{"report_id":"8fa3abde-32fd-4248-93b6-2975b62c5944","version":6,"status":"done","tags":[],"date":"2026-02-13T20:38:47Z","url":{"schema":"https","addr":"asflsapp.icu/","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":0,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"asflsapp.icu/","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"title":"KapitalKompass – Verkehrsregeln und Sicherheit in Deutschland","dom":{"size":9240,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6432)","md5":"05560f78452af09f5cf1b852e4d3c2b2","sha1":"f6b48fe356193b79b8a85274f95c77f5b4ee6240","sha256":"ab90f3a1d329407b8a8cdcf429d2bfd77bd840be92f0cb6337a9eb837c33ebc6","sha512":"ef6307d039fa6342fec66a2bf73f5ce0bb1cd0c1dca33fc1e9baea3006b530c8e4ef513b95f0cd061c3317289a7c3613bebfde8bac6a855207e517d1dc765748","ssdeep":"192:21S7gJcDw3YhTrtnnAXWlXELW5nsiJDIcBxb2+l+CMBRDN1kW:1Tw3YhpnnAXWBvclBR7","tlshash":"701263222c842df5ed3346705069734abd2eccfbba618bf9a4f95d61ae05cba0d1170d","dom_hash":"domhash998293fdadc86d15ba6b9a76462efac7","first_seen":"2026-02-13T20:38:53.105055Z","last_seen":"2026-02-13T20:38:53.105055Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"asflsapp.icu/","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":0,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T20:38:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":7,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-13T20:38:25Z","timestamp":1771015105,"ip_dst":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"ip_src":{"addr":"Client IP","port":57770,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-02-13T20:38:25.237827+0000\",\"flow_id\":971407982940684,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":57770,\"dest_ip\":\"95.81.123.117\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"asflsapp.icu\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":914,\"bytes_toclient\":2564,\"start\":\"2026-02-13T20:38:25.086540+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-13T20:38:25Z","timestamp":1771015105,"ip_dst":{"addr":"Client IP","port":57770,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)","source":"{\"timestamp\":\"2026-02-13T20:38:25.271106+0000\",\"flow_id\":971407982940684,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"95.81.123.117\",\"src_port\":443,\"dest_ip\":\"172.18.0.4\",\"dest_port\":57770,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026890,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=asflsapp.icu\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=E8\",\"serial\":\"05:64:65:53:D6:6A:7F:8D:3C:3C:D0:5C:40:BF:2A:9A:30:FC\",\"fingerprint\":\"88:3a:6b:79:f9:ea:82:4b:de:b5:8b:80:d2:72:bc:30:23:df:d7:0f\",\"sni\":\"asflsapp.icu\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-05T12:58:06\",\"notafter\":\"2026-05-06T12:58:05\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":5,\"bytes_toserver\":1139,\"bytes_toclient\":2630,\"start\":\"2026-02-13T20:38:25.086540+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-13T20:38:25Z","timestamp":1771015105,"ip_dst":{"addr":"Client IP","port":57802,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)","source":"{\"timestamp\":\"2026-02-13T20:38:25.985619+0000\",\"flow_id\":707550962088793,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"95.81.123.117\",\"src_port\":443,\"dest_ip\":\"172.18.0.4\",\"dest_port\":57802,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026890,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=asflsapp.icu\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=E8\",\"serial\":\"05:64:65:53:D6:6A:7F:8D:3C:3C:D0:5C:40:BF:2A:9A:30:FC\",\"fingerprint\":\"88:3a:6b:79:f9:ea:82:4b:de:b5:8b:80:d2:72:bc:30:23:df:d7:0f\",\"sni\":\"asflsapp.icu\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-05T12:58:06\",\"notafter\":\"2026-05-06T12:58:05\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":5,\"bytes_toserver\":1014,\"bytes_toclient\":2630,\"start\":\"2026-02-13T20:38:25.818009+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-13T20:38:25Z","timestamp":1771015105,"ip_dst":{"addr":"Client