{"report_id":"89be54e5-4395-4f27-8d10-86d6530ee196","version":6,"status":"done","tags":[],"date":"2026-03-04T19:32:44Z","url":{"schema":"https","addr":"walstack.sale","fqdn":"walstack.sale","domain":"walstack.sale","tld":"sale"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.walstack.sale/","fqdn":"www.walstack.sale","domain":"walstack.sale","tld":"sale"},"title":"Get a $500 Walmart Gift Card","dom":{"size":19407,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18973)","md5":"f8bff1981f81eea3f7b79d13dd8f6ebf","sha1":"8c7dd24c0c1fad6d82c0f0cddf51208997f81ded","sha256":"8b0dabb003fbc4be480e2b51ecbfe6163e392e22450f58d813a47df3ac30f6e1","sha512":"6d5e189a5d2c651fc4f54409054f69694b271dfe738b567ea74f50e1828b88c2eafe07caa41d2deec3e1ebd95f451507b7523ccddad758f849a2de3369a1183c","ssdeep":"384:my2t8P37TUOIf1EXNMIz+8jx2nQWi7KRmCdYFPjsQqStPznXT9Ow3yNro3fyOdZE:3Y8P37TUOIf1EXNMIz+8jx2nQWi7KRmw","tlshash":"5992507901072c6aa20b23f5f499ef0b54f6d781f7670c5dbabd0279a7c1c609b4b2a4","dom_hash":"domhashcc32fc6616caa4718f6868bd51dbacb6","first_seen":"2026-03-04T19:32:57.733227Z","last_seen":"2026-03-04T19:32:57.733227Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"walstack.sale","fqdn":"walstack.sale","domain":"walstack.sale","tld":"sale"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T19:32:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.walstack.sale","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-04T19:32:45.335407Z","last_seen":"2026-03-04T19:32:45.335407Z","alert_count":0,"request_count":4,"received_data":269454,"sent_data":1803,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-02-25T19:31:52.588429Z","alert_count":0,"request_count":2,"received_data":1581013,"sent_data":828,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"walstack.sale","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-04T19:32:45.333707Z","last_seen":"2026-03-04T19:32:45.333707Z","alert_count":0,"request_count":1,"received_data":794,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.walstack.sale/assets/index-QcWE9twu.js","fqdn":"www.walstack.sale","domain":"walstack.sale","tld":"sale"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c95efb6d32e66b4f2c3c1d851a659016","sha1":"efd809cd5d669ffa7d5e2db87ec4389238c056f7","sha256":"78e4e680ca9f80795dee170e61ab16d390182d1baaa35f5f8dce69d3c6c54dfb","sha512":"f01dd984f94e9d97ace89e379716abc698d7fe6786b3dd2f8d37a7b4d56657c7ca8dc39d7e57d40d29f920d6b94560d3e5811c83e855f6f6ffd7ed8706558598","ssdeep":"3072:DkDWKUwFzR4dnD7ZtRmrzvb3Z7JKziq1f4LFATy:DkFUGzCPZtMzJ7JAyaTy","tlshash":"27141aec72bea7166eb345a610af5507b23c39336c4c4c70e210ed99267444a51bbfee","size":207656,"data":"","first_seen":"2026-03-04T19:32:57.742723Z","last_seen":"2026-03-04T19:32:57.742723Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.walstack.sale/","fqdn":"www.walstack.sale","domain":"walstack.sale","tld":"sale"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T19:32:26.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.walstack.sale","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:20:14 GMT","end":"Fri, 29 May 2026 22:20:13 GMT"},"fingerprint":{"sha1":"4A:4D:6E:13:9C:8C:26:99:3D:CE:71:4C:26:25:05:C6:43:67:BA:66","sha256":"2C:1B:D6:CF:27:07:7D:F9:BA:FF:C2:28:C2:E4:16:9B:6F:E3:C8:1D:24:C6:D5:72:42:46:65:CB:94:8D:55:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.walstack.sale\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 224575\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 19:32:28 GMT\r\netag: \"709723ecd4258e88e8bcac9e8566cced\"\r\nlast-modified: Mon, 02 Mar 2026 05:09:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hj8dw-1772652748189-52a01abbc414\r\ncontent-length: 476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":476,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"709723ecd4258e88e8bcac9e8566cced","sha1":"dc77ee04bae4b07ba7e7407dc91be0d55c77a4d4","sha256":"7983d5bfe7296de8463aa7bc801d563cb2da6395a24c4344c4e6780bbb2c518a","sha512":"07bed2cdfde147e0da99580ca9f0913a4e561e055b59e2b2c5be3f7b2b68c9d742b54c548e3d477e1362f1e3be3d3990eae8d54e824f5f8a10270233776ac920","ssdeep":"","tlshash":"89f0d44984e08d05533043642fc1f5085997eb4787896d4871a7707d4fc4782cdef9bc","first_seen":"2026-03-04T19:32:57.739913Z","last_seen":"2026-03-04T19:32:57.739913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3140,"timings":{"blocked":1559,"dns":1530,"connect":1,"send":0,"wait":10,"receive":11,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.walstack.sale/assets/index-QcWE9twu.js","fqdn":"www.walstack.sale","domain":"walstack.sale","tld":"sale"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.walstack.sale/","date":"2026-03-04T19:32:28.