{"report_id":"897f1d42-6c8a-41d0-a09b-3ea218cc0843","version":0,"status":"done","tags":[],"date":"2026-08-06T00:49:18Z","url":{"schema":"http","addr":"smc67a5d8e.cityabovetheclouds.us.cc/","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"172.67.156.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/#/","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"title":"smc67a5d8e.cityabovetheclouds.us.cc/#/","dom":{"size":123072,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40058)","md5":"dcd6d425c460b2f34f60cd5f5f0fa929","sha1":"3fa70dd42bf0176234c326ceea9dee6e2a71e013","sha256":"4f950bd4f07f268a1c4a86b8ef4af81e39e7a9b5ddd9a42ad6bd5ecae7ad63d1","sha512":"25a081a6e53e7e0908e1f150a4486d9c53c977768857640f6dadf88f3805c3b6d8b46232672032a99677fa17066edf173e925100fad0a3e0bae9dc12dc015d31","ssdeep":"3072:8sp0NVr7fnaM/51fuPlIHGvXNWPf1f4yH9sUnbauJ9BxEuMa8Qc1tblK1mklU5QC:grr7fnFU","tlshash":"32c34392b688245dea3bcd86d199b3bcb96f79a1c3468cd7e7113739cf812c3221161d","dom_hash":"domhash607868ffe3517bc738efe7b20b96de10","first_seen":"2026-08-06T00:49:25.885335Z","last_seen":"2026-08-16T07:43:55.978838Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"smc67a5d8e.cityabovetheclouds.us.cc/","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"172.67.156.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-10T00:49:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-04-07","domain_rank":0,"first_seen":"2026-08-06T00:34:15.42113Z","last_seen":"2026-08-06T00:34:15.42113Z","alert_count":75,"request_count":25,"received_data":2003896,"sent_data":13841,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"plugin-code.salesmartly.com","ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":530835,"first_seen":"2024-12-12T08:03:04.74606Z","last_seen":"2026-07-30T05:59:03.675229Z","alert_count":0,"request_count":11,"received_data":1340520,"sent_data":6017,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"widget.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":0,"first_seen":"2026-05-14T12:23:01.692825Z","last_seen":"2026-08-03T06:57:09.463608Z","alert_count":0,"request_count":2,"received_data":6515,"sent_data":1417,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"msg.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":360322,"first_seen":"2022-11-29T17:40:54Z","last_seen":"2026-08-03T11:58:35.9131Z","alert_count":0,"request_count":7,"received_data":5298,"sent_data":6463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"srz.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":378797,"first_seen":"2024-02-20T03:50:45Z","last_seen":"2026-08-04T22:09:58.245676Z","alert_count":0,"request_count":4,"received_data":2779,"sent_data":3123,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"client.salesmartly.com","ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":491526,"first_seen":"2024-06-25T09:52:15Z","last_seen":"2026-08-04T22:09:58.312079Z","alert_count":0,"request_count":2,"received_data":84968,"sent_data":1103,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":387428,"first_seen":"2022-11-29T17:40:50Z","last_seen":"2026-07-30T05:59:03.905019Z","alert_count":0,"request_count":1,"received_data":852,"sent_data":847,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mix-ads.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":5285889,"first_seen":"2026-05-14T23:47:06.027768Z","last_seen":"2026-08-01T22:39:23.703135Z","alert_count":0,"request_count":1,"received_data":1049,"sent_data":667,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"156.252.61.234.16clouds.com","ip":{"addr":"156.252.61.234","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"domain_registered":"2013-03-22","domain_rank":0,"first_seen":"2026-08-06T00:34:15.423594Z","last_seen":"2026-08-06T00:34:15.423594Z","alert_count":0,"request_count":1,"received_data":448,"sent_data":630,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.174.83.126","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-07-31T19:32:07.137918Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":570,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/js/index.22a1a162.js","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"661674827129667d132b2e5d94f276b2","sha1":"18bf5d4d99926bdf420eaf77699402853305f729","sha256":"24f3af76e25e1d0e00c1f7ae9bfe55d91f43484c0fb6f92eb158f42a2d594093","sha512":"a278127443f295ac8184e17b24c1a3b6e77b93877ac4679e874bf6e565f4198827fdc543acb54cf6ed5e9eb0b8b6631f34d6e469c5d0a9818d6641882d8d23a0","ssdeep":"3072:HTp8OSM24+PQFupBXDJaHMDkpI7Ah2YjSup6ZyDdpM0XiqpFMlZlGDmPWQ2XfBGm:wH4OQFuzJDke7Ah3D62vU0ETjquGGj6D","tlshash":"fa743c86b6c4147f4b864781e06f3fedf5bb0c728241e497d9d1bf391aca98a9105a3c","size":358533,"data":"","first_seen":"2026-08-06T00:34:21.288592Z","last_seen":"2026-08-16T07:43:56.003852Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"414612d0f626762dd4064a9d11f821c3","sha1":"1dfc6b06d8e4ca15ca986617d42e38eae947e94d","sha256":"39d68e743efe9cd9348cdd0e395ba726e43fba69c9288ca14554821d55969fe2","sha512":"87034b7526f8ef8dca2da1c61920e35f138214e42516e48057c3b39ee646a012685a924eb7155a60e8baef89aafc2ae9569f0d6e3635a3d812dfbeb95584d8fa","ssdeep":"384:5rlwqjdJMrxZ37t3XcCCcEvX5GG62NzbtJ5bOSKOjPComEWaj:tlwB329IBAbUbOjPComEWaj","tlshash":"d182b3c974eab58103927078153fa04bf1b37836556dc629a269d1defcbc08ee227d38","size":19114,"data":"","first_seen":"2026-05-14T12:23:11.031581Z","last_seen":"2026-08-18T14:23:27.502891Z","times_seen":354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/js/pages-account-bills~pages-account-deposit~pages-account-index~pages-account-message~pages-account-pa~0a2392ec.bf2d23c9.js","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ee754f37388f72ab06e7d32679dd5bc","sha1":"6ed5932806c0bcb33a2beaf54fa6119f2cd2530a","sha256":"0c38a6ac72329fb900803b0dd53d07f49192a67bb46d2621d0258ae6257288da","sha512":"3a64ed756849fdcbb75d9b3c252ea3bc2ace68e22935d82b4620becde503897c791fc31419e92a9ac32a119cf1f5230290c7f76117acff2b3d864c55ac754f60","ssdeep":"1536:hFTsYId0FHoMqu7NdEAaM2Ol51hwJX2RcJZHYpN7xCIx/+eJF4cL3nnisGQaOmvM:hJsp0NVr7fnaMj51hwJX2RcJZHYpN7xT","tlshash":"9243eae6e10c1cd17f7bcc8f6244235f6549ff62d9968dc8f126564c8ce23a021a9b7a","size":55579,"data":"","first_seen":"2026-08-06T00:34:21.319093Z","last_seen":"2026-08-06T03:54:27.132691Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"851396daca502cf14521cecb02aca66b","sha1":"bb13fe69b1452c392af9fcb5d6a0e8523f789053","sha256":"5c29248518f8aa0821cf4befa9c56db3d88f062e67c0efa695b1a38faaa6e7f0","sha512":"265b520f2bd1a731befe5ed42b45a93fd8e544c9a79a604ae8805319c5ecadac98c2164a47033bca294649e807252e8d1c22d7c9af04727856acaca9c665bac3","ssdeep":"768:PaBBRBSMFXGxkrCCIaPKvCz8zePMEccNeEMucEa6wPyCDYFDSTxhh+710STFR4ub:mv+w9126OIfFJSwRJFcTzA","tlshash":"43330ac9b691b06243ab60f0406f490af33a9925744c84a4f158dceb3db650edbb7f6d","size":52936,"data":"","first_seen":"2026-05-14T12:23:11.004494Z","last_seen":"2026-08-18T14:23:27.465949Z","times_seen":356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2a24589f72329295cd9954b8b82a78b","sha1":"3b1482bf7159d1e54a185a01cb2db86d259fdb02","sha256":"838e3b0575859be8808c4dce8ed176f31f15fbaa523acce88142092a0ea4d30f","sha512":"d576d5b01b5aeb6c4c9bf2c79a933542a273aa726b141d4cc40300f8ce6a6bf8d96a03061251763b8a1ad26fd582d3f17e00bb8ea1ddc43ea10170c7137b7a1b","ssdeep":"768:8E2fDPXd5rRshGxhh4j/qDyxpXajik2qrI/7a:8XDFB1D8ir+m","tlshash":"8433d8c4b1a120a543e7a1b1516f460a733fa82c554c816cb768daf22cbcdc97637fb9","size":50154,"data":"","first_seen":"2026-05-14T12:23:11.064394Z","last_seen":"2026-08-18T14:23:27.899979Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"55bb175e22d7ea9f0d3f4815fa24c578","sha1":"d76864c11a42bff61779b52396d33ea99c46eb64","sha256":"8529f3d80f868c6f4121eab6a7b9f7ac6d19f89559502602cdaf2f91ad5ba614","sha512":"8fc39c6637e78fd48599026bec71361668175456a2b3d76a8eadf37f107bdbbc486feeead4ad200e9c628179b461c7eefb804222cb9a7619901e733b90d82de2","ssdeep":"1536:bzlbWdNzaNG6ZJgJdvJQ9CtXDTHEN4QC8AOgoAhWo1uVLxYnTUnfd5+k3:bzlxN6/tv84QC8AAAhr15TUnfd5+u","tlshash":"06b31cc47293b06643e324f4406f144af17dbc24548c9498f2a5e5eb7cb899e92bbf78","size":109345,"data":"","first_seen":"2026-05-14T12:23:11.144675Z","last_seen":"2026-08-18T14:23:27.765027Z","times_seen":354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","size":36489,"data":"","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-08-18T14:23:27.362103Z","times_seen":2849,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/js/pages-home-index.b5f64f36.js","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13d417bdbe69e78a74c2a6f5ff8279c","sha1":"f6893d885f15f9c65cb0c374b067965777e1cf7a","sha256":"b9ed872418540f027c928d7f6f7fd198e9fddbff615ef70669388b2155915533","sha512":"ae392ccd528816ca80f645c8ee745e5c64af79d8bab5b43d7f435db934d60da9cb5a27c9ecab4e8b42e9f11faaaf856822ac9ef3830b48fb93efc3c3c3cc2ce9","ssdeep":"192:ItXBYyh/cDlqJRHen/kbL9h92A7fi1E5c7rAJrlFy2EZuzwW3TScbcLHtn:ItXBYyhfven/kFhz+fAJrlFy2iuzMQcF","tlshash":"5e827615b047b02e482fe421307f1a1490706f75d238e4eaeb76fd61cae8a9e3635b5d","size":18020,"data":"","first_seen":"2026-08-06T00:34:21.323459Z","last_seen":"2026-08-16T07:43:56.062947Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b66c28c86f7a748ad292827e42dce41a","sha1":"28a917632ced237bd795c1281b11b8290cb8da17","sha256":"84636d7f6fa124325a937f89a84a68dc04da016f26cab395437e5bf20ccf6c52","sha512":"8526b687f02e998d64e6d51225d856c9c20deb61981306d199f3288e6f5db88b6f71e1b0b45f4d43e7086817a3b3c46ef4f4b29b84077f92af1afc1c79c58f19","ssdeep":"","tlshash":"6a11d0c87ba378356389446b70bf865bb6b21441680c8000d19fe4a57828eb4c737e9c","size":1088,"data":"","first_seen":"2026-05-14T12:23:11.012383Z","last_seen":"2026-08-18T14:23:27.856997Z","times_seen":368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1f0d3975c955fddf8c4b49ebe568407","sha1":"7b559dc893e3a59fe77d9553a8af7d6931f2e068","sha256":"85a50ac089309670d7b46e44d1ef17ab132599486ba995f6f12d07f72f4dd191","sha512":"e28c1ce7e3b1b762886f98bf8611a0b33a157c355a760d83602a75df917689c2013d51d4e52faa14445af13ec9bb6eed797f96db1ebd6a8bc8955c90289f1bdc","ssdeep":"1536:ffeY1Ph7WaDN38VCuXI3BDDAeP0/AKANwnntDi:fWYmahMqBDDAx/LANwntDi","tlshash":"507319e831a2b47113ea08e1507b0406f37d6845344ac4e9f5adaedf3e7641641abfbe","size":79629,"data":"","first_seen":"2026-05-14T12:23:11.157843Z","last_seen":"2026-08-18T14:23:27.904053Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/plugin-CjZW8RrX.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"51c3c9b2de34fdca3af784adcf12295f","sha1":"bec94c0f0b155596507c240c99092e08e0513c7f","sha256":"4c1ed3652ce5826a8390bf54b8f0a015730642905f87a43e3e7ab6761fb773c6","sha512":"3f5b504056bc91f117720040f130eb87c4ca3e2b131222ab9634fbc26660de6b0ccb74e5625de44ce4563a6f07a5649afeb467d55016112e67f57bc4e1bba9ea","ssdeep":"12288:bir97nAocT/FsH7kpZS43onCN7AzXZFBLbgOk0KNaQYaLJH7WeNDMEwgm7OJLB5Y:WcJHiPwl5Yv2NXU","tlshash":"84c47c4df2a17876d3f2589094d20444626c0b7ce01488e1f5bd9eb627b6da2e3b3b7d","size":545290,"data":"","first_seen":"2026-08-04T10:26:32.171269Z","last_seen":"2026-08-10T19:18:27.091836Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/js/chunk-vendors.7a18bc5f.js","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68858237e334922290f783e204f35dce","sha1":"717dd13a47a18f30cf25199cd5735129063ba75f","sha256":"bb7ca93138e3d35e1597136c44ebe63d3968ee2333247ab349950c0d38abd859","sha512":"bdc360b025e65423832287c7dee817f93739f4e0278bbb13e575336e174a9c9bbea8bd39288f2b180ab7e51229e6f3fe968bd00cdb17457f3c41b5c22d143d90","ssdeep":"6144:OXtwTf3yPbMnnYKvENTlWbEvm/dO+Qh5V2viznm51/vxqnRuJwI6FK4Ikvy:OdwTfFnYkEtA3OIvizE0E0/Ikvy","tlshash":"e505f78df286b0b60ae730b5403f220bb2376959b40a84d4f675e4d4ad7894e6237f7d","size":829010,"data":"","first_seen":"2026-01-26T03:42:49.720514Z","last_seen":"2026-08-16T07:43:56.056835Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/js/pages-account-index~pages-account-wallet~pages-home-index~pages-login-index~pages-login-register~pag~9d655afc.08ebe691.js","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"268fdd220356822ce6d151f4b3a2c892","sha1":"ebb3202c558d8ea1e850ed8eae19ba066d6e29de","sha256":"8180362378a7f4cfaef299c75b53092f9ac9829e5d1116a3771628ec1afc05f0","sha512":"1611c31d90a356b7e804783509006be4e09067f22e3d0691362f135dc0be2a736f54c44440b8621ac444bda07dd66f8c8bb3789ddf5096fe94471214737f6494","ssdeep":"192:zwzxPSY++VcvVk+8ym/UUmMOGHPjzSNflbMuA6Pa+0eollaNq1I:zCP8MSkJym/UUmRGHSNtbbA6KaNJ","tlshash":"0432fb18f0ca78610ae7902450bf1f0d503b3fad9574b9c9b7e5a4f64ae958c225fb38","size":11575,"data":"","first_seen":"2026-02-27T17:58:08.206407Z","last_seen":"2026-08-16T07:43:56.026617Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_728147_751822_1780039416.