IP","port":57776,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)","source":"{\"timestamp\":\"2026-02-13T20:38:25.998893+0000\",\"flow_id\":2241893668846164,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"95.81.123.117\",\"src_port\":443,\"dest_ip\":\"172.18.0.4\",\"dest_port\":57776,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026890,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=asflsapp.icu\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=E8\",\"serial\":\"05:64:65:53:D6:6A:7F:8D:3C:3C:D0:5C:40:BF:2A:9A:30:FC\",\"fingerprint\":\"88:3a:6b:79:f9:ea:82:4b:de:b5:8b:80:d2:72:bc:30:23:df:d7:0f\",\"sni\":\"asflsapp.icu\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-05T12:58:06\",\"notafter\":\"2026-05-06T12:58:05\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":5,\"bytes_toserver\":1014,\"bytes_toclient\":2631,\"start\":\"2026-02-13T20:38:25.817748+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-13T20:38:26Z","timestamp":1771015106,"ip_dst":{"addr":"Client IP","port":57788,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)","source":"{\"timestamp\":\"2026-02-13T20:38:26.034392+0000\",\"flow_id\":2125452810484478,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"95.81.123.117\",\"src_port\":443,\"dest_ip\":\"172.18.0.4\",\"dest_port\":57788,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026890,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=asflsapp.icu\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=E8\",\"serial\":\"05:64:65:53:D6:6A:7F:8D:3C:3C:D0:5C:40:BF:2A:9A:30:FC\",\"fingerprint\":\"88:3a:6b:79:f9:ea:82:4b:de:b5:8b:80:d2:72:bc:30:23:df:d7:0f\",\"sni\":\"asflsapp.icu\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-05T12:58:06\",\"notafter\":\"2026-05-06T12:58:05\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":5,\"bytes_toserver\":1014,\"bytes_toclient\":2630,\"start\":\"2026-02-13T20:38:25.817918+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-13T20:38:26Z","timestamp":1771015106,"ip_dst":{"addr":"Client IP","port":57818,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)","source":"{\"timestamp\":\"2026-02-13T20:38:26.041521+0000\",\"flow_id\":1488251462450193,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"95.81.123.117\",\"src_port\":443,\"dest_ip\":\"172.18.0.4\",\"dest_port\":57818,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026890,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=asflsapp.icu\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=E8\",\"serial\":\"05:64:65:53:D6:6A:7F:8D:3C:3C:D0:5C:40:BF:2A:9A:30:FC\",\"fingerprint\":\"88:3a:6b:79:f9:ea:82:4b:de:b5:8b:80:d2:72:bc:30:23:df:d7:0f\",\"sni\":\"asflsapp.icu\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-05T12:58:06\",\"notafter\":\"2026-05-06T12:58:05\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":5,\"bytes_toserver\":1014,\"bytes_toclient\":2630,\"start\":\"2026-02-13T20:38:25.818193+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-13T20:38:26Z","timestamp":1771015106,"ip_dst":{"addr":"Client IP","port":57812,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)","source":"{\"timestamp\":\"2026-02-13T20:38:26.051265+0000\",\"flow_id\":146091362319280,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"95.81.123.117\",\"src_port\":443,\"dest_ip\":\"172.18.0.4\",\"dest_port\":57812,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026890,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.icu)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=asflsapp.icu\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=E8\",\"serial\":\"05:64:65:53:D6:6A:7F:8D:3C:3C:D0:5C:40:BF:2A:9A:30:FC\",\"fingerprint\":\"88:3a:6b:79:f9:ea:82:4b:de:b5:8b:80:d2:72:bc:30:23:df:d7:0f\",\"sni\":\"asflsapp.icu\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-05T12:58:06\",\"notafter\":\"2026-05-06T12:58:05\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":5,\"bytes_toserver\":1014,\"bytes_toclient\":2631,\"start\":\"2026-02-13T20:38:25.818096+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"maps.googleapis.com/maps-api-v3/api/js/63/14d/common.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"maps.