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.walstack.sale","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:20:14 GMT","end":"Fri, 29 May 2026 22:20:13 GMT"},"fingerprint":{"sha1":"4A:4D:6E:13:9C:8C:26:99:3D:CE:71:4C:26:25:05:C6:43:67:BA:66","sha256":"2C:1B:D6:CF:27:07:7D:F9:BA:FF:C2:28:C2:E4:16:9B:6F:E3:C8:1D:24:C6:D5:72:42:46:65:CB:94:8D:55:E1"}}},"request":{"raw":"GET /assets/index-QcWE9twu.js HTTP/1.1\r\nHost: www.walstack.sale\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.walstack.sale/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-QcWE9twu.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 19:32:28 GMT\r\netag: \"60af782305d9d85b74a1ec579f89042e\"\r\nlast-modified: Wed, 04 Mar 2026 19:32:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::br9vf-1772652748417-14b715f3b878\r\ncontent-length: 66439\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":207656,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41537)","md5":"c95efb6d32e66b4f2c3c1d851a659016","sha1":"efd809cd5d669ffa7d5e2db87ec4389238c056f7","sha256":"78e4e680ca9f80795dee170e61ab16d390182d1baaa35f5f8dce69d3c6c54dfb","sha512":"f01dd984f94e9d97ace89e379716abc698d7fe6786b3dd2f8d37a7b4d56657c7ca8dc39d7e57d40d29f920d6b94560d3e5811c83e855f6f6ffd7ed8706558598","ssdeep":"3072:DkDWKUwFzR4dnD7ZtRmrzvb3Z7JKziq1f4LFATy:DkFUGzCPZtMzJ7JAyaTy","tlshash":"27141aec72bea7166eb345a610af5507b23c39336c4c4c70e210ed99267444a51bbfee","first_seen":"2026-03-04T19:32:57.742723Z","last_seen":"2026-03-04T19:32:57.742723Z","times_seen":1,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.walstack.sale/assets/index-CNoWfRIK.css","fqdn":"www.walstack.sale","domain":"walstack.sale","tld":"sale"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.walstack.sale/","date":"2026-03-04T19:32:28.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.walstack.sale","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:20:14 GMT","end":"Fri, 29 May 2026 22:20:13 GMT"},"fingerprint":{"sha1":"4A:4D:6E:13:9C:8C:26:99:3D:CE:71:4C:26:25:05:C6:43:67:BA:66","sha256":"2C:1B:D6:CF:27:07:7D:F9:BA:FF:C2:28:C2:E4:16:9B:6F:E3:C8:1D:24:C6:D5:72:42:46:65:CB:94:8D:55:E1"}}},"request":{"raw":"GET /assets/index-CNoWfRIK.css HTTP/1.1\r\nHost: www.walstack.sale\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.walstack.sale/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-CNoWfRIK.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 04 Mar 2026 19:32:28 GMT\r\netag: \"badaee99f65de485dee3142847fbbd86\"\r\nlast-modified: Wed, 04 Mar 2026 19:32:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2pv9f-1772652748420-457be90edd38\r\ncontent-length: 5333\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23801,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23800)","md5":"1e424977f8e0a75dc28376bb7bfa7688","sha1":"2206d7faf70138ee0648b8ab0602d40606464cbf","sha256":"dd7f1a5b520c32fe943adb4137961214a26f809dc3d4713355242fdc427013a3","sha512":"126b01786a4ccd87cbda9409f0a71cb0e4fcfd3e1280b882376349d8537b5209b98a67ce54bd1e7f6b9aa0797469232f56058ee488383c997a3aef105ab17db9","ssdeep":"192:lvqzO01+WTyRkmwaAQZVrm2qSUW8Thb4rjWeh/WEa51nWEVPSQ76a2FOLNTjSfOQ:9kHaAerm5SUFThOjd/WEynWEVVrjSfxP","tlshash":"b7b23f60b366c9bfec6368b6f79cb41c61296081dd3556d8ff4322027ad77f1098ab24","first_seen":"2026-03-04T19:32:57.746349Z","last_seen":"2026-03-04T19:32:57.746349Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/Jwzg5bZb/Adobe-Express-file.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.walstack.sale/","date":"2026-03-04T19:32:28.739Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Jwzg5bZb/Adobe-Express-file.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T21:30:22.615566Z","times_seen":17696876,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/Jwzg5bZb/Adobe-Express-file.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.8","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.walstack.sale/","date":"2026-03-04T19:32:28.