{"report_id":"8e49280c-79dd-4cdf-8665-dafcfaf6ea3a","version":6,"status":"done","tags":[],"date":"2026-04-27T08:39:39Z","url":{"schema":"https","addr":"vayla.xyz/","fqdn":"vayla.xyz","domain":"vayla.xyz","tld":"xyz"},"ip":{"addr":"104.21.28.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vayla.xyz/","fqdn":"vayla.xyz","domain":"vayla.xyz","tld":"xyz"},"title":"vayla.xyz/","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"vayla.xyz/","fqdn":"vayla.xyz","domain":"vayla.xyz","tld":"xyz"},"ip":{"addr":"104.21.28.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-01T08:39:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"vayla.xyz","ip":{"addr":"104.21.28.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-24","domain_rank":0,"first_seen":"2026-04-27T08:09:00.487723Z","last_seen":"2026-04-27T08:09:00.487723Z","alert_count":0,"request_count":7,"received_data":4316150,"sent_data":3028,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":1,"received_data":13321,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vayla.xyz/","fqdn":"vayla.xyz","domain":"vayla.xyz","tld":"xyz"},"ip":{"addr":"104.21.28.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34b56738d6f36b779750656f8b96f52a","sha1":"3fdebc698908c831f4fb683f76103198a866ec6f","sha256":"0d3380f96885d55d7afa4984bc9036054d18dd3ab28bcabb23394ddc4fa1cb92","sha512":"0514beb4d115ead0ecc057e7ea5624beb1a449ed82e15ef9768636b9457a2de7880b450be92c086c6fc15e1506ee2ec097c48bb0d6b742eb1e987eb369daa5e3","ssdeep":"","tlshash":"13c0128851b04d79563c24ee62744a54a5a099f85266704792fc9b57998cf850a68910","size":187,"data":"","first_seen":"2026-03-23T18:50:40.575769Z","last_seen":"2026-04-27T08:39:40.216341Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vayla.xyz/","fqdn":"vayla.xyz","domain":"vayla.xyz","tld":"xyz"},"ip":{"addr":"104.21.28.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-27T08:39:15.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vayla.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 10:23:40 GMT","end":"Thu, 23 Jul 2026 10:23:39 GMT"},"fingerprint":{"sha1":"4B:A9:82:20:2B:F9:33:49:62:6C:EA:7A:97:16:09:59:D7:BE:0C:C1","sha256":"E9:3A:DA:D3:15:D3:55:BD:96:C8:9E:BC:5C:1A:E9:80:3F:26:4B:C9:DC:BD:04:01:CA:0D:FC:07:AD:40:70:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vayla.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 08:39:16 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 24 Apr 2026 11:02:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHxgpdhd26hM1JR14HT0g845E0gf2ol9iZ5DDesIy6ssVmNU40cgYv2HwyphB7AXDOJ%2BKWbd3sMbYqXR9FilfN5Vx1m317L%2FFcJwPDGbxDRJcwyyC0vYbrr%2BqmQ%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f2c84053d6b32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":47014,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (324), with overstriking","md5":"b98db549a1edcbb3c10b91989f4e9037","sha1":"65d27b808100ee2cd5be3cd878ca4750b4012a37","sha256":"c33eb4884b7683df0961f672394c3a5940cdd015f711f0d3222b09334621f301","sha512":"b101edc6ce29479781ace23b3ff7ee59ee019d626eb501dba82a73d2a7bc6989c3c9bd800aaf7987a86bc4d97e4c55d171090d06dbdd5975f57b611624457565","ssdeep":"384:gbC7uj5WmIP7588zv/wlLl3M/xjUfQF4LHwKaUbOQNx8fTW4xSbsji:gbCSj8mIj5Tzv/gvLxaTfawvi","tlshash":"8c23959b67f31631781b91b52beb675a3760c013c10ec9783eec42984f89aca9c6374d","first_seen":"2026-04-27T08:09:14.93277Z","last_seen":"2026-04-27T08:39:40.198353Z","times_seen":4,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":93,"dns":80,"connect":1,"send":0,"wait":99,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vayla.xyz/peak-web-v1.1.min.js","fqdn":"vayla.xyz","domain":"vayla.xyz","tld":"xyz"},"ip":{"addr":"104.21.28.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vayla.xyz/","date":"2026-04-27T08:39:16.