6dbe2352.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:26:33 GMT\r\netag: W/\"aaf9-19b11744ee4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43769,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (43769), with no line terminators","md5":"25b2e5cb277f9343f79c79487d3f57c0","sha1":"561dfaf2c143104caf79c0a6e4edf494d696d060","sha256":"25a176d4e42f05d323ccd430637aa787bda912d58889c06fec09a9c6c732e7db","sha512":"66b59a41d3f4234cc18a6abb45a017cf35bd5f11f3c96d0fd37bc79192ca68261a414b7341c5e9967aa9b6efe29ba4c788ed4bc8b5720e8538c0e11f0bd717b2","ssdeep":"768:vHACtRrXvVD0IgizjZiKSDIzDWeKJFgiTF//RZPa0SVW:vgCrrf/jYxDuDqFPPa0d","tlshash":"a813a8dae399feecb47a18c5807f800c761f2e4987794860f8b96855251ce847227fde","first_seen":"2025-12-13T06:10:39.153889Z","last_seen":"2025-12-29T23:09:18.853857Z","times_seen":17,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/data/zA8r2KCvveacglzXLYFrd/navigation/ms-windows.json?slug=ms-windows","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:04.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/data/zA8r2KCvveacglzXLYFrd/navigation/ms-windows.json?slug=ms-windows HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\npurpose: prefetch\r\nx-middleware-prefetch: 1\r\nx-nextjs-data: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:04 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-nextjs-matched-path: /navigation/[slug]\r\nx-nextjs-cache: HIT\r\ncache-control: s-maxage=31536000, stale-while-revalidate\r\netag: \"6lnd4lngr73xos\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":183628,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e42911c7a91dfc478a0e3039bd7e65e","sha1":"aa64f66e4d8b237f49fd0b666b1e34bbf98d6e62","sha256":"1fcca5ef8ed6c1321cba7e6eb46c0f2f9ee594451db639a8414c3e5e653c76ed","sha512":"1a160d7717f5d7cf72a090e344f5989956685768f49bf54c9d7330c6a5dc9a898997f37dd6348652054d55c189f402f655fddcd820b13684cbd4fdeff6179afd","ssdeep":"1536:libi5GV723Fibi5GV723QhCLWZAZ8/1d9wN8Bnck0B1+grWYMxqdzY7Sim3QPjT6:YGGHGG1D3e3QPD6djKJ3nMQX4iI","tlshash":"b004fbec9b78a1fc16cb8f9eaf356894739e247f35b18964896dce7401c3e58d50b880","first_seen":"2025-10-01T15:41:32.224459Z","last_seen":"2026-04-30T06:48:29.978391Z","times_seen":170,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/data/zA8r2KCvveacglzXLYFrd/windows/perfectxl-risk-finder.json?categorySlug=windows\u0026postSlug=perfectxl-risk-finder","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:04.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/data/zA8r2KCvveacglzXLYFrd/windows/perfectxl-risk-finder.json?categorySlug=windows\u0026postSlug=perfectxl-risk-finder HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\npurpose: prefetch\r\nx-middleware-prefetch: 1\r\nx-nextjs-data: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:04 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-nextjs-matched-path: /[categorySlug]/[postSlug]\r\nx-nextjs-cache: STALE\r\netag: \"15akceoiyzidw2\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18002,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4fff655cab857426476cb909f6f8ae68","sha1":"93f44663903e5b91d7cb617039d0869ad180c3fe","sha256":"05e700552e3ea2d0132e3ecaa2c936872a03ac17acc66d6306e4f541afbb155a","sha512":"f37750e470a0b33eda530e4c238d69bb3ee2786817135c334abfdcae07a3563e3de8c12df0c98a9a9bab5c881ecfb1afab7068b7c0bc3398959229a3f05ec176","ssdeep":"384:QbqDzED3ljCSUA7RQupVcfPvYng5oPmYjY8azrLfRNyD:sGzEDfUA7Su1E0D","tlshash":"6f82fa0fa7346e7683170681248b3944f2fe16cf34e42d8665d9ce16d0e9eb6423fac9","first_seen":"2025-12-26T10:48:29.168704Z","last_seen":"2025-12-26T10:48:29.168704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/css/a0a3ec97f3692076.css","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:04.