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3442,"first_seen":"2012-05-22T14:23:23Z","last_seen":"2026-02-08T22:59:24.913193Z","alert_count":1,"request_count":10,"received_data":889242,"sent_data":4547,"comment":"","tags":null,"fingerprints":null},{"fqdn":"asflsapp.icu","ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-02-12T23:08:29.060293Z","last_seen":"2026-02-12T23:08:29.060293Z","alert_count":16,"request_count":16,"received_data":957252,"sent_data":11650,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-08T22:25:44.117365Z","alert_count":0,"request_count":6,"received_data":449486,"sent_data":2993,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-02-08T22:26:16.428236Z","alert_count":0,"request_count":2,"received_data":5647,"sent_data":1174,"comment":"","tags":null,"fingerprints":[{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]}]},{"fqdn":"maps.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2012-05-22T14:23:15Z","last_seen":"2026-02-09T00:38:26.049096Z","alert_count":0,"request_count":1,"received_data":293435,"sent_data":445,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-08T22:32:21.331091Z","alert_count":0,"request_count":2,"received_data":315094,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"asflsapp.icu/","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"97f9b101fbcab6b6e9af20fffd27e54f","sha1":"4e7a73eccd16b3ee05c4d88d3d5c9b7ead4089da","sha256":"bf5b621c6888138ec6ff305456c684c08e7a10401dd08090dc6db817fc366237","sha512":"72c5e3a585596e37356e5c7e819b04802a91585b1f6df65ba91629ef0dc1d723a95ab02a6807c908b9e82f730b7b1dc419091f7e99b7ced28ee0eeb12a069ecf","ssdeep":"","tlshash":"fb800457440ffc35c30700570300101111331554447f1c14410f314010304c1150f110","size":36,"data":"","first_seen":"2025-10-13T01:00:10.857716Z","last_seen":"2026-05-22T15:26:21.894522Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-08-11T20:46:50.190978Z","times_seen":30802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/aos/2.3.4/aos.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","size":14690,"data":"","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-08-11T13:52:57.984789Z","times_seen":10368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/search_impl.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"32a4a8bb15ee32c7b77badb888e14cc9","sha1":"0a5e073627fdacdde9abcc734520ce5e080ec33b","sha256":"9e41265dcb5d1e258fcabcb5cb4ff062dc0950ecfa18139a2cfd281b73443a9d","sha512":"0bef43794b45163eefc8ee12aba6760f0d675b626468d7b75024163c86fbd9cd2444ed6e0ad42bbc3ea82957abba8b2403acc150f22ab38992e1f0fd6712489c","ssdeep":"","tlshash":"4f7142b532197293822951901c9d8018256cd0cab50ec4f6be58ef269efc8c793f1af4","size":3586,"data":"","first_seen":"2026-02-04T21:26:02.754983Z","last_seen":"2026-02-18T19:25:27.170134Z","times_seen":8062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/map.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba96d76d1c16c68ebe030ca0887cc0fc","sha1":"0ac5aad9ea28e6edd382f98dfe7d2b91d63dc21e","sha256":"368e8fbbcd72bbd162bec28e95e6638d0e5ff728df4b76bc7ad5b604f41a68de","sha512":"48e762e5db12972636f8ede4a110d6dc7ddad9865f3aa7525fbccb714ae235daa3663d4e1761546cd700e25a2f2002760c22aa669d15116dfd2ec7fc0a7a75a9","ssdeep":"1536:CrqSvDijmbWBf1iIUdP3zUTcvd93KnG3x0gQ3sl2Z/49FiqdBQYYdgX4XOF8NZAl:CrqSvDijmbWvinjUTclt+ix0JRx49UqN","tlshash":"ce83086532227576aff2c4e4505b0201b169e44ab009caed3d2cddeb9de9c8712fa736","size":81644,"data":"","first_seen":"2026-02-04T21:17:54.135203Z","last_seen":"2026-07-20T01:33:26.456629Z","times_seen":16739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/onion.