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vayla.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 10:23:40 GMT","end":"Thu, 23 Jul 2026 10:23:39 GMT"},"fingerprint":{"sha1":"4B:A9:82:20:2B:F9:33:49:62:6C:EA:7A:97:16:09:59:D7:BE:0C:C1","sha256":"E9:3A:DA:D3:15:D3:55:BD:96:C8:9E:BC:5C:1A:E9:80:3F:26:4B:C9:DC:BD:04:01:CA:0D:FC:07:AD:40:70:A5"}}},"request":{"raw":"GET /peak-web-v1.1.min.js HTTP/1.1\r\nHost: vayla.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vayla.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 08:08:37 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 24 Apr 2026 11:02:22 GMT\r\netag: \"2ff00c-69eb4dbe-17e648cd09117a35;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 703670\r\ndate: Mon, 27 Apr 2026 08:39:16 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1839\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=juCLm%2Bhl0KA%2FRxjnksLJM2%2FCBHgdcndNIAP6JPB8gYDTelqTcI%2FZtvkv9DGyLUGQfj75c8unpeb9377YRdBhVgZxdWs7ny4I1tXzHSxPNG7qxyxej9FwQBjPu%2Bs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f2c8406da6d5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3141644,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d4361c4594028e558dd1cf8179197628","sha1":"b95a8533c096133d45a1a668771faba20c4eeca6","sha256":"8e3bf54ca59e05406739923bc0bd2ee4c4e684d639dfdbec99b71f73f3c1775d","sha512":"4f6aa5d6fc523ea031441653ac72f42ac32d6af6d0665b205a19050987b8ec346140f609ff4f05aa5276f237a7c852d69812a10bce7fddd57cc183debde37b40","ssdeep":"24576:wk0rDJewJrjbrLTbb3bO0hVSE+nM7Dk+SS+u66OKXDLHMYBrR0BRPGk0VJFgfgUr:2TXu4Twb7tk4Zwm","tlshash":"66258413a2d038d251d75fb1b62350daec2d4bafb58c9afa998cf830bce1054e5d8674","first_seen":"2026-04-10T06:42:52.423173Z","last_seen":"2026-04-27T08:39:40.201017Z","times_seen":45,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vayla.xyz/kze7avf4hx.php","fqdn":"vayla.xyz","domain":"vayla.xyz","tld":"xyz"},"ip":{"addr":"104.21.28.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vayla.xyz/","date":"2026-04-27T08:39:16.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vayla.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 10:23:40 GMT","end":"Thu, 23 Jul 2026 10:23:39 GMT"},"fingerprint":{"sha1":"4B:A9:82:20:2B:F9:33:49:62:6C:EA:7A:97:16:09:59:D7:BE:0C:C1","sha256":"E9:3A:DA:D3:15:D3:55:BD:96:C8:9E:BC:5C:1A:E9:80:3F:26:4B:C9:DC:BD:04:01:CA:0D:FC:07:AD:40:70:A5"}}},"request":{"raw":"GET /kze7avf4hx.php HTTP/1.1\r\nHost: vayla.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vayla.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.3.30\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=3600\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 27 Apr 2026 08:39:16 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bv2Oq94Qo5rgNdmFWEZLd4glcAnzwRKqYNihnwQkzQNBNzvB59CVm1jJwi1hIA1xolY0k09z61%2FZv4rlEWlIkctkhLspAkbNZUPCPh%2B40Ur95gUaf%2F4KsAoqIMk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2c8406da6f5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":238913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71ccb308c2bb2963520f06a16045743c","sha1":"363e1cd4e4ca354e778ffcff3b644ed748b2e990","sha256":"fac5f15b29717043e68375d370551ba098eae8f6de4896e1159a4e692ab9ca68","sha512":"6a8e8bb77186808fc64c461b1402585b255fa38f3fdac155fe97bc29f80e7ae03893f6874760f605b3406ee3355742bccc379aa29f018b8dd2f966b65e495db6","ssdeep":"1536:rzDDJdd+4TMp/Nzx8NN3HznCsL6mkxVeLGicWf1x5lGkhio9RNTUIIX9krz:rzDDI4CO5C79qdVIX9o","tlshash":"903475da7a92559dbe09018dcce2bc45d0558c13be5ce4a3eacefd916026b61c0cb36f","first_seen":"2026-04-27T08:19:07.613541Z","last_seen":"2026-04-27T08:39:40.203277Z","times_seen":3,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vayla.xyz/x3mrmin0i.php","fqdn":"vayla.xyz","domain":"vayla.xyz","tld":"xyz"},"ip":{"addr":"104.21.28.