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"919e4203094c68e6ba4510f9edc5bdf5","sha1":"987ef2a033198842389b68122480bff83d7d351b","sha256":"c9dcdde5c9e2e1fe2a2e57a7687ab2367e0bbbeeed65c250bf4a4e29237670d0","sha512":"384bfd28cc7ea71f8fa03c77a81903590bed8baca55af1b2f373be39256a826b3007da368e142dd941aee27a2f837300b0a51330cec95b1bc23b14c34338af4c","ssdeep":"","tlshash":"9121cc471c6364757ad5717b4b3f88ad399991432004cc10bc4dd4681f909d10a5eee4","size":1187,"data":"","first_seen":"2026-06-05T02:03:32.23619Z","last_seen":"2026-08-16T07:43:56.047664Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/#/","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dcbd9715a5eee59dc08a7f7694f22db9","sha1":"38149a674151ba36f63cdd12543cdbb9d7f7dd27","sha256":"01d2361b054bb0ea43dc527da376197fc3ea0862e8c3ddb1d376a41ab118f28d","sha512":"8d05a492ee0be9137457f98fc59d846c0d032f6c3b1e4f6da18692961670ab9a62cfc82e06ada7fd45282cccba007ff51e00d96bee2099d027c935dc260453e0","ssdeep":"","tlshash":"7da024f737c314001511c37400473d545431041035dc4f0c404c7d710555170c337d0c","size":80,"data":"","first_seen":"2026-05-14T12:23:11.167523Z","last_seen":"2026-08-18T14:23:28.017106Z","times_seen":361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a522af0d14ae88982696a00ed688d768","sha1":"52d0dbdceed187b0640477f84ce6e87b6b288399","sha256":"22aa0d9ec22b3a0e596d451ce25db74406b7afe30e545a8d7fe5cf1e80f12465","sha512":"651748990ba0f8ecea98a24db1303f2ce00269f110124b3be05041db97b603ad61c499c2ce5d6c3a2f94c0867ad1d499f22af55b3708ca68fee008f1a7346206","ssdeep":"192:cdoWYG4JezFRvndgQCI2p3wQ7LgaEU/IUKe9uZmy0dDrYntCKw9Lb2Vy2DdMiOAi:LWYG4JezF5dtyLgjU/YmyykcB2gqhmnD","tlshash":"bd32f9193427697992f808c45079a311b6fd26633006d4a0f3bcceb9b555f8382b9ef9","size":10994,"data":"","first_seen":"2026-08-04T10:26:32.126626Z","last_seen":"2026-08-10T19:18:27.075957Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[YourCommerce] Application initialized successfully","filename":"https://smc67a5d8e.cityabovetheclouds.us.cc/static/js/index.22a1a162.js","line_number":1,"column_number":28778},{"level":"log","text":"[YourCommerce] Application resumed","filename":"https://smc67a5d8e.cityabovetheclouds.us.cc/static/js/index.22a1a162.js","line_number":1,"column_number":28995},{"level":"log","text":"[SafeCustomerService] Salesmartly 客服脚本加载成功，插件将显示原生“联系我们”按钮","filename":"https://smc67a5d8e.cityabovetheclouds.us.cc/static/js/index.22a1a162.js","line_number":1,"column_number":241960}]},"http":[{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/js/index.22a1a162.js","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.192Z","timestamp":1785977330192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/js/index.22a1a162.js HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a617cb0-57885\"\r\nexpires: Thu, 06 Aug 2026 12:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 908\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9e%2Fh7SJ2eCq8jCNii71D74CmC86xj8Dn81lV0q7OT3G%2BmzKk%2FbUZAYIc5SSCWrVtFUubX4RgOHUY7Hrzg694I3%2BefMtab46p4F99m%2FXeoJkfQRKQ3YcyCRd%2FCLq%2BjqFwaTBzrBMmZDpKgiR9Czl1FJTj8nz0xQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a26a09c9ac345695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":358533,"size_decoded":111638,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64978), with no line terminators","md5":"661674827129667d132b2e5d94f276b2","sha1":"18bf5d4d99926bdf420eaf77699402853305f729","sha256":"24f3af76e25e1d0e00c1f7ae9bfe55d91f43484c0fb6f92eb158f42a2d594093","sha512":"a278127443f295ac8184e17b24c1a3b6e77b93877ac4679e874bf6e565f4198827fdc543acb54cf6ed5e9eb0b8b6631f34d6e469c5d0a9818d6641882d8d23a0","ssdeep":"3072:HTp8OSM24+PQFupBXDJaHMDkpI7Ah2YjSup6ZyDdpM0XiqpFMlZlGDmPWQ2XfBGm:wH4OQFuzJDke7Ah3D62vU0ETjquGGj6D","tlshash":"fa743c86b6c4147f4b864781e06f3fedf5bb0c728241e497d9d1bf391aca98a9105a3c","first_seen":"2026-08-06T00:34:21.288592Z","last_seen":"2026-08-16T07:43:56.003852Z","times_seen":6,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/partners/f5.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.797Z","timestamp":1785977330797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/partners/f5.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-1099e\"\r\nexpires: Sat, 05 Sep 2026 00:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 905\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1gV5HttfIGbhtiCLH3PlnlXoowsGXC%2B20ZnBoUiB6P4qr8TEgzRwA7oVczMfV4bTqU5ySd1BPgkmXrmrslus19Jtbnarr46go9eZ7V2NzUZt2c2WuNWV9A%2Fc0JDdItmX9McPblMEI2x9QARc9H0bGqhzEPEyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cd7c845695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67998\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67998,"size_decoded":68812,"mime_type":"image/png","magic":"PNG image data, 219 x 103, 8-bit/color RGB, non-interlaced","md5":"a3a11f38e55c5da87d1deb79e06e0ba2","sha1":"bbce63b2db18b7a8503ebf54214f476e357c995a","sha256":"cdf311e466e9dc39a86cafa0f93a966a9f2e2b5e1283637f83d64291381ff66d","sha512":"64e852a203b99b5a2ad87634e250371c57935179bc9272813a1f85ece7dd1c5e72923f5e658fb27002c855c81ee16f35807b155c5ff8a85cc28d69f17976bd99","ssdeep":"768:lkEmMXOz/vxwOcqGOJgRHZrRV94bqruFPilff0HA+jeKidUrrfO/NAj:WEm4CH2OcqfJgRkGrcPilEXjeZdQfiAj","tlshash":"d2636053bf09e812d4541e758876c7e82334fc496f22934734dabe7faeae2d28c15254","first_seen":"2026-06-05T02:03:32.195186Z","last_seen":"2026-08-16T07:43:56.025319Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/css/plugin-DLtRvJ_8.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.140Z","timestamp":1785977331140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/plugin-DLtRvJ_8.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Tue, 04 Aug 2026 03:49:53 GMT\r\nx-oss-server-time: 7\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A71616165E66734321DFAF6\r\nlast-modified: Tue, 04 Aug 2026 03:48:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7096420717608561594\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: am7+FzRFAPUKBlVjdt6Heg==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 52b109b1375547c721208eb7c7b3185a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: jaaZ6lqVCqWS9QhAggaqn10BiAslT2LPBuazfhURBqKcZYyhrOzkAg==\r\nage: 161938\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":316376,"size_decoded":94248,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6a6efe17344500f50a06556376de877a","sha1":"8f239b24114106550a2758d3f5f339604cdc5fa5","sha256":"901d28eec871d10b977474cce7301ed7447c8e794813d4328d9609c87332b1eb","sha512":"371b82092a880363010b5c44b25b85565a4662b7773627de6129cda1a605ad8a1dd195c3f0e37c7ce1823ef898db16e44781374b9205d06f6928e0e8253b580e","ssdeep":"6144:JFoXHJxcnDD95VSSTDSv8MHz3xQRcOcOc5mjAibu8GWp:JiXon/95VSSTDSv8MHz3xQRcOcOc5mj9","tlshash":"8e64087cdb10313df937ca1266d0b69c6039a0e7feb30d4cba567229c2d60c95ab1a5d","first_seen":"2026-07-30T05:59:12.035349Z","last_seen":"2026-08-18T14:23:27.662332Z","times_seen":58,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.salesmartly.com/plugin/info?language=en-US\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977331355\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"widget.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.368Z","timestamp":1785977331368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:24:38 GMT","end":"Wed, 23 Sep 2026 18:24:36 GMT"},"fingerprint":{"sha1":"68:24:AA:01:FE:7C:74:44:2D:65:E9:35:7B:E9:90:1B:B6:1A:F5:FE","sha256":"36:B9:DE:DB:E9:14:9C:92:9B:DB:B9:F9:98:FB:47:A8:7B:41:C3:86:81:D4:1C:61:2F:BE:FB:FC:2E:54:74:D9"}}},"request":{"raw":"GET /plugin/info?language=en-US\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977331355\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: widget.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 055d0455db7de1abacee4fd75275d9ea\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 00:48:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nserver: cloudflare\r\nx-request-id: 27ee4ba0-4b1a-4db9-97e1-0c83a88a192b\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: a26a09d26a8c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4899,"size_decoded":2768,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"da900c0be957e9cd099e0383f01e06ca","sha1":"cd9d6f143b350822104d4cfe912432dc4448a11b","sha256":"c0f73415ce458a94c277feecc94ee093b600c129182c2b5b8b08e51064d49c77","sha512":"23136b9ad1cd1e791fd2e6f52f1e68b35693100191160062a5fb34d5adcc96900e1d252e9f4a8e19599f18f952792f937b5a30119989b944a759b9ae2902f8fd","ssdeep":"96:CeuOyJS4prbhz9ZczLN8KM/OIL/H/dd7pfqXZdSDHxRG:hBchz9Cz5A//H/tzHO","tlshash":"48a14231a12bcc62a19308a461fc9e215d9a57b4c1cc8e54ddaccd1d89fc8f6a70744f","first_seen":"2026-08-06T00:34:21.296566Z","last_seen":"2026-08-16T07:43:56.023265Z","times_seen":6,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/centrifugo-token?login_token=0ab112dca3bebb27f591208d0287814a\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332536\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:52.541Z","timestamp":1785977332541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"GET /chat/chat-msg/centrifugo-token?login_token=0ab112dca3bebb27f591208d0287814a\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332536\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 0f79fef2bffc50f5ee532dbf223a5aea\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nCookie: ss_uid=7a397ce18309ee0114bb70d2e2a9f58e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 00:48:52 GMT\r\ncontent-type: application/json\r\ncf-ray: a26a09d8894056a8-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: f72e5419-8721-42cc-8586-12db9eb1846d\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":478,"size_decoded":1071,"mime_type":"application/json","magic":"JSON text data","md5":"192963e0d1c303ca8694df80e83b183b","sha1":"40c2bb7cd9419d69e4de091c1a5f1ce039da31f6","sha256":"f82264bb145e02250ecfa0c0d904bb73480ef531bc53c8648c2485172f975ead","sha512":"279032f2bb6a3ff83e19adab4274e6884c84cddba27dabd2f2e955593791abee5abb6afb877e6f478390e1423b9be8dd04dee7a86babf4f41ac20d220e8a6c34","ssdeep":"","tlshash":"7cf0970322bd0aa16bdd3ad40dec159d04a610b2686049b9c7da60abce2f169f003026","first_seen":"2026-08-06T00:49:25.900409Z","last_seen":"2026-08-06T00:49:25.900409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/tabbar/home-active.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.494Z","timestamp":1785977330494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/tabbar/home-active.