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Feb 2026 07:06:34 GMT","end":"Fri, 15 May 2026 07:06:33 GMT"},"fingerprint":{"sha1":"48:08:17:3C:24:BE:AF:E3:A7:15:95:2B:10:C7:81:6D:71:75:A1:79","sha256":"5C:C2:85:75:C7:FB:D5:BF:48:B2:53:D1:3F:41:4C:33:F4:A5:D7:7F:D0:00:DA:48:50:93:31:14:32:70:1F:0E"}}},"request":{"raw":"GET /Jwzg5bZb/Adobe-Express-file.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 19:32:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1580648\r\nlast-modified: Sat, 28 Feb 2026 18:21:56 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1580648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1328 x 800, 8-bit/color RGBA, non-interlaced","md5":"16934a06bf4cca59105c82430afeb3b9","sha1":"f85e2c748979b08b56be2224a6a09663ac6159e8","sha256":"933ede1017ba1b85e86d034000be8b07caa46a259079994e622a4e0b934df3b1","sha512":"b15d14070d020a110c6227972d55549d568b1a452e99b9f6697611b3dc755e64ea03f5ce5a1e5ec703b7ab29b9b1f082c5112b0efff57dc50a6a3107d4c508c4","ssdeep":"24576:hRfDS/75hQkKelDZ5cuYAO0rS/uJBFmkgaaUo8diqpvw:nA7/BfltOQcur0PaDdvxw","tlshash":"77253351d1e3cbb7d573306a8a6765660c2a209827bd43195e3ec8be4d1ceb9ceb0f50","first_seen":"2026-03-04T19:32:57.75116Z","last_seen":"2026-03-04T19:32:57.75116Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1733,"timings":{"blocked":320,"dns":1,"connect":280,"send":0,"wait":452,"receive":641,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.walstack.sale/tab_logo.png","fqdn":"www.walstack.sale","domain":"walstack.sale","tld":"sale"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.walstack.sale/","date":"2026-03-04T19:32:28.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.walstack.sale","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:20:14 GMT","end":"Fri, 29 May 2026 22:20:13 GMT"},"fingerprint":{"sha1":"4A:4D:6E:13:9C:8C:26:99:3D:CE:71:4C:26:25:05:C6:43:67:BA:66","sha256":"2C:1B:D6:CF:27:07:7D:F9:BA:FF:C2:28:C2:E4:16:9B:6F:E3:C8:1D:24:C6:D5:72:42:46:65:CB:94:8D:55:E1"}}},"request":{"raw":"GET /tab_logo.png HTTP/1.1\r\nHost: www.walstack.sale\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.walstack.sale/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tab_logo.png\"\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 19:32:29 GMT\r\netag: \"0b1d9c2e640356c043ab0662268d61ae\"\r\nlast-modified: Wed, 04 Mar 2026 19:32:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bkpjz-1772652748902-8a03ac607268\r\ncontent-length: 35384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":35384,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 963 x 1024, 8-bit/color RGBA, non-interlaced","md5":"0b1d9c2e640356c043ab0662268d61ae","sha1":"8004326889025ea37212c48b1044413330628242","sha256":"377b6acd82fe9597ada986a94d3a527a44e43036f3ad0af6e4545a6d13568b04","sha512":"091039aaf75db4f9b590a02efcab4ecb45dc34f1fbfffc0d5c731428033906b32108c2952bf6766f055e2e77b5a90df3777642cdffca4c73ddcde541d2a4765d","ssdeep":"768:CCUPe79XEbw0jansSU7/PRZ2SyRt8Ao1H+Wzh+60NT6V0:CRw9XEMQIUbPRaRtuYD60NOV0","tlshash":"19f2e19e8ad1e0a7cf2c57bb0f038a757e5239d4cbd1239a38792c8c50091d5d7e81ea","first_seen":"2024-08-19T17:58:25.769585Z","last_seen":"2026-05-15T14:38:58.193911Z","times_seen":4,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walstack.sale/","fqdn":"walstack.sale","domain":"walstack.sale","tld":"sale"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T19:32:22.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walstack.sale","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:22:53 GMT","end":"Fri, 29 May 2026 22:22:52 GMT"},"fingerprint":{"sha1":"B0:B6:8C:0F:28:01:AF:30:81:BD:AE:7C:69:74:58:A4:18:68:7D:5D","sha256":"E1:CB:97:A7:6B:52:AE:67:81:61:12:F3:C8:E0:E8:CB:75:C9:C8:CF:65:5B:13:C1:37:AA:23:EA:EB:06:20:E7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: walstack.sale\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Wed, 04 Mar 2026 19:32:26 GMT\r\nlocation: https://www.walstack.sale/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::blmps-1772652746602-a3f47329f0b6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":476,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T21:30:22.615566Z","times_seen":17696876,"resource_available":true,"data":null}},"time_used":7328,"timings":{"blocked":3658,"dns":3627,"connect":1,"send":0,"wait":10,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}