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vayla.xyz/","date":"2026-04-27T08:39:16.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vayla.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 10:23:40 GMT","end":"Thu, 23 Jul 2026 10:23:39 GMT"},"fingerprint":{"sha1":"4B:A9:82:20:2B:F9:33:49:62:6C:EA:7A:97:16:09:59:D7:BE:0C:C1","sha256":"E9:3A:DA:D3:15:D3:55:BD:96:C8:9E:BC:5C:1A:E9:80:3F:26:4B:C9:DC:BD:04:01:CA:0D:FC:07:AD:40:70:A5"}}},"request":{"raw":"GET /x3mrmin0i.php HTTP/1.1\r\nHost: vayla.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vayla.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.3.30\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=3600\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 27 Apr 2026 08:39:16 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=susGqDhceKIRO0X4n344N54Ak2avZpXNBgoCZDVZ%2FaMXFL8ZK7IEnsUXGUoGlC86AM4wP4SOnyq2%2BwFN5mx74pT%2FzB5Y8XTY8rEPRYq6IFdw70IIXfE%2FWgy%2BcD8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2c8406da6e5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":238912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"945f56e845b1238842987ac6c7ebfa31","sha1":"06f86361b6dd8055c8ad6b78f6fdfbcc4fad52b5","sha256":"24651911fefa17d2d98abcc6dd6fd3f4105b5acbace9a71a8619317615f55375","sha512":"89f5e32ad4c60cc602caccfc2214b3b1697fd2cd8354bde4305efcf86c450ebafeb16ded14158d6f3a925dcbf9a0da1ba7a0cefea47ea28cc6953ada1277d535","ssdeep":"1536:UzDDJdd+4TMp/Nzx8NN3HznCsL6mkxVeLGicWf1x5lGkhio9RNTUIIX9krz:UzDDI4CO5C79qdVIX9o","tlshash":"4e3475da7a92559dbe09018dcce2bc45d0558c13be5ce4a3eacefd916026b61c0cb36f","first_seen":"2026-04-27T08:19:07.583689Z","last_seen":"2026-04-27T08:39:40.205335Z","times_seen":3,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vayla.xyz/","date":"2026-04-27T08:39:16.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vayla.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 27 Apr 2026 08:39:16 GMT\r\ndate: Mon, 27 Apr 2026 08:39:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-04-27T13:34:33.799771Z","times_seen":4344,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":101,"dns":1,"connect":7,"send":0,"wait":22,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vayla.xyz/plotly-2.24.1.min.js","fqdn":"vayla.xyz","domain":"vayla.xyz","tld":"xyz"},"ip":{"addr":"104.21.28.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vayla.xyz/","date":"2026-04-27T08:39:16.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vayla.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 10:23:40 GMT","end":"Thu, 23 Jul 2026 10:23:39 GMT"},"fingerprint":{"sha1":"4B:A9:82:20:2B:F9:33:49:62:6C:EA:7A:97:16:09:59:D7:BE:0C:C1","sha256":"E9:3A:DA:D3:15:D3:55:BD:96:C8:9E:BC:5C:1A:E9:80:3F:26:4B:C9:DC:BD:04:01:CA:0D:FC:07:AD:40:70:A5"}}},"request":{"raw":"GET /plotly-2.24.1.min.js HTTP/1.1\r\nHost: vayla.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vayla.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Tue, 22 Apr 2025 07:41:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hkno1TWvDHIPQlHQNWIfDO8oUh0wKfqD6YSNLk3mEnbt0CPiy6ct4d9tuz%2B2QiNGBvLoD7eHSGDt8oEqzAdzWsfuCH88Y%2BH3UsWCRsJCzykI29F34AgTZ0wmt4Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Mon, 27 Apr 2026 08:39:16 GMT\r\nserver: cloudflare\r\ncontent-security-policy: upgrade-insecure-requests\r\nplatform: hostinger\r\npanel: hpanel\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9f2c8406da6c5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T14:20:15.653505Z","times_seen":14282763,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vayla.xyz/logo.png","fqdn":"vayla.xyz","domain":"vayla.xyz","tld":"xyz"},"ip":{"addr":"104.21.28.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vayla.xyz/","date":"2026-04-27T08:39:16.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vayla.