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-c7c\"\r\nexpires: Sat, 05 Sep 2026 00:33:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 906\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQs86zPswpCc3kt8dP18Xr4gQqC%2FJUoWIm%2BzSjho4lEwIml%2B8w3BlXNIcyydEaMImdBVlWvvTE54SH4lBy8BNrybxiBW3HuhNxsnketeg5pI7kM2SvJYqHpJHTT9RCFgBMKYCQrdR2zTUWkCxBw61F3zdZz9Yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cb9c525695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3196,"size_decoded":4009,"mime_type":"image/png","magic":"PNG image data, 213 x 200, 8-bit/color RGBA, non-interlaced","md5":"3396c9643fe41b1aff86628323fb6fc4","sha1":"69b46b80712ac87276a8f0ca4f5f4ce99920799d","sha256":"31a36ea9ac9855a223d24a730dde96e22eddc5e1753faa16215288ccb5dca4c2","sha512":"81d4f04a9b8347c0db5bee51c3d790a5210631fc1f1cae28af039d1a6afe68767800a6094e632e20523288a0174ca873e1520bd31e7cbd4f2a30f8e43d9ac5b5","ssdeep":"","tlshash":"37614b500677fac01f897ee544e0a7a159253ac3270dd19c3db45c7b72a782d515da83","first_seen":"2025-08-11T17:15:18.595053Z","last_seen":"2026-08-16T07:43:56.018027Z","times_seen":81,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/partners/f7.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.799Z","timestamp":1785977330799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/partners/f7.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-1099e\"\r\nexpires: Sat, 05 Sep 2026 00:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 905\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JY3X1L0V85jKxcq1V5wPP5P9n1OCqR6QxPf88jejMWen20Odd%2FsUhuKmHEBKHxWz4AripBAnYyDLrc2P7h65Ak1WD5se4kv%2F0Nt%2B%2Fr4OKLq8Mrh%2Fov2X7q5p1JWeGZ6aT9VXed9OCWonaVtuohULIlRk9v7Kjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cd7c865695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67998\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67998,"size_decoded":68818,"mime_type":"image/png","magic":"PNG image data, 219 x 103, 8-bit/color RGB, non-interlaced","md5":"1cf93a4b7a5e49a819e24a0146b9f0b5","sha1":"7724e9050ff7e95f979007b7f6b911053a8f1614","sha256":"b6e319051742980ca8141c37a0c6c5abf0f7bf1680e97a72fa6a6300f87544e2","sha512":"f40f806af3dc9e8cb66c26a2322fdbd0dc4771bca08374b86831dacd3b9ff0c790b8803b699499efd60dc7cdff2b8057cf990f6afc41a417831eff5dac2556b1","ssdeep":"384:lDb7S/SK5vYHuqlsMKO6tyBlm0KfboaKtkeSv:lDb7A/5vYHucsMKOeyXrsoaKtkeSv","tlshash":"8d63a812bf45d813d5982e358a65c7d96331fc48af26834735dabf2faeaa2c25c12344","first_seen":"2026-06-05T02:03:32.203084Z","last_seen":"2026-08-16T07:43:56.027207Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/centrifugo-token?login_token=0ab112dca3bebb27f591208d0287814a\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332536\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:52.543Z","timestamp":1785977332543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"OPTIONS /chat/chat-msg/centrifugo-token?login_token=0ab112dca3bebb27f591208d0287814a\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332536\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 00:48:52 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a26a09d8793856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":584,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T14:37:28.899243Z","times_seen":17956565,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/index.ed4a2d2b.css","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.189Z","timestamp":1785977330189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/index.ed4a2d2b.css HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a617cb0-1794e\"\r\nexpires: Thu, 06 Aug 2026 12:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 908\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wlamnz%2BGjvFmNCm1UUyMK48x5dddjcpYl0PQwLXYsOJyFwbO3%2BBA%2BGYUT2NcjYcT%2Bl9QH5j0Ra33sB7b%2B5BX%2FIrrdDggQJXxsixh%2B%2FGVhZm4eKAcvb%2BpsJ0DyhI0NCgN726WQkl1fNIIoNTAKF4X79OwfOxQQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a26a09c9ac325695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96590,"size_decoded":30593,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d2c05a28c7f2113821d909b7b5b918a3","sha1":"ccac94311f6ac6f580b64f47f7705318f1d226a3","sha256":"695bdbeea38a126c139158967cdd4f3a435e9936b9dff5b002e5f20a10fc7907","sha512":"3b96fbd1a89be8ae0b7479705cd4a2958ffe7f2f3f57ec23f407ad51ed8b447b9960728d77502e8fd8b2b19bf0971682030117559df250ea11c9bc1802364c3c","ssdeep":"1536:qlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:hApuK7hmVrS1Wu3iG41nrPI","tlshash":"4493f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-10-16T12:28:28.877032Z","last_seen":"2026-08-18T13:17:45.776302Z","times_seen":1834,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/favicon.ico","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.520Z","timestamp":1785977330520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:51 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=251WxWpdYzeQBn7rKR4Ys41DDDpMCuQFftuhYRBETTXkzm3Fub6szfZth5uvXIuPm8FcThDuHoFxaoBtBPR0W9UdDU88r0S2gNWyUEkP38Whx57kEodb168kvZIwLkFz6Ic1N9zZa8LKbGBFpfdJaArPLDDhgg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=6,i=?0\r\ncf-ray: a26a09cbbc585695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":733,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-18T14:25:50.600623Z","times_seen":551930,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/recent-msg-list-v2?login_token=0ab112dca3bebb27f591208d0287814a\u0026limit=20\u0026sender_type=0\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026direction_type=0\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332535\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:52.539Z","timestamp":1785977332539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"GET /chat/chat-msg/recent-msg-list-v2?login_token=0ab112dca3bebb27f591208d0287814a\u0026limit=20\u0026sender_type=0\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026direction_type=0\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332535\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 2910ec3ec4c836aac2cc2dd380c395cd\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nCookie: ss_uid=7a397ce18309ee0114bb70d2e2a9f58e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 00:48:52 GMT\r\ncontent-type: application/json\r\ncf-ray: a26a09d8994256a8-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 9ec67058-d398-4282-a1e7-5224da208463\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":788,"mime_type":"application/json","magic":"JSON text data","md5":"78d539ac5b6a06a8bd02b3ace8debb63","sha1":"8e22651d8d1e678777cfebdb96983cf7df6e751a","sha256":"d817b79090a73b71e09ad6e2daa2c137408a7cfb7916aef50da18a1b1b0229f0","sha512":"e821cc4e11e272ac7ff31855b135a17839c3032c8d1e2a89683b7e937ac1443f8c7732821bf10fe3f120b05c9c5325e74f6b7616a478e5ff9c98ea2519e92a96","ssdeep":"","tlshash":"5390021218281c560b06a48a74091b0591d4114049141621cd8c5158870945c6582521","first_seen":"2023-05-07T20:28:16Z","last_seen":"2026-08-18T14:09:30.966071Z","times_seen":457,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-06T00:48:48.628Z","timestamp":1785977328628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 00:48:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 23 Jul 2026 02:48:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w6bS5g8V%2F%2FOskFXvfeHaa9nrQkJPLrzjLESf3PbA3lIu7IjTIMAJwfvXDfAs3yi97X2iDf6FGLc1H8Y3IQzAZbm1e2ACLIf7yQCLPz6l23OZp6x7eLu2tBF3yUNn0v167kYFgiOxzdMnjO8cp7eJPX4w%2BOeTgQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a26a09c39f50b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":532,"size_decoded":1013,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (532), with no line terminators","md5":"2eda1d7c3492eba466435a544478a81b","sha1":"1416598ea2f35c5f785744941ea8188150e60f94","sha256":"d95c440016d74906a27ff9d8587e320c54134bb10788d40e39e6a92724169dd7","sha512":"690d8891296fb246052ad751abf6f814d45d952afcfe4ee8d008fe9b1e6e105f51958a2d1416a8d4fdeea998006130b1f2343eee6ab09de5bee29cc2731ebcf5","ssdeep":"","tlshash":"d7f0c0874c20d42d2b304a5089b5f56c08c6d86dfa304c9069e415ec47e47cc8d3f448","first_seen":"2026-08-06T00:34:21.321989Z","last_seen":"2026-08-06T03:54:27.130709Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1340,"timings":{"blocked":-1,"dns":569,"connect":1,"send":0,"wait":754,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/js/pages-account-index~pages-account-wallet~pages-home-index~pages-login-index~pages-login-register~pag~9d655afc.08ebe691.js","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.465Z","timestamp":1785977330465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/js/pages-account-index~pages-account-wallet~pages-home-index~pages-login-index~pages-login-register~pag~9d655afc.08ebe691.js HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a617cb0-2d37\"\r\nexpires: Thu, 06 Aug 2026 12:33:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 906\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FQBoptmoFz46V4xLO8tYbg4pZecZh%2FDoCRfr0Y524FcP6hTXouxOc5RffURJvEJacDU7L3Eilh4W2ipRublZUZ%2FVCxRaT2WgJZIDEjmeqdql6mPwpQngqf%2BVU69yNtVYv%2BW0bn91HFXIOcaCh6%2FgJMJbLnvawg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a26a09cb6c4e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11575,"size_decoded":4305,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11363), with no line terminators","md5":"268fdd220356822ce6d151f4b3a2c892","sha1":"ebb3202c558d8ea1e850ed8eae19ba066d6e29de","sha256":"8180362378a7f4cfaef299c75b53092f9ac9829e5d1116a3771628ec1afc05f0","sha512":"1611c31d90a356b7e804783509006be4e09067f22e3d0691362f135dc0be2a736f54c44440b8621ac444bda07dd66f8c8bb3789ddf5096fe94471214737f6494","ssdeep":"192:zwzxPSY++VcvVk+8ym/UUmMOGHPjzSNflbMuA6Pa+0eollaNq1I:zCP8MSkJym/UUmRGHSNtbbA6KaNJ","tlshash":"0432fb18f0ca78610ae7902450bf1f0d503b3fad9574b9c9b7e5a4f64ae958c225fb38","first_seen":"2026-02-27T17:58:08.206407Z","last_seen":"2026-08-16T07:43:56.026617Z","times_seen":8,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/partners/f6.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.798Z","timestamp":1785977330798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/partners/f6.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-10ad3\"\r\nexpires: Sat, 05 Sep 2026 00:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 905\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BbItZOh0KPSoDnbYSgXpqlWCMOVuRq2BhJ%2BS3sBFliXxCdTEfISEPZav4izrzfS%2FMyqhURdmRetZhY2hskVEAH616qmCG8sDDTU72u9h550csqmwNoFukbrR2mqCQbGumdUjbmCgCRCyBfh4iW8BaOryOogrMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cd7c855695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 68307\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68307,"size_decoded":69123,"mime_type":"image/png","magic":"PNG image data, 220 x 103, 8-bit/color RGB, non-interlaced","md5":"9c1a52192b7d6ae0afbdc2734bb69af1","sha1":"72d2a000b815a7723fb67a0e5754a0a32015d888","sha256":"3f77620cb11e462a71203b391672d0c273c1de66ee1b394187c473395d7b52a6","sha512":"f0567d0b230448b341d609795e495d886224c593c614c893677b4308a9c356b5d3c2d8caae6e9007142ce6ed514b6d3f4617018b4a52b356cde7fb3ae771e9ba","ssdeep":"384:7y/odkZRY4859cwJeCafO7EZEFMupoEJ9+hVNKvz:7y/kkvY4+9cOeCaW7EK1pou9+hVNKvz","tlshash":"aa638612bf45e403d8682e768a75c7e86321fc48af22934734d67f6fadae2c24d12354","first_seen":"2026-06-05T02:03:32.185704Z","last_seen":"2026-08-16T07:43:56.105424Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_728147_751822_1780039416.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.004Z","timestamp":1785977331004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/project_728147_751822_1780039416.