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/css/a0a3ec97f3692076.css HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:04 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Tue, 09 Dec 2025 08:03:06 GMT\r\netag: W/\"3f7f-19b0222af9e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16255,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (16255), with no line terminators","md5":"88b91da6c836f1ca79718f89bec5b5bb","sha1":"3b1a4c53aaa6dff0f0e237966cf6823a55b30723","sha256":"726ca3204cde6325f7566d6dc818c86033bc64b19741143cee8f5d448f16f35b","sha512":"f9cd99e79d78e0f1e68f872b41f5058559d3b16238b9d540bfce431d0f895f5b868c6b9016275f971914a1dbf60a0c772b691ceb6cbe431df07e1ebdec2b9915","ssdeep":"192:T3kem9eU9erYx6D+oPPxSVTg8TyTfPJTpgWTyTvJUKrtMYoYLBPdBxUxMf0baQ9h:T3kemwUw2oRMTyTpJTyThUKrWtYk2q","tlshash":"0572e7f07b20b12e785b1d3fff052ec67035d4d9af4617a89b6d162c81c21a32652aed","first_seen":"2025-09-23T14:41:20.038112Z","last_seen":"2026-05-30T17:54:20.798485Z","times_seen":204,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/static/zA8r2KCvveacglzXLYFrd/_buildManifest.js","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/static/zA8r2KCvveacglzXLYFrd/_buildManifest.js HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nlast-modified: Fri, 12 Dec 2025 07:26:33 GMT\r\netag: W/\"108a-19b11744edf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: FileCR-Proxy/1.0\r\nx-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable, public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4234,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4234), with no line terminators","md5":"72b36dcd8cf2e443cb51a5070a693df3","sha1":"6cb1951f3a4002c9138405b87d50c508395b68ac","sha256":"be187f9e50ef2b968fc7f82d79b1f6bf42d94e84268f90a0c08e91c2f661efa9","sha512":"5269efcf720f8ef07329eaf7e6bc47e1be2412e97e81ce0b4e1f5421dce433f3e6690a44501caa28e6ce515bdde341f66290f95e3863536a88919bbc648720fc","ssdeep":"48:uoc1b/d5OKW4F9nmvxXiqy/JnXkBVh7lxof5BuPlWtSUW4vmjf5xVx+WFd:pubXJmvxty/JklzoOPxVI6","tlshash":"d691ee4b1109f2565eb0cd96b86f1773dad0c633363906e0e3ed4e386590aba4b8d833","first_seen":"2025-12-13T06:10:39.15239Z","last_seen":"2025-12-29T23:09:18.838158Z","times_seen":18,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash.zintrack.com/js/push.js?p=2\u0026v=1.0.2\u0026onload=1","fqdn":"dash.zintrack.com","domain":"zintrack.com","tld":"com"},"ip":{"addr":"172.67.221.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zintrack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 23:22:14 GMT","end":"Sun, 22 Mar 2026 00:18:41 GMT"},"fingerprint":{"sha1":"DF:17:69:2D:11:FB:BD:8C:B6:D6:6E:7C:6E:15:32:AE:01:B2:0A:1A","sha256":"1B:6B:4D:28:32:A3:D4:7B:AA:D0:61:AB:8F:C7:4A:B3:9C:20:DD:24:F0:5E:AC:41:ED:EC:9C:A5:67:D4:A7:9A"}}},"request":{"raw":"GET /js/push.js?p=2\u0026v=1.0.2\u0026onload=1 HTTP/1.1\r\nHost: dash.zintrack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1005\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=7200, public\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IklhcVp3WFBMbHM4R2VLNHlyeW5udnc9PSIsInZhbHVlIjoiMVBvK2J6Vjh3ckhYSFlFcnhabEhPWE5xK3hLUUhId3lVY1ZKTFRwVzMxRGo2bVdPSDQ0dEQxbXppUWF3RVZmN3YrOEVkMmg1QlZneEN3WjM4VjBHMHMrNVRkY3hBVWMvV3V0OFFURHZ3VGJkSHFHNSt6WSt6cXV0eDA3L1l0RUYiLCJtYWMiOiJjMzNkNmMxMTViMTYzMDg0NmI1MzQ2NjI5NGYyMDU5MzYxNjEwMDg2ZGRlZTVkYjQ5NWNiZDIwZTVmYTNhYjliIiwidGFnIjoiIn0%3D; expires=Fri, 26-Dec-2025 