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 10:23:40 GMT","end":"Thu, 23 Jul 2026 10:23:39 GMT"},"fingerprint":{"sha1":"4B:A9:82:20:2B:F9:33:49:62:6C:EA:7A:97:16:09:59:D7:BE:0C:C1","sha256":"E9:3A:DA:D3:15:D3:55:BD:96:C8:9E:BC:5C:1A:E9:80:3F:26:4B:C9:DC:BD:04:01:CA:0D:FC:07:AD:40:70:A5"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: vayla.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vayla.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 08:08:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Apr 2026 11:02:15 GMT\r\netag: \"50fd-69eb4db7-fd3b8d11546b820c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 20733\r\ndate: Mon, 27 Apr 2026 08:39:16 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1839\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BD6Dx%2B%2BCZWV9lM1wtDcD09PHeZ0lOLGT2v9jAPsE5RvdNbYR2WvnG%2FWBZIxWmh%2BpYeRWTcIoX%2Bs7G%2ByjKr3UaanyW9BfgxEr4ei5fXaawBofHvmhMu%2F9g%2BNjnMY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f2c8406ea705696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20733,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"5df72b4ca67d97db45c354c4394641bd","sha1":"3b56f55416226b12324c669bee5aa06b6cc366c2","sha256":"c9458aab3ae8ca5777fca3829071eee8225876c149fc214d3c853486ce6e38f9","sha512":"7583b711dbb8fea0c6c64f15e086c4064449f4270345ec4c33b525878a39d0612fc48a3ad424e3fdf4fd6391830d67e244672ca859d8af84a18153dbba1060e4","ssdeep":"384:s/SSw/ruyxB7hNZCggGuNDDwBMMpiIKCFv6aA2shSyQrrGm6n74ac7YpMKHq6J5:3JVOJGuNDD+RKCFv67Eyq6jshsZJ5","tlshash":"e692d0f64b21b62ffc4e427209d52386eb7e972c13584b2752930eb867924c87e982d5","first_seen":"2026-04-27T08:09:14.926863Z","last_seen":"2026-04-27T08:39:40.211682Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vayla.xyz/XNJYwuOy.php?s=%2Fipfs%2FRehNIfkWAVxarO8odtS9hAf6bd4b612026a425e3d3150ec076b11a%3Ft%3D1777279156271","fqdn":"vayla.xyz","domain":"vayla.xyz","tld":"xyz"},"ip":{"addr":"104.21.28.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vayla.xyz/","date":"2026-04-27T08:39:16.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vayla.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 10:23:40 GMT","end":"Thu, 23 Jul 2026 10:23:39 GMT"},"fingerprint":{"sha1":"4B:A9:82:20:2B:F9:33:49:62:6C:EA:7A:97:16:09:59:D7:BE:0C:C1","sha256":"E9:3A:DA:D3:15:D3:55:BD:96:C8:9E:BC:5C:1A:E9:80:3F:26:4B:C9:DC:BD:04:01:CA:0D:FC:07:AD:40:70:A5"}}},"request":{"raw":"GET /XNJYwuOy.php?s=%2Fipfs%2FRehNIfkWAVxarO8odtS9hAf6bd4b612026a425e3d3150ec076b11a%3Ft%3D1777279156271 HTTP/1.1\r\nHost: vayla.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vayla.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.3.30\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 27 Apr 2026 08:39:17 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aPZcX3HUBgDym9EQTlyztgaxGMw0wNidgnjP%2FavE5VrWwLh7VfBoRHDZOb23Hx492%2BJIa%2FLredANmBGtOpbyWFfCBnTQBNmxx3kWiU3MTUkbjGe7Ufmt0n50zbI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2c8406ea715696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":622830,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"717a13ed43185d8c05e66f7e688cf72a","sha1":"050fdef0425cc5d2fc667dc4e1fad1470bcaa2d7","sha256":"6ec559281d6271bc546c3c2c376155f6e5ad8d3ff9bdc746896d2e2d929cc808","sha512":"0f8d73d0042666dc41f7cd66df695b1f9df4faad68c38159254b890635cfd546d5f2444558de41835927cbc0ae67f2adc4a7dc4f7113e80571c048ce06b30da6","ssdeep":"6144:Ih5gDXtAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:osdAnXwRTMP8chPc730WW","tlshash":"b7d4eac2ab091573408a2eb5047b42afdf8c2d4d078ba85077f9afd9d74578230eee59","first_seen":"2026-04-27T08:39:40.213768Z","last_seen":"2026-04-27T08:39:40.213768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":881,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}