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Wed, 05 Aug 2026 06:46:00 GMT\r\nx-oss-server-time: 20\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A72DC283B75C13030DF1F07\r\nlast-modified: Fri, 29 May 2026 07:23:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11202518501202037313\r\nx-oss-storage-class: Standard\r\ncontent-md5: kZ5CAwlMaOa6RRD57cW99Q==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 52b109b1375547c721208eb7c7b3185a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: -aHSYA1RDVwUfqWCLJv2wqVRNi-8RWfGiM24cfFythsqky9tAdre8g==\r\nage: 64971\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1187,"size_decoded":1179,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"919e4203094c68e6ba4510f9edc5bdf5","sha1":"987ef2a033198842389b68122480bff83d7d351b","sha256":"c9dcdde5c9e2e1fe2a2e57a7687ab2367e0bbbeeed65c250bf4a4e29237670d0","sha512":"384bfd28cc7ea71f8fa03c77a81903590bed8baca55af1b2f373be39256a826b3007da368e142dd941aee27a2f837300b0a51330cec95b1bc23b14c34338af4c","ssdeep":"","tlshash":"9121cc471c6364757ad5717b4b3f88ad399991432004cc10bc4dd4681f909d10a5eee4","first_seen":"2026-06-05T02:03:32.23619Z","last_seen":"2026-08-16T07:43:56.047664Z","times_seen":7,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":21,"connect":8,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/css/ssc-iconfont-Cok29e2F.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.139Z","timestamp":1785977331139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/ssc-iconfont-Cok29e2F.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Tue, 04 Aug 2026 03:49:53 GMT\r\nx-oss-server-time: 8\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A7161612FE6AF313287D780\r\nlast-modified: Tue, 04 Aug 2026 03:48:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15621541519379884351\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: VMTZyHw38prZOvfAtQLupw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 52b109b1375547c721208eb7c7b3185a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: S6si9uHyWTT-XRhhFRuWnBmoOTpkH2K9RxVvggCt7U3o3g9mUnC0Ow==\r\nage: 161938\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":145893,"size_decoded":66059,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"54c4d9c87c37f29ad93af7c0b502eea7","sha1":"87f904b71c9afcf9ed19c7376d00b747acdde5e2","sha256":"72e216cd0db7e2cf0dae0c882196d7762f13797a6c17620e2ae48980cc1cc498","sha512":"9b3cbb51565f3cd394c7760d81b9a5b8159f25c7d65383476c14294d561b383646b6807f4790d854453755bb2145129a2633219a81b1b68b3bf74ee37da56c82","ssdeep":"1536:JunTDOzLoiyVimLONTaeMxv0UqGgzlfzLSqFpFWGFeFjF4FFcpWtE+uV+F8oe5Ix:JFoXVdU6xcnnz9u+3","tlshash":"2be3087cea5025ddfd39ce5b231072289c3630effef54c48aaa6324a5be548cc590979","first_seen":"2026-05-29T23:23:06.269655Z","last_seen":"2026-08-18T14:23:27.844553Z","times_seen":322,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/plugin-CjZW8RrX.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.254Z","timestamp":1785977331254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/plugin-CjZW8RrX.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Wed, 05 Aug 2026 06:46:01 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A72DC29E5F805303654C950\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Tue, 04 Aug 2026 03:48:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3721009294260283366\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: UcPJst40/co694StzxIpXw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 52b109b1375547c721208eb7c7b3185a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: Jh4s2JhNcvuxSbWMITuyd8-OpGZmeZEzIhGn-bC_8Ff6SwhJd6cTfQ==\r\nage: 64970\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":545290,"size_decoded":186911,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65426), with no line terminators","md5":"51c3c9b2de34fdca3af784adcf12295f","sha1":"bec94c0f0b155596507c240c99092e08e0513c7f","sha256":"4c1ed3652ce5826a8390bf54b8f0a015730642905f87a43e3e7ab6761fb773c6","sha512":"3f5b504056bc91f117720040f130eb87c4ca3e2b131222ab9634fbc26660de6b0ccb74e5625de44ce4563a6f07a5649afeb467d55016112e67f57bc4e1bba9ea","ssdeep":"12288:bir97nAocT/FsH7kpZS43onCN7AzXZFBLbgOk0KNaQYaLJH7WeNDMEwgm7OJLB5Y:WcJHiPwl5Yv2NXU","tlshash":"84c47c4df2a17876d3f2589094d20444626c0b7ce01488e1f5bd9eb627b6da2e3b3b7d","first_seen":"2026-08-04T10:26:32.171269Z","last_seen":"2026-08-10T19:18:27.091836Z","times_seen":16,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=6d05045bdfc0c96731d03554ff1b2d2f\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977331362\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.374Z","timestamp":1785977331374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/log/log?plugin_sign=6d05045bdfc0c96731d03554ff1b2d2f\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977331362\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 642\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":642,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHGlNupteHhyh8htTV8rCyiyGtEPVzpP9uvyh8ht3zZrnkhMhyhBdHQP3zSN9VvyAKhyh8hrQjWtazqrnshMhyhBdHqP9zwNScmf3DhMAspyGrVfGIEP9khMhH9lCk8BAy4BAYbl2fkI2RjI2ymIeD9MdypyQj%2BPQtasntVyAKhrnkwXXlhBdHafQ8hMhHKtTc8f5KWBSIws5sSs2XvM3D%2Fs9V40nuhPSrVt3%2BVs9jWtnc5BGX5BQIABqlWyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2Fld6hBdHaf9Xbt3VwrCyilAokBdHpP9tbr3u4sCyi0qHhfQzSf9XqNSIafTYWfGohMGphs9zW19VVfqyilC8hP3zAsnj2t3zqsntVyAKjbC8hsSXqfQX%2FtuIAfQV8tdyiyhypyQtVPQXqsNcEP9khMhH9lhHzBdH5r3wbfQX%2Fr3XqN9aWr3DhMhH513uvPSfhbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 00:48:51 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a26a09d12ca3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":629,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-08-18T14:23:27.964017Z","times_seen":2731,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/icon_box_4.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.791Z","timestamp":1785977330791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/icon_box_4.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-d14\"\r\nexpires: Sat, 05 Sep 2026 00:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 905\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qi97uF9Gjfup0zz%2FG87TNaeNeR%2Fjn70tQNT2dOgl48awn%2Bp6d5VEsEqlQlurlpv4Ogd1UJwpE5nVxrvpVB64XQfvPA0IEJ4KU3NVqXQXK%2B0rfRT8ZX%2FSFt6OcCqLN0PE%2FcOm5SP3T%2BmyDaYWhuE1bcqeOuLN2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cd6c7f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3348,"size_decoded":4169,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"e5618045243b8fbb796589911deeb9dc","sha1":"751680b6488cb9b804721fee0e2492d1af3b05ab","sha256":"a8fef6e8fcbddd163928d82c0e34691964176f185da2dbf303f55d4d04d7a553","sha512":"a045f53472f124741386d773530810e4a6b0f408e87162ecb3b4a0ddb9114d8d234329e914a072968d7f5b74bbb9b0249cdb74fc035612b2015ea464f1a2eba8","ssdeep":"","tlshash":"11615ce30c23c152e9940db61d303988b5fd1ca95015352629152da66e7fe447eeea0f","first_seen":"2024-11-19T07:54:21.363854Z","last_seen":"2026-08-16T07:43:56.112586Z","times_seen":640,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/partners/f2.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.793Z","timestamp":1785977330793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/partners/f2.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-1099e\"\r\nexpires: Sat, 05 Sep 2026 00:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 905\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T3N8i3YYRtKBihZ9W8fZ7NrvFyPKBa6IUIY463VlQbJxBj33RQ1iAOQDxDjBtQKTO1eFgtwymRcEmwrs0heGEjC4SflEOhJb2%2FpRWOJZ4F%2BMnZy4b%2B30ksm3AVsCBco4rM6LvxmFRyvtdav7DllFdw75GtIOKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cd6c815695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67998\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67998,"size_decoded":68814,"mime_type":"image/png","magic":"PNG image data, 219 x 103, 8-bit/color RGB, non-interlaced","md5":"45919759c2838a6e98dab662c4558fad","sha1":"66701223f0ecb18b6c70567d2f4718da44631c8f","sha256":"1de27ea649b1c0c7e64d173c31c678b4d8bb0ee3fd8402d37a8aa046be639fd8","sha512":"359adf90828b19763f6e7d0afeeee30766f7062851f2d7835fa2e3f81c346e071521174091bef8cd6b1a46faf6b7ce644458a75a5bed1254b6c6087769e96c20","ssdeep":"768:lOHYJiCvQcYnmyfa9Wk9JVdeNussY8Qa6IhcOmc/BaEOjn40T3lWejcw:EHYIlcYnixpnf5Qa7p/en4Kgw","tlshash":"1c630b427f45e802e4651a768daac7ec2321fc885f26d38735d2ae3b7ded6c35c12284","first_seen":"2026-06-05T02:03:32.224822Z","last_seen":"2026-08-16T07:43:56.05865Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.142Z","timestamp":1785977331142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Wed, 05 Aug 2026 09:52:13 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\nx-amz-version-id: J6b7RzocQsVXwTzS3QxevgOr1gKTyblY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8c3a87d110aff35fe17513b9a9ad30cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 66mkb7_cB7oFSTJKnaIPB4O7wuDcLBoEUIeEexSK1OHtQkE2U3rUaA==\r\nage: 53799\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47223,"size_decoded":47881,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-08-18T14:23:27.253428Z","times_seen":3360,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":31,"connect":19,"send":0,"wait":4,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.187Z","timestamp":1785977331187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Wed, 05 Aug 2026 06:46:00 GMT\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A72DC2815F049383784E1AB\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Tue, 04 Aug 2026 03:48:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11117890345216515431\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: hROW2spQLPFFIc7LAqymaw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 52b109b1375547c721208eb7c7b3185a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 542QQ-FPAbBEYiizYpMisEVgOwGiSZm3nm3Wm1nJVLYKaLhsC72XPQ==\r\nage: 64970\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":52936,"size_decoded":20357,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13923)","md5":"851396daca502cf14521cecb02aca66b","sha1":"bb13fe69b1452c392af9fcb5d6a0e8523f789053","sha256":"5c29248518f8aa0821cf4befa9c56db3d88f062e67c0efa695b1a38faaa6e7f0","sha512":"265b520f2bd1a731befe5ed42b45a93fd8e544c9a79a604ae8805319c5ecadac98c2164a47033bca294649e807252e8d1c22d7c9af04727856acaca9c665bac3","ssdeep":"768:PaBBRBSMFXGxkrCCIaPKvCz8zePMEccNeEMucEa6wPyCDYFDSTxhh+710STFR4ub:mv+w9126OIfFJSwRJFcTzA","tlshash":"43330ac9b691b06243ab60f0406f490af33a9925744c84a4f158dceb3db650edbb7f6d","first_seen":"2026-05-14T12:23:11.004494Z","last_seen":"2026-08-18T14:23:27.465949Z","times_seen":356,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.212Z","timestamp":1785977331212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Wed, 05 Aug 2026 06:46:01 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A72DC29EE88453536C997DD\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Tue, 04 Aug 2026 03:48:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16134971315845804156\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: VbsXXiLX6p8NP0gV+iTFeA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 52b109b1375547c721208eb7c7b3185a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: Q-jjjw-p1MVO0k-jh6a8aUKVA0p5vWnSqP5G5LAK1vVxsdqkqlii-w==\r\nage: 