12:48:03 GMT; Max-Age=7200; path=/; secure; samesite=lax\nzintrack_dashboard_session=eyJpdiI6InNPVFJraENZbXhVM2ZDemFIaW1GQ3c9PSIsInZhbHVlIjoiT0plcWQ4VjVEOWFXZ3RUdDlEOHZQSHNtY2lSS0I5Qi93azhqdnIyQ28wWExITkQrYWV2RGIrK1ZMNVN0UUtpSkJqSGd1cWhXZlpzR0dCc1g1ZnIvbUpwV0JBbGswTHAxeGI0VFZBalpUYzlLQTZSWFdXVmdVbWxOZHBkcWtCelUiLCJtYWMiOiI1NmFhOWYzMDAwNWM1ZGRjOWI5YWU4YzhiYmZkOGEyZjgxNWQwN2NkY2RjZmZkYjM1NmIxMGQxNTVmMGVlNjkxIiwidGFnIjoiIn0%3D; expires=Fri, 26-Dec-2025 12:48:03 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncontent-encoding: br\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vtNfib3tL1HodyXZo1jbDhNqPUd3AuC4Ry5LCjFBC3yTiJadV7N%2FsKjhTygSgZjeFHJW5Yn8XBpFbUJmo6IyVrqk3yWY%2FNjVVJsJlmRHOUR\"}]}\r\ncf-ray: 9b4000ec1ad14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1800,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1799)","md5":"8a7080f00f2f799464d881aea0a54beb","sha1":"953f65c79f45ce9847d736a28b9368e3b8d0ae3e","sha256":"4ec1bb598438634acad6a0e583ba2bc7f91bd4b0725323773d57eec0d789391b","sha512":"9edb8e5c7e36439bb02bf375e13640627f6a0453d1bf2817e5482b26b2197f318651a51297da563599aa6e25423b46a71d76b16cb2af449289ff145890949b40","ssdeep":"","tlshash":"a2317362ef88f12201eb2433ecdb607011330b461a0550b492e06f1d60eff4db6a39e5","first_seen":"2024-08-19T13:13:24.71053Z","last_seen":"2026-05-30T17:54:20.813601Z","times_seen":218,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":22,"dns":35,"connect":1,"send":0,"wait":100,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filecr.com/_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2023%2F09%2Fasap-utilities%2F65014ebaca4ae-asap-utilities-Icon.webp\u0026w=64\u0026q=75","fqdn":"filecr.com","domain":"filecr.com","tld":"com"},"ip":{"addr":"45.148.244.19","port":443,"asn":200019,"as":"Alexhost Srl","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://filecr.com/windows/kutools-for-excel/","date":"2025-12-26T10:48:03.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filecr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Tue, 28 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"30:10:5B:8B:D4:A6:16:DF:89:58:64:DC:93:4B:8E:A7:24:7E:19:3B","sha256":"68:E2:F8:F0:C2:5B:77:26:27:B1:2C:75:17:B7:A6:29:D6:F7:F4:E7:2B:50:B6:AA:1B:A8:9D:C0:49:B8:A3:51"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmedia.imgcdn.org%2Frepo%2F2023%2F09%2Fasap-utilities%2F65014ebaca4ae-asap-utilities-Icon.webp\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: filecr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://filecr.com/windows/kutools-for-excel/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 10:48:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1426\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 9R45JYWUAVvCSung-7yUVo8gA5ok48RL7k8JiwTgC1w=\r\ncontent-disposition: inline; filename=\"65014ebaca4ae-asap-utilities-Icon.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\nserver: FileCR-Proxy/1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"747eb536f15eb22e3afc9e7dd4a50a2c","sha1":"85b70237c31bc1da50bdabb5d5d2dcb4dadb5426","sha256":"f51e39258594015bc24ae9e0ffbc94568f20039a24e3c44bee4f098b04e00b5c","sha512":"7527891b19792847cc60735215b68bf483fcd98d215a447ef1a75e4da7b70926b8c93704a1d2f0137f914fb2c5d9f6c8e5b0c558ab120fc2783fafa7a76a7297","ssdeep":"","tlshash":"db21e92e2c331284f4cd8a1aecf32b1171269d50f4f8ee57a19053a0efe4a33e00ca11","first_seen":"2025-12-26T10:48:29.175573Z","last_seen":"2025-12-26T10:48:29.175573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"filecr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}