64970\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":109345,"size_decoded":39307,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bb175e22d7ea9f0d3f4815fa24c578","sha1":"d76864c11a42bff61779b52396d33ea99c46eb64","sha256":"8529f3d80f868c6f4121eab6a7b9f7ac6d19f89559502602cdaf2f91ad5ba614","sha512":"8fc39c6637e78fd48599026bec71361668175456a2b3d76a8eadf37f107bdbbc486feeead4ad200e9c628179b461c7eefb804222cb9a7619901e733b90d82de2","ssdeep":"1536:bzlbWdNzaNG6ZJgJdvJQ9CtXDTHEN4QC8AOgoAhWo1uVLxYnTUnfd5+k3:bzlxN6/tv84QC8AAAhr15TUnfd5+u","tlshash":"06b31cc47293b06643e324f4406f144af17dbc24548c9498f2a5e5eb7cb899e92bbf78","first_seen":"2026-05-14T12:23:11.144675Z","last_seen":"2026-08-18T14:23:27.765027Z","times_seen":354,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/chat/msg-user/create-user?plugin_sign=86649aef50201b6b67e6a1c9ae187772\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332079\u0026_lt=\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:52.081Z","timestamp":1785977332081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 12:16:06 GMT","end":"Mon, 19 Oct 2026 13:16:04 GMT"},"fingerprint":{"sha1":"1B:33:CD:24:37:4F:CE:80:C5:C2:0C:BB:6F:12:74:63:10:84:B6:03","sha256":"E8:10:3F:17:1D:16:1F:70:2B:73:15:DB:1D:5A:64:0F:66:B3:21:D5:F5:60:F2:71:3F:C0:C0:F1:D3:25:33:4D"}}},"request":{"raw":"POST /chat/msg-user/create-user?plugin_sign=86649aef50201b6b67e6a1c9ae187772\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332079\u0026_lt=\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147 HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 369\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nCookie: ss_uid=7a397ce18309ee0114bb70d2e2a9f58e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":369,"data":"source_url=https%3A%2F%2Fsmc67a5d8e.cityabovetheclouds.us.cc%2F%23%2F\u0026language=en-US\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026user_id=8bb9f7417f5a8584d5dacbbd16992be1\u0026data=eyJwaG9uZSI6IiIsImVtYWlsIjoiIiwiZGVzY3JpcHRpb24iOiIifQ%3D%3D\u0026is_sandbox=0\u0026before_source_url=\u0026label_names=\u0026custom_fields_ext="}},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 00:48:52 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: a26a09d5ad07b4eb-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 45b66650-1b88-46f8-b767-2877b7ac4135\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":821,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"771e78c4867ea1bbf68c67ab30b349a3","sha1":"ca4c8dbeb557f8d0e2115c339ac31fb24468b7b7","sha256":"9daee57454980cc4823d0222439cfad8c6ddb0b5fbb8039bb66da8f144dde6f4","sha512":"75f83dcd40af937cb469a98e16db3906797d1da0dccd070d1402ab338121bf92536097d899eeb38be7eb401e2344218e2a5a9785e4b5d923254ccbe1720c2276","ssdeep":"","tlshash":"1dc02b37985663ed0fea335e14083823b0c100200fa6633e8cfa3378074c56cb393820","first_seen":"2026-08-06T00:49:25.920741Z","last_seen":"2026-08-06T00:49:25.920741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":0,"dns":13,"connect":9,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=0ab112dca3bebb27f591208d0287814a\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026direction_type=1\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332791\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:52.798Z","timestamp":1785977332798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"GET /chat/chat-msg/unread-msg-list-v2?login_token=0ab112dca3bebb27f591208d0287814a\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026direction_type=1\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332791\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 749fcd4670834597c12fd1b5420b3d7f\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nCookie: ss_uid=7a397ce18309ee0114bb70d2e2a9f58e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 00:48:53 GMT\r\ncontent-type: application/json\r\ncf-ray: a26a09da09cb56a8-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 8c9dcd84-3df0-44b2-a464-54e43b0f21fe\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":802,"mime_type":"application/json","magic":"JSON text data","md5":"48016efe262190df0ad5b1d7340a60c4","sha1":"1cd9c973630bf59e2c479cada9105bbfad39dec3","sha256":"6e59b9f826a2a9b503fb05fd33448a0583d30552aed790dfea6cb19e74bb409c","sha512":"274e846e9ad5c7fdbff3fb665809347f229260b2b2eb491f386a5d1084a7fd7526a4e0eb331c71c4eeb14a98143925c29e2702869c11883176eb14ffbba9993b","ssdeep":"","tlshash":"4ca002562c2c1e4b0f0fe489780d1b17d6e911445a252712cdcc915c870da5eb5c7521","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-08-18T14:23:27.948133Z","times_seen":1985,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/tabbar/start.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.498Z","timestamp":1785977330498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/tabbar/start.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-531\"\r\nexpires: Sat, 05 Sep 2026 00:33:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 906\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2BiK6PXpIJlRY6qQXImKJOpYgFlndwAPjO1dL7aGM%2FjPF6ra6i0J4N7fP65RbtIPrF54jFbvgtE2KQ%2FeBeZD1ZsfHhanPIgyXO23mU%2BfwmO1gLjyrVAeNyb71WCojOp6GVPB8Pk4ZRDMQgSjnf6W76Pdz72cTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a26a09cb9c545695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1329\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1329,"size_decoded":2144,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"2d982a82d3f591699fdaed7185f8aaee","sha1":"018bb32582150990b5be2b0922db49b8d8e772d7","sha256":"be88964d7a0b6e84539afe4b9d2d337231d5486d621d915b6062571720c4622a","sha512":"670c3ad2dbf15e3d900268e871e8ece5e4a4b3085db844c5947deb43cdee885f5d093186a3f53bfd81c89f7649c1723ede21fc91637269dcbee41894eb748940","ssdeep":"","tlshash":"2921c81bb3c88d2a3586b162a8230a7a48141721bf26170ddb124fd4c627509a4db4f7","first_seen":"2025-08-11T17:15:18.611047Z","last_seen":"2026-08-16T07:43:56.044604Z","times_seen":73,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.252.61.234.16clouds.com/index/index?lang=en","fqdn":"156.252.61.234.16clouds.com","domain":"16clouds.com","tld":"com"},"ip":{"addr":"156.252.61.234","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.785Z","timestamp":1785977330785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"156.252.61.234.16clouds.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 01:20:21 GMT","end":"Wed, 21 Oct 2026 01:20:20 GMT"},"fingerprint":{"sha1":"BB:3D:50:A9:BD:BB:B6:59:CA:DA:AD:11:D3:87:CF:F1:70:1D:15:74","sha256":"79:14:7F:22:46:B9:4F:84:58:F6:7C:1A:D3:17:77:F2:7B:39:8B:94:58:FB:6B:6B:00:43:CE:2C:CB:37:CA:B8"}}},"request":{"raw":"OPTIONS /index/index?lang=en HTTP/1.1\r\nHost: 156.252.61.234.16clouds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 06 Aug 2026 00:48:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Accept, Authorization, User_id\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":468,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T14:37:28.899243Z","times_seen":17956565,"resource_available":true,"data":null}},"time_used":2271,"timings":{"blocked":-1,"dns":56,"connect":266,"send":0,"wait":357,"receive":0,"ssl":526},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.184Z","timestamp":1785977331184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Wed, 05 Aug 2026 06:46:00 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A72DC28EE88453536F794DD\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Tue, 04 Aug 2026 03:48:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3956808462139976565\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: ofDTl1yVX934xLSevlaEBw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 52b109b1375547c721208eb7c7b3185a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: FqjbcElgI7CtM5AfAD4gRpQvNawOg3GM4Kk9hvl3SVjp40Y_gw0gAA==\r\nage: 64970\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":79629,"size_decoded":32459,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a1f0d3975c955fddf8c4b49ebe568407","sha1":"7b559dc893e3a59fe77d9553a8af7d6931f2e068","sha256":"85a50ac089309670d7b46e44d1ef17ab132599486ba995f6f12d07f72f4dd191","sha512":"e28c1ce7e3b1b762886f98bf8611a0b33a157c355a760d83602a75df917689c2013d51d4e52faa14445af13ec9bb6eed797f96db1ebd6a8bc8955c90289f1bdc","ssdeep":"1536:ffeY1Ph7WaDN38VCuXI3BDDAeP0/AKANwnntDi:fWYmahMqBDDAx/LANwntDi","tlshash":"507319e831a2b47113ea08e1507b0406f37d6845344ac4e9f5adaedf3e7641641abfbe","first_seen":"2026-05-14T12:23:11.157843Z","last_seen":"2026-08-18T14:23:27.904053Z","times_seen":355,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mix-ads.oss-accelerate.aliyuncs.com/prod/project/g1onvvl/d4w_v2/integration/plugin/image/20260529/1780043864452/%E4%B8%8B%E8%BD%BD.png","fqdn":"mix-ads.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:52.077Z","timestamp":1785977332077,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /prod/project/g1onvvl/d4w_v2/integration/plugin/image/20260529/1780043864452/%E4%B8%8B%E8%BD%BD.png HTTP/1.1\r\nHost: mix-ads.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 06 Aug 2026 00:48:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 487\r\nConnection: keep-alive\r\nx-oss-request-id: 6A73D9F450067793E5CA4DF9\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"FB204F3F756824DB07681B4B10ADA820\"\r\nLast-Modified: Fri, 29 May 2026 08:37:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10903081455907546250\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: +yBPP3VoJNsHaBtLEK2oIA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":487,"size_decoded":1049,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit colormap, non-interlaced","md5":"fb204f3f756824db07681b4b10ada820","sha1":"df5bb7f4dd54d54725e1d42893ac1c7d9bd165ef","sha256":"3fc596802454163807d62ed9ee331a401b33f33307f98c90af4040eb898d03ca","sha512":"1f5ba1015d52b00564b5adb7740e5e8ccbd578582896ebd6ad475e32e282c1279b885b5aa3c30faae5877bf2cfc695f6e98e10eede0fe43683bafe5bb19a2685","ssdeep":"","tlshash":"00f005af7703682dcc54e5dda4f122601416316729f504650525c8ad0553001f1b30db","first_seen":"2026-06-05T02:03:32.239199Z","last_seen":"2026-08-16T07:43:55.998597Z","times_seen":7,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":0,"dns":125,"connect":22,"send":0,"wait":187,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/partners/f3.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.794Z","timestamp":1785977330794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/partners/f3.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-1190a\"\r\nexpires: Sat, 05 Sep 2026 00:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 905\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOkrSjpet7LDfVsUCxtn7CKass2Gj6J7eZhrqrDXaZm5ncLRwuY5ohSJNCGCzLxcKki1v9AtrD6%2FfM0Wsm7%2BFJaG%2BhOzM8LS9US%2BekvaV4rijksJAe5PZvtAkGMspz%2F6I0FYUbRnY9dVEtUeyUrHP20oeFWCGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cd7c825695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 71946\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71946,"size_decoded":72766,"mime_type":"image/png","magic":"PNG image data, 219 x 109, 8-bit/color RGB, non-interlaced","md5":"4604ab67695f02ea918ca6c2a4e83e01","sha1":"89b1bfb264d9b9d9bf37b3dbc5861869317cfd3c","sha256":"be6b40447e3101f156be90077e4fa950d36674ae9fc7c6cecd25662dd206e0d5","sha512":"5781fa70fed98479722b6d234be2cb7a69a81b2cd687a06145986d232bb119b45792d42815af02006edccdbc91e5071588f1401417e9b03e33fa0394bb8eedfd","ssdeep":"768:2175yv2HfzysyOxbBYMw2/NWEAx+owborcYKxPqEo+Joms:yJysnYRdF8Vxyuums","tlshash":"a3632c13bf44e817e8a81a358dbac7a96331fc48af16434734c56e7fadae7d24d11284","first_seen":"2026-06-05T02:03:32.202085Z","last_seen":"2026-08-16T07:43:56.050056Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.191Z","timestamp":1785977331191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Wed, 05 Aug 2026 06:46:00 GMT\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A72DC28E5F805303601C350\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Tue, 04 Aug 2026 03:48:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12708522076119217507\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: 8qJFifcjKSlc2ZVLi4Kniw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 52b109b1375547c721208eb7c7b3185a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: rlu_bziuEBRhBXBRbD5U0udnYvKgPJG0_GXgsHrobGPMrPnSVZ6naA==\r\nage: 64970\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":50154,"size_decoded":16350,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25425)","md5":"f2a24589f72329295cd9954b8b82a78b","sha1":"3b1482bf7159d1e54a185a01cb2db86d259fdb02","sha256":"838e3b0575859be8808c4dce8ed176f31f15fbaa523acce88142092a0ea4d30f","sha512":"d576d5b01b5aeb6c4c9bf2c79a933542a273aa726b141d4cc40300f8ce6a6bf8d96a03061251763b8a1ad26fd582d3f17e00bb8ea1ddc43ea10170c7137b7a1b","ssdeep":"768:8E2fDPXd5rRshGxhh4j/qDyxpXajik2qrI/7a:8XDFB1D8ir+m","tlshash":"8433d8c4b1a120a543e7a1b1516f460a733fa82c554c816cb768daf22cbcdc97637fb9","first_seen":"2026-05-14T12:23:11.064394Z","last_seen":"2026-08-18T14:23:27.899979Z","times_seen":355,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-auto/user/trigger?login_token=0ab112dca3bebb27f591208d0287814a\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332791\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:52.795Z","timestamp":1785977332795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"POST /chat/chat-auto/user/trigger?login_token=0ab112dca3bebb27f591208d0287814a\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332791\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nCookie: ss_uid=7a397ce18309ee0114bb70d2e2a9f58e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"is_new_user=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 00:48:53 GMT\r\ncontent-type: application/json\r\ncf-ray: a26a09d9f9bf56a8-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 1266b11f-cabd-4977-b116-748393f78c77\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":737,"mime_type":"application/json","magic":"JSON text data","md5":"6b210154a96c28a41ffbe341a228c02a","sha1":"2e5751bde9f2323a79989d165f22ba111624ab76","sha256":"57109c9877bb6690c6284c7b2b98088071ee4762449b6b5659dd908bf9d703e3","sha512":"16fc9ff07ff4e167be6b24dad448fe7479cb1e5b50d5e7f251c84852e4c67d8caff68a1eae5be69b8f4561d97bc6d41be026597033718181025b3a97c7e292fe","ssdeep":"","tlshash":"89800023282c2c830e0238cc880e8b8820e820808e200330cc8ca228cb080a8ba82830","first_seen":"2023-06-30T01:11:08Z","last_seen":"2026-08-18T14:23:27.382355Z","times_seen":2277,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/js/pages-home-index.b5f64f36.js","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.467Z","timestamp":1785977330467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/js/pages-home-index.b5f64f36.js HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a617cb0-46ce\"\r\nexpires: Thu, 06 Aug 2026 12:33:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 906\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HumAP9KJrpy%2FfWmXUuNByobS2Skf%2ByBfQ9aAx9rkXnYrA%2B0BhfjroHLeIZPV%2Fb6Fhssh3eGH%2FTVh1LH9ufIlBlE5OaI7GoJcZE3jRtZ4y8uNp9C1GI%2BFNKearx5nm2daYvB1scjwFNOmX%2F6tTohCSzhNXu4Fzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a26a09cb6c4f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18126,"size_decoded":5716,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17864), with no line terminators","md5":"d13d417bdbe69e78a74c2a6f5ff8279c","sha1":"f6893d885f15f9c65cb0c374b067965777e1cf7a","sha256":"b9ed872418540f027c928d7f6f7fd198e9fddbff615ef70669388b2155915533","sha512":"ae392ccd528816ca80f645c8ee745e5c64af79d8bab5b43d7f435db934d60da9cb5a27c9ecab4e8b42e9f11faaaf856822ac9ef3830b48fb93efc3c3c3cc2ce9","ssdeep":"192:ItXBYyh/cDlqJRHen/kbL9h92A7fi1E5c7rAJrlFy2EZuzwW3TScbcLHtn:ItXBYyhfven/kFhz+fAJrlFy2iuzMQcF","tlshash":"5e827615b047b02e482fe421307f1a1490706f75d238e4eaeb76fd61cae8a9e3635b5d","first_seen":"2026-08-06T00:34:21.323459Z","last_seen":"2026-08-16T07:43:56.062947Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/partners/f4.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.796Z","timestamp":1785977330796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/partners/f4.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-10ffd\"\r\nexpires: Sat, 05 Sep 2026 00:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 905\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXwVYfcHjqmRq4jbGjZIQ1FW01CIJeZAUWmTeHbGlmisryFDLeepsU0R2eTAkN5uEQ4Fe2%2BGOrvQjN%2BKuhKbsOMtGAyQw9HTqyZpHtizdxHzC3YRMgRKvymzBTjK4AwnH5AohpLp5bXigh%2FROhB3PHPWye7%2B7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cd7c835695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69629\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69629,"size_decoded":70447,"mime_type":"image/png","magic":"PNG image data, 220 x 105, 8-bit/color RGB, non-interlaced","md5":"2af8fed57cd2802d9aba1f5e5bec4c8a","sha1":"425b433b7a91897a7a6a2b9d9e7236157a3f8bc5","sha256":"5485f02f6791cbf54f29592ff5a83517a24a914e3505c05f6b60b716af536db8","sha512":"6ce7dcdd78bfb0358cb9a19d5d39c887521ac9b36823443fad2c8ee9c175271f859b737195572e1368c67f09cf6165bb34a04a9c94a1bdbbed875bda868b60f3","ssdeep":"1536:KMnX/2/Z06esoRhuGhx8FAlc8lOEwZpHKTsv3ipPp/d3W/UcwP:JnXexaPGGsuVGeP","tlshash":"3f631c427f41e806d5691ab68db9c7d82324fc885b22d38739c2ee6f6cee7d35d12240","first_seen":"2026-06-05T02:03:32.204758Z","last_seen":"2026-08-16T07:43:56.039635Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=0ab112dca3bebb27f591208d0287814a\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026direction_type=1\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332791\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:52.800Z","timestamp":1785977332800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"OPTIONS /chat/chat-msg/unread-msg-list-v2?login_token=0ab112dca3bebb27f591208d0287814a\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026direction_type=1\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332791\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 00:48:52 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a26a09d9f9c556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":584,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T14:37:28.899243Z","times_seen":17956565,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.174.83.126","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:53.236Z","timestamp":1785977333236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 06 Aug 2026 00:48:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Thu, 06 Aug 2026 15:48:54 GMT\r\ncache-control: max-age=54000\r\nset-cookie: __uni__uid=rBACeGpz2fZMH5ZuA5jEAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-18T14:02:40.251128Z","times_seen":20286,"resource_available":false,"data":null}},"time_used":914,"timings":{"blocked":0,"dns":35,"connect":204,"send":0,"wait":204,"receive":0,"ssl":470},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/icon_box_3.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.790Z","timestamp":1785977330790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/icon_box_3.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-1073\"\r\nexpires: Sat, 05 Sep 2026 00:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 905\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gd%2BBc4Hi0UJIZRZCml4D6VrpY%2BL5z%2BfmVfvUugxIA71iBpw%2BnCIzSiY%2FxkAF9d8G%2B79ibcVWZIHDHZct7W%2BqJSqcMnBRtxyGH5G%2BQI8Tj7qTqv9empSX82NaUv00jA8hiR%2FDQW6lJ%2B%2F4etWR%2FVq5r5rCxSLfpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cd6c7e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4211\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4211,"size_decoded":5043,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"d4f8979b3d4018df19969be9034516f9","sha1":"cd6ed110c7796e771450e27e820b11f7940d9db6","sha256":"636491d3bb271b7114c8cc3a8b05577949318e025acbd978f644fa1dd449cc76","sha512":"5eb075dab8c90cf6592176262d7e57350575022e4a30301766231aa51bc316b768d7a8dce2098b3012f75e27196978d849ab72eca032641e8a5eda5432b778be","ssdeep":"96:ZEHnswxASzLSucX8QAu1V3H80aqpuT3ktzXPFmEtvaXyHcSxBEchT:ZQn3WSMyu1Vs0bUIXtpIdSxBEQT","tlshash":"bf915dd3d557f081e311e27e0d3410e85519a6edc731a448eee7ec1e7a2ba99426d170","first_seen":"2024-08-19T16:11:10.099878Z","last_seen":"2026-08-16T07:43:56.048997Z","times_seen":649,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/tabbar/record.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.496Z","timestamp":1785977330496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/tabbar/record.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-261\"\r\nexpires: Sat, 05 Sep 2026 00:33:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 906\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o7ael58IPZYjyAvy6PkFdhFo5JkIrGox4k9NdekjumaryHxEQPIpPxS7FMSjqVoAKfp0cpfTK%2BQZHSs42vdOT5FOjE8XXtTwWeNYbZvD48GwGTYyiz5G5xQC1mcPl3q%2FycbFcTUDQdvUzDhW0vb9mpQfxSnO%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a26a09cb9c535695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 609\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":609,"size_decoded":1421,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"dbc5830013c22fc3ca6449f4a588a328","sha1":"8c64990eb58feeae07f82c80a25dab9afc1e0265","sha256":"de4238198df876d91cc490560d711203a414e2e5b67106206bef2411fec7728d","sha512":"4838837e1566b8d1cf356c7371fe083546357973c205ad4c88fdfc750499c3cf9f73705926e2e9917f9b6b1c539f5cf5ad2d5d44cfe651f209959b8299784dfd","ssdeep":"","tlshash":"a2f0b7937326fca08b3b94f7a854045a80391a5fdce6c6070f8463b41c33cb1441aa02","first_seen":"2025-08-11T17:15:18.623331Z","last_seen":"2026-08-16T07:43:56.110578Z","times_seen":81,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.salesmartly.com/plugin/info?language=en-US\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977331355\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"widget.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.371Z","timestamp":1785977331371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:24:38 GMT","end":"Wed, 23 Sep 2026 18:24:36 GMT"},"fingerprint":{"sha1":"68:24:AA:01:FE:7C:74:44:2D:65:E9:35:7B:E9:90:1B:B6:1A:F5:FE","sha256":"36:B9:DE:DB:E9:14:9C:92:9B:DB:B9:F9:98:FB:47:A8:7B:41:C3:86:81:D4:1C:61:2F:BE:FB:FC:2E:54:74:D9"}}},"request":{"raw":"OPTIONS /plugin/info?language=en-US\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977331355\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: widget.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Thu, 06 Aug 2026 00:48:51 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nserver: cloudflare\r\nx-request-id: 86591378-5fd6-4ee3-8511-5f3fa927ad3c\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a26a09d12b56b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":752,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T14:37:28.899243Z","times_seen":17956565,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":5,"connect":11,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=adb6b74a218d26c22ffd8ac09414100a\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977331363\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.375Z","timestamp":1785977331375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/station/log?plugin_sign=adb6b74a218d26c22ffd8ac09414100a\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977331363\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 417\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":417,"data":"data=0qHafQ8hMhHKtTc8f5KWBSIws5sSs2XvM3D%2Fs9V40nuhPSrVt3%2BVs9jWtnc5BGX5BQIABqlWyh8hr3zwsnV%2FyAKhf9aAIAt%2BInokrCmA1NcmsnHWtQX413XAP3zarTl%2FtNl%2Fs9lhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8yh8hfQXQyAKhyh8hP3u%2FrqyiyQX%2FBXX2yh8hf3jar9V%2FN9VvyAKhr5ujPToqshypyQuAt3VWPhyiyGY%2Br9Xn1nXSyh8ht3zZrnkhMhyhBdHa1nohMhyhbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 00:48:51 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\nset-cookie: ss_uid=7a397ce18309ee0114bb70d2e2a9f58e; expires=Fri, 06-Aug-2027 00:48:51 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a26a09d12ca2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":836,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"eaa5288346f7c4db08fd75f0b8e4d34e","sha1":"cfabd7c7363b5c6fe43cbf905bf14182ae1b30da","sha256":"aa3df802d770f2d9681b06da664ae819ade8fec26da1e3f1c69df94761ca73eb","sha512":"ce895bb78fbf42d2ee54ba3f1f397a40fbe19a9c7eca86fa25ab943d717a7ac99b16ede7378e39fc10efc9ab449a39435ea49ea3562ca69d18aab71a2d6dcb69","ssdeep":"","tlshash":"b7b01231101c01c30e6c404d24123256489010185e5087528cbc4200538c04a7202070","first_seen":"2026-08-06T00:49:25.939835Z","last_seen":"2026-08-06T00:49:25.939835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/icon_box.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.788Z","timestamp":1785977330788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/icon_box.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-114e\"\r\nexpires: Sat, 05 Sep 2026 00:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 905\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jA%2FLv1r%2FWCkNs%2BChLjpH4JAAWdi7Ja%2FNrOEgEaQax%2BkyjwzHM3t2xqKOGpATjLddeD%2Bm8uRSTH2YNQy%2B2iWiG1wTnGhAjdEeGSaZc%2FnJIIY9ZmI8OVHMLaz%2Baqd6JdJP2%2F3YrocwhI8xIATSF%2Bbc%2FxMLesg1fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cd6c7b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4430\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4430,"size_decoded":5262,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"6acc5ea63480977112e33d4e21c4cbef","sha1":"692bbadde81ff9b82b0343fa4c05dc82ad076cdd","sha256":"ea7e56e5af17e18a1e12e514e32a3ef40928d522aeb031f1388c2d9d7796f515","sha512":"2fc39f0266ca57bec9808ca8e074c3fe6e823422ad950d896e4b66df066ca5dc80ed991796bee82acd0388a206fc470404c4068a82776f6406872bb3e1878ea2","ssdeep":"96:17vXZylQIxi/7YSvkYjYBQi1E3z5Opfgqgz3q85dze:1LXolQIxizsYp9+fgqR8DC","tlshash":"2c919ebc27ed8f93c30cc2fa4a17a722c4a06437e20ba190c6fd9340ebb6166416538c","first_seen":"2024-08-19T16:11:10.099083Z","last_seen":"2026-08-16T07:43:55.988979Z","times_seen":649,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.188Z","timestamp":1785977331188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Wed, 05 Aug 2026 06:46:00 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A72DC283B75C13030A92607\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Tue, 04 Aug 2026 03:48:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17389672731008990191\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: QUYS0PYmdi3UBkqdEfghww==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 52b109b1375547c721208eb7c7b3185a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: MUFxX6Gc5zXjo7iQKTURh9-QDt585NpvB3wc8-oDqCAsaDy520YT5A==\r\nage: 64970\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19114,"size_decoded":7683,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19113)","md5":"414612d0f626762dd4064a9d11f821c3","sha1":"1dfc6b06d8e4ca15ca986617d42e38eae947e94d","sha256":"39d68e743efe9cd9348cdd0e395ba726e43fba69c9288ca14554821d55969fe2","sha512":"87034b7526f8ef8dca2da1c61920e35f138214e42516e48057c3b39ee646a012685a924eb7155a60e8baef89aafc2ae9569f0d6e3635a3d812dfbeb95584d8fa","ssdeep":"384:5rlwqjdJMrxZ37t3XcCCcEvX5GG62NzbtJ5bOSKOjPComEWaj:tlwB329IBAbUbOjPComEWaj","tlshash":"d182b3c974eab58103927078153fa04bf1b37836556dc629a269d1defcbc08ee227d38","first_seen":"2026-05-14T12:23:11.031581Z","last_seen":"2026-08-18T14:23:27.502891Z","times_seen":354,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/js/pages-account-bills~pages-account-deposit~pages-account-index~pages-account-message~pages-account-pa~0a2392ec.bf2d23c9.js","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.462Z","timestamp":1785977330462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/js/pages-account-bills~pages-account-deposit~pages-account-index~pages-account-message~pages-account-pa~0a2392ec.bf2d23c9.js HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a617cb0-d91b\"\r\nexpires: Thu, 06 Aug 2026 12:33:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 906\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRJ9Kw5y8QeZ6X6BmylvVsr6iAEUV6lVcgpuD2W80j9LCOJKnqjeAFhHAJa%2BjwCxFrfkZnddKr527%2BdVpj3GE1uj8JTGistIauDhq%2BZNDevDES4fGlz7StZUqMtkPeupbw4eNlskD76k%2FFuP94lMvXmPEQLHLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a26a09cb5c4d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55579,"size_decoded":33010,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55387), with no line terminators","md5":"7ee754f37388f72ab06e7d32679dd5bc","sha1":"6ed5932806c0bcb33a2beaf54fa6119f2cd2530a","sha256":"0c38a6ac72329fb900803b0dd53d07f49192a67bb46d2621d0258ae6257288da","sha512":"3a64ed756849fdcbb75d9b3c252ea3bc2ace68e22935d82b4620becde503897c791fc31419e92a9ac32a119cf1f5230290c7f76117acff2b3d864c55ac754f60","ssdeep":"1536:hFTsYId0FHoMqu7NdEAaM2Ol51hwJX2RcJZHYpN7xCIx/+eJF4cL3nnisGQaOmvM:hJsp0NVr7fnaMj51hwJX2RcJZHYpN7xT","tlshash":"9243eae6e10c1cd17f7bcc8f6244235f6549ff62d9968dc8f126564c8ce23a021a9b7a","first_seen":"2026-08-06T00:34:21.319093Z","last_seen":"2026-08-06T03:54:27.132691Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/partners/f1.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.792Z","timestamp":1785977330792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/partners/f1.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-10af8\"\r\nexpires: Sat, 05 Sep 2026 00:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 905\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sadkEFev42Jr2%2FdUE7OB%2BacT77WWUqwT10enFqTgQp%2B5nzdcylG1%2FKoT6fTi8sLAG4Nn7W%2F1FuWX2%2FR26rxt7d%2B%2FHEFL8KNgqCRgqolTNY3gL9sstgXjmX0bkpHltYyUCUGuGXSuwtVMGOO5bNnCPOPk3C35WA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cd6c805695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 68344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68344,"size_decoded":69170,"mime_type":"image/png","magic":"PNG image data, 218 x 104, 8-bit/color RGB, non-interlaced","md5":"5f53a9c6b503c68211250213450e50ff","sha1":"171475b87dc4413bc263090278c98644fe79000b","sha256":"6618aaca311be9e830fbba76b6f6923b7f4c0f4c6ec51ff5b5442b0fc69cb74f","sha512":"10998784ceb1f2d436710a000ab03b7a47eb08b75595c5f18033947a827502122f1cd5465dd3065b73402104415f99da3deb9edbb4002889c8b9a5268b3dd71b","ssdeep":"768:rf94CCAkohkLVuBtYIZyACgZanbK3h/TuL4kPvPDGOZ+:nkDLVuBWUyBgabKtPkP69","tlshash":"31638602bf05e806e4582e758d76cbe96320fc485f25934739dabe2fbdae2d35d12244","first_seen":"2026-06-05T02:03:32.200962Z","last_seen":"2026-08-16T07:43:56.108075Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/recent-msg-list-v2?login_token=0ab112dca3bebb27f591208d0287814a\u0026limit=20\u0026sender_type=0\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026direction_type=0\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332535\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:52.542Z","timestamp":1785977332542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"OPTIONS /chat/chat-msg/recent-msg-list-v2?login_token=0ab112dca3bebb27f591208d0287814a\u0026limit=20\u0026sender_type=0\u0026chat_user_id=da8545c249c83c391c8d2f64a1748b0c\u0026direction_type=0\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977332535\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 00:48:52 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a26a09d8793756a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":584,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T14:37:28.899243Z","times_seen":17956565,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/tabbar/account.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.499Z","timestamp":1785977330499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/tabbar/account.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-381\"\r\nexpires: Sat, 05 Sep 2026 00:33:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 906\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAZjy11TRGU37fr4pe3G5UbQPpVx97dYmU6eT2vCOHT92mLA%2BNW3rveI1BG6SIsd6%2B5xdCt9H2AdLujOms%2F1qgDRFT835zKDJ6e706qCbsPpZlrA65vNXm4d6Dla90YpJRL4o1ZOlu%2By399N6xD7o5UB757awQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a26a09cb9c555695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 897\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":897,"size_decoded":1711,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"22efb4d5304c2a4a9ade526451e40a24","sha1":"9ca4ca4ee8e5d8d841c83fd638d6a0ed8742b143","sha256":"7a1936376e28d918f93463cdbe792da24ce8cb40ce017c1cbbcb3f54b2e0f1b8","sha512":"a10792e46dd0975ea1046f588df6308724b105dcb958f703c8064b4971d67b36e58cdab11e1347bf9bd30ebcbf02c1a75dbdf0ad4c31fa0fead33766eb0bfeb0","ssdeep":"","tlshash":"9911e6fb13850028e274282b64a23745ea9798f8027fc07b0c4084f3e91b8bc80e3c0e","first_seen":"2025-08-11T17:15:18.625211Z","last_seen":"2026-08-16T07:43:56.018995Z","times_seen":81,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/partners/f8.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.802Z","timestamp":1785977330802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/partners/f8.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-10ffd\"\r\nexpires: Sat, 05 Sep 2026 00:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 905\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UrR842KcXhFoElcvBxgSqCvhjW5TpSGqxBWNXSsuw6l72cV6ol3tPRSA2J5pPERlDFp7SYEScylwe6snJP8RCB3kcqRYuYdMqUZp7jSQ%2F9dGwX7eAKLdm1W2qBE%2B16EmIh9He3Y5cGdYxLDIx5XjF%2B3%2BUpGSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cd8c885695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69629\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69629,"size_decoded":70447,"mime_type":"image/png","magic":"PNG image data, 220 x 105, 8-bit/color RGB, non-interlaced","md5":"ac22017122bef43d600eb9dbe43362f9","sha1":"781b225ab3506f16ad3cf2af9f56025845608100","sha256":"9c839b848d08817f6ece0546cab69091c8faf7c6f8b54e9a873cdfdff1b4c1c0","sha512":"76af067f86d586b1a4d7ac7c364a193f633ab31c4b1827582add6bb3a61155a3f81e031f65db8121888ef3ce6b0c19350d737dfd1b2b0d8c496ce342590a86b1","ssdeep":"768:/soAhYVifBZ6Guoi/evl/zkdf1Uw9cs8Cvjyg886YO7mp:/s9SViZZPuoi/e9/wh1Qs8l9SO4","tlshash":"d2630c42bf45e802e4652e758c7ac7e86321fc489f25934734c6bf2fbdae6d25d12284","first_seen":"2026-06-05T02:03:32.229592Z","last_seen":"2026-08-16T07:43:56.009926Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.361Z","timestamp":1785977331361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/marked/v14.1.2/marked.min.js HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Wed, 05 Aug 2026 09:52:13 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 20 Sep 2024 06:38:39 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: JFBntxsrfZ64VoXBE8CHtNjr4.xFrBV4\r\ncontent-encoding: gzip\r\netag: W/\"4726c8d370952011c5137ee8e13eb6bb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8c3a87d110aff35fe17513b9a9ad30cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: mEAjY450l9Heb61TzEOBcrlOF0-HkwtGFib95iA8dJ4gXCTHkCcq2g==\r\nage: 53799\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":36489,"size_decoded":11847,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36340)","md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-08-18T14:23:27.362103Z","times_seen":2849,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/pictures_t.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.787Z","timestamp":1785977330787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/pictures_t.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-984e\"\r\nexpires: Sat, 05 Sep 2026 00:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 905\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5p1icJJekEdmdHEsrDlBALLN603D%2Fvy9IvvOU1jX6%2Fi%2BiERMxeL31CxaqGiTHWaUS9GyilsSwpTElHTOyRTOKjd32rizXgeBZc7ZB8txS9H0XDWwAwKOnHKYcMXalzwiXW6q154H%2F0e5R2deozHc31ITcRcpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cd6c7a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38990,"size_decoded":39807,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 564x352, components 3","md5":"24006d4da954ed02b0189b1b74c3cd4f","sha1":"ebba860be00103b1eb42f65a6c5606a186c55783","sha256":"bc736c5c328ca94627c1735a13a2d7e11b6902f206c9aa2abf181cf69fd398f0","sha512":"c5c34396c15996354af32d8df293c4da3440a07134deb85e67045a898719b58c685d0c178bcd89ac1f0bfa9afe5554e772943433766b6a78c6a092e251798a30","ssdeep":"768:G1nDbaEclQ5vL46ZZHzacyJ2j/qqg/SSTSzTTe8kvOa3INxv8mYXUAUiMB:m3z0KHza/J9rSMOTeJma3av8mPAdMB","tlshash":"c603e12a2988cad5e516b47463d7a7c5f208fd0f3b55630a36e71c256b3e24877b0d30","first_seen":"2025-08-11T17:15:18.612911Z","last_seen":"2026-08-16T07:43:55.982651Z","times_seen":69,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.083Z","timestamp":1785977331083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 04 Aug 2026 03:49:53 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A7161617732EB3536C30482\r\nlast-modified: Tue, 04 Aug 2026 03:48:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15204050908943186341\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: tmwoyG96dIrSkoJ+QtzkGg==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 52b109b1375547c721208eb7c7b3185a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: SyQ7gbjO-7cUnruK9Y0omPHqO6Si1132Ra9MmE_OS5vgPVMrqzb2EA==\r\nage: 161937\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1088,"size_decoded":1261,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1087)","md5":"b66c28c86f7a748ad292827e42dce41a","sha1":"28a917632ced237bd795c1281b11b8290cb8da17","sha256":"84636d7f6fa124325a937f89a84a68dc04da016f26cab395437e5bf20ccf6c52","sha512":"8526b687f02e998d64e6d51225d856c9c20deb61981306d199f3288e6f5db88b6f71e1b0b45f4d43e7086817a3b3c46ef4f4b29b84077f92af1afc1c79c58f19","ssdeep":"","tlshash":"6a11d0c87ba378356389446b70bf865bb6b21441680c8000d19fe4a57828eb4c737e9c","first_seen":"2026-05-14T12:23:11.012383Z","last_seen":"2026-08-18T14:23:27.856997Z","times_seen":368,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=4cad1d17b377ec7487b9d80aa96ca9f9\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977331361\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.373Z","timestamp":1785977331373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/log/log?plugin_sign=4cad1d17b377ec7487b9d80aa96ca9f9\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977331361\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 580\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":580,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHGlNupteHhyh8htTV8rCyiyGI%2BPnXbr3umN9jWsnohBdH4P9wVPhyiyhypyQrpPStb1nohMhyhBdHQP3zSNSHVrhyiyhypyGHWP9abtTV8rCyiIh8htQXqf9VWPhyiyGsjBA6%2FlAo%2FluFjI5RaMeOalAv4I2skyh8hP3u%2FrSX%2Br9DhMhHVPhaXDqypyGXqPdyiyQ%2B4tTY5MhFWf9aAIAt%2BInokrCmA1NcmsnHWtQX413XAP3zarTl%2FtNl%2Fs9lWyqFhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8ydypyQjWrazvsNc%2ByAEgyGcEPnX5t3uwfdyiyAOSMeDmI5f5l5O5IA6hBdHGrnmVfQu41nz%2FyAKhtAyhbC8hf9cZNSHVPQcVfVzwP9cVyAKhf9%2B%2Br3zSyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 00:48:51 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a26a09d12ca1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":631,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-08-18T14:23:27.964017Z","times_seen":2731,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":6,"connect":9,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/js/chunk-vendors.7a18bc5f.js","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.191Z","timestamp":1785977330191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/js/chunk-vendors.7a18bc5f.js HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a617cb0-ca652\"\r\nexpires: Thu, 06 Aug 2026 12:33:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 908\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kvbmByIgbThxqV0udbvJHV4tctHEzrCh0%2BWf8zt3barxHG7GppeB3i%2FVak%2B8IqHbwhkeQOCAdGs9OD%2BoEQSS%2B1ibQA%2FGxlGw4Zoz4SMCb0absUx%2FX1IR6SJRWyAJGTIPyfxDsKYw%2BhmPWIC92EiJnwbr2iRpDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a26a09c9ac335695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":829010,"size_decoded":292623,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65192), with no line terminators","md5":"68858237e334922290f783e204f35dce","sha1":"717dd13a47a18f30cf25199cd5735129063ba75f","sha256":"bb7ca93138e3d35e1597136c44ebe63d3968ee2333247ab349950c0d38abd859","sha512":"bdc360b025e65423832287c7dee817f93739f4e0278bbb13e575336e174a9c9bbea8bd39288f2b180ab7e51229e6f3fe968bd00cdb17457f3c41b5c22d143d90","ssdeep":"6144:OXtwTf3yPbMnnYKvENTlWbEvm/dO+Qh5V2viznm51/vxqnRuJwI6FK4Ikvy:OdwTfFnYkEtA3OIvizE0E0/Ikvy","tlshash":"e505f78df286b0b60ae730b5403f220bb2376959b40a84d4f675e4d4ad7894e6237f7d","first_seen":"2026-01-26T03:42:49.720514Z","last_seen":"2026-08-16T07:43:56.056835Z","times_seen":14,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smc67a5d8e.cityabovetheclouds.us.cc/static/images/icon_box_2.png","fqdn":"smc67a5d8e.cityabovetheclouds.us.cc","domain":"cityabovetheclouds.us.cc","tld":"us.cc"},"ip":{"addr":"104.21.32.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:50.789Z","timestamp":1785977330789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cityabovetheclouds.us.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 01:38:06 GMT","end":"Wed, 21 Oct 2026 02:36:35 GMT"},"fingerprint":{"sha1":"63:CD:F1:1C:FE:E3:4B:AD:F9:9A:AB:F6:58:A8:C4:19:02:0B:BD:78","sha256":"E8:7A:99:43:E0:B7:E7:7D:FD:EC:B7:23:38:17:A2:8D:D4:38:55:2C:58:AB:0A:39:C7:57:3B:C4:C3:7C:30:EF"}}},"request":{"raw":"GET /static/images/icon_box_2.png HTTP/1.1\r\nHost: smc67a5d8e.cityabovetheclouds.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 00:48:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 23 Jul 2026 02:30:08 GMT\r\netag: \"6a617cb0-124f\"\r\nexpires: Sat, 05 Sep 2026 00:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 905\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0cJiIuSPsm9d9TViwO8jtJqk0uc8AO%2BNC56bLyYoxjI%2FfPmCNAylGqyhO1QiD74yiPGJOf7B%2FtYMFceLSpFfm%2BlBRMId%2Bu5yAC0WVOQhrJp6hHI%2F1vzp0xq05LP2JPpthZXw3b0wZBgQRSDDcD%2FKrkxTaRDlLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a26a09cd6c7d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4687\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4687,"size_decoded":5509,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"3cfe19ee2948dc3d801afc4b6c25339f","sha1":"1e908d24b3bb21908191a504c74ee0be3e3a4d2c","sha256":"e71399ca790a567d6f46af5c957a8a4fbd3631a19f9d7c527cc82e57a4048cfe","sha512":"5632e7dff15dfc0b4f46526316d8ae3c432186f1d93c09ca3705c119eee3403fff465bd928c4858de2c8df0ab25588ba8072ca07f91b54b7d5c373292676d2b3","ssdeep":"96:BGTOMOPApcEyL+sCKjU1gjfe/2dYwZveG9evGEHK1:wT2YpcVdbc2dYwZveKetq1","tlshash":"aba18ef8b661c7fdb42d39b13a922c4bf51914c709e88f0eda4e4d5c908bd08d537682","first_seen":"2024-08-19T16:11:10.100895Z","last_seen":"2026-08-16T07:43:56.019732Z","times_seen":653,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"smc67a5d8e.cityabovetheclouds.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:51.098Z","timestamp":1785977331098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Wed, 05 Aug 2026 06:46:00 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A72DC28AFBCCE31379578A3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Tue, 04 Aug 2026 03:48:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16006101709107724808\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: pSKvDRSuiJgmlqAO1ojXaA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 52b109b1375547c721208eb7c7b3185a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 1cI6VhYg_VQpt6GijCUn8YBvCXraWmRiSjJGwvkRoKf9QEf6V2HPUQ==\r\nage: 64971\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10994,"size_decoded":5103,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10993)","md5":"a522af0d14ae88982696a00ed688d768","sha1":"52d0dbdceed187b0640477f84ce6e87b6b288399","sha256":"22aa0d9ec22b3a0e596d451ce25db74406b7afe30e545a8d7fe5cf1e80f12465","sha512":"651748990ba0f8ecea98a24db1303f2ce00269f110124b3be05041db97b603ad61c499c2ce5d6c3a2f94c0867ad1d499f22af55b3708ca68fee008f1a7346206","ssdeep":"192:cdoWYG4JezFRvndgQCI2p3wQ7LgaEU/IUKe9uZmy0dDrYntCKw9Lb2Vy2DdMiOAi:LWYG4JezF5dtyLgjU/YmyykcB2gqhmnD","tlshash":"bd32f9193427697992f808c45079a311b6fd26633006d4a0f3bcceb9b555f8382b9ef9","first_seen":"2026-08-04T10:26:32.126626Z","last_seen":"2026-08-10T19:18:27.075957Z","times_seen":16,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=6959e5bd470446b8adeed402e1052671\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977333292\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smc67a5d8e.cityabovetheclouds.us.cc/","date":"2026-08-06T00:48:53.296Z","timestamp":1785977333296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/station/log?plugin_sign=6959e5bd470446b8adeed402e1052671\u0026plugin_id=g1qlt2b\u0026over_time=\u0026env=chat\u0026_=1785977333292\u0026_lt=0ab112dca3bebb27f591208d0287814a\u0026_u=7a397ce18309ee0114bb70d2e2a9f58e\u0026_xma_=728147 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 579\r\nOrigin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://smc67a5d8e.cityabovetheclouds.us.cc/\r\nCookie: ss_uid=7a397ce18309ee0114bb70d2e2a9f58e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":579,"data":"data=0qHafQ8hMhHKtTc8f5KWBSIws5sSs2XvM3D%2Fs9V40nuhPSrVt3%2BVs9jWtnc5BGX5BQIABqlWyh8hr3zwsnV%2FyAKhf9aAIAt%2BInokrCmA1NcmsnHWtQX413XAP3zarTl%2FtNl%2Fs9lhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8yh8hfQXQyAKhyh8hP3u%2FrqyiyQX%2FBXX2yh8hs9%2B%2Btuzaf9XqN9VvyAKhr3OkI2oas5y4Mnlkl9l5M2uAM3oqrAs4s2OSIe%2Bhl3lhBdH8PTXG1nmb1nohMhHGlNupteHhyh8hsnI41nz%2FyAKhf3uGrXrErNfhBdH4P9wVPhyiyAY%2BsAOjlQcAs2IhrnHhlAtQI2vjlA6kre6qMefkl2c%2Byh8htnVvyAKhI9O5M2tAr2Okl56mrnD8l2O4sQySl3oqr2H%2BMnsaM3Dhbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 00:48:53 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://smc67a5d8e.cityabovetheclouds.us.cc\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a26a09dd1979783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":661,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"eaa5288346f7c4db08fd75f0b8e4d34e","sha1":"cfabd7c7363b5c6fe43cbf905bf14182ae1b30da","sha256":"aa3df802d770f2d9681b06da664ae819ade8fec26da1e3f1c69df94761ca73eb","sha512":"ce895bb78fbf42d2ee54ba3f1f397a40fbe19a9c7eca86fa25ab943d717a7ac99b16ede7378e39fc10efc9ab449a39435ea49ea3562ca69d18aab71a2d6dcb69","ssdeep":"","tlshash":"b7b01231101c01c30e6c404d24123256489010185e5087528cbc4200538c04a7202070","first_seen":"2026-08-06T00:49:25.939835Z","last_seen":"2026-08-06T00:49:25.939835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}