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b1e4c4cf6a7f8ad3896bb91f4204824","sha1":"cf06e3c45f19229889417e63c292e79ad02b4717","sha256":"8b15fb4c680cf50d12c71161882345d54f31506a939cc52ffc378c67462f0f37","sha512":"a556f8a69a7cccd0699165c3a00d4be8c865d3fae4403ac4619476572a21bdcff817486e06b6ce4a7a3131dd72353c76e72d5565c7b4343c03b01cb8e88dec40","ssdeep":"768:RwssFmzhdxWvpZ2dq3zO7jT2TXmgfNKQLdA02uzOsciUBa2lNDZKG0kU9NgmmOFJ:FYb2fduBqTel","tlshash":"35d282987193709782f2b6a1817f010be26da8c5f408899c79fc8cd67bf458626b5f3c","size":30874,"data":"","first_seen":"2026-02-04T21:17:54.12186Z","last_seen":"2026-07-15T12:21:29.050727Z","times_seen":12674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0e9f97514ab47b28f4c4810695da442","sha1":"04d791a6f693be692bbe4fa9b537df1e12362fd0","sha256":"99bf83152d1718962d9d4597334d9336fda125d50824712b5f946e4eaa1ac28c","sha512":"69f367709f88961984802b4bf823767029cb20d9b55537d14257fdfa7b3fcca6b10964caa982acf56c92ecae530c5bbfeb58a4dd5e3e5b9f25291e8b955ae3d4","ssdeep":"","tlshash":"1031af0509567cf6cf1213a57abd7e15b5dd40b724a5c9f175eccc854f208a3362aa8c","size":1506,"data":"","first_seen":"2026-02-13T20:38:53.199523Z","last_seen":"2026-02-13T20:38:53.199523Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?client=google-maps-embed\u0026paint_origin=\u0026libraries=geometry,search\u0026v=weekly\u0026loading=async\u0026language=en_US\u0026callback=onApiLoad","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c511032e1f07fe1b699363d23a9da4a","sha1":"d05d157f5fe029514bfab34c64e50a7248b47913","sha256":"65198fa5f727815760bb691bfb0b137d41ab6b116d8b605a97484c2d2d3b624c","sha512":"2b180313f340c8bfc75dd47facdaaa60b4e3bc1b8ae7e8f3bf900cfb0a3acac3ef2aa21658c2db2599ac054053c15003326f98c935be69a1ba1014f0c099b1f9","ssdeep":"384:lVsmiDzbNFC2bsjQ++5qZiCnXDmYG0bAutkV0OLunkRYocwIcQ7h54rJd6:lVtuzJFCGsjQ+uCnXDmNoAut5OaS0L33","tlshash":"8e4294776b5a0c74de09942c846dae0d39731b2b3cb2dbf5a5f298c88d304b259967cc","size":12885,"data":"","first_seen":"2026-02-13T00:22:31.573331Z","last_seen":"2026-02-13T21:42:40.414869Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcbc0e1f195d9966f78af30a7f7387fb","sha1":"86d72ab0a1d15e680bd9377e261361592eb31c42","sha256":"14415d48af1ed10aa8c66f4deff15cab211eb3a91a43977c16ff746011a0df94","sha512":"55760e2af71d824d934b30d52a4710fb8b55812348729ebf23eb536bd9bb1c6f2ef2a372ea0d8e55d62f08078721893cb5fb9b04f2ebedd9e24b3f07dbf4380f","ssdeep":"3072:DdrzlOj0qS+6nLTQcmVmfkt6/2IF5wB4WN09yFc3+VziOtBROqRF/kTT/sM09lUQ:DdrzlOj0qynLc5VmlO3BBa9KcutBRrDl","tlshash":"d4c3d8d571937073bf71b4a444a70106b26aa89ab01dcd2db1fdc8e3aef185601f9b39","size":127940,"data":"","first_seen":"2026-02-04T21:12:37.086596Z","last_seen":"2026-08-09T22:40:04.66697Z","times_seen":24903,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"maps.googleapis.com/maps-api-v3/api/js/63/14d/common.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/main.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"085296768382f38c696c4f02cd87f5b3","sha1":"6b243751a12a921bc4df483e3683c3037113f2a9","sha256":"1b39e2ccfce0a4c9cb6fcc2fa7a14ed1734cd025b3362a73906436345cad03cc","sha512":"4949a51f27436c46e2ab08f3489ede00652ee9adb3dcc0a86b72a0bfdcbbe49e17afc894df0fa265743ae6a4ba7998010b62d3e5425a9428116f29e105e47056","ssdeep":"6144:f9aXhBuO4wqO+qYeDr1t+SCDjEKuoF0P/VTeSeQW59VTdNf8p6NPDRXgpAWN0cz1:laXhBJ4wqO+qYeDr1t+SA4KuoF0P/VTf","tlshash":"9a542c9472a2706687b2e4e440370106f17e649af04c8eacb69ccde7bdf69464677f38","size":296228,"data":"","first_seen":"2026-02-04T21:21:09.989278Z","last_seen":"2026-08-11T10:46:24.96209Z","times_seen":10340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.gstatic.com/maps-api-v3/embed/js/63/14d/init_embed.js","fqdn":"maps.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5fb1a254a4d8532c79c2be0aa4ad27a","sha1":"2485944ef8e071d3788d0fb915c3ec7b22d53436","sha256":"669b19d632548287f024de394a6ca594def6eb4221cf106177b80f73464d45b2","sha512":"8c02e858561816ca76d10bce7e6528e091dbd0ff290fbb2bcc3fe041202337de515018ca99dc3be0a1c071e30fc6b5b8cae1460c0769d30683b6e8af67f0bcfe","ssdeep":"3072:n1ekAQav1ivjsZQRLSgaYi0SqxCCe5HqYXuUU/y8516:n1q1IjQ0WaiExCCOHTXuUU/yCE","tlshash":"aa543b8c766230668273d5b1002f118bb535ecaaf44c89b8b265e9e57d74cb802b7f7d","size":292574,"data":"","first_seen":"2026-02-04T21:12:37.090737Z","last_seen":"2026-02-18T19:25:27.147222Z","times_seen":8708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/search.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"651c2c51ef3f2477987742b4eb54e4d5","sha1":"67531696973bca4535103faceaf5fcfb4ece9238","sha256":"d61db1be28e3a0a85e01e74a806909f538ef3821e888469dff28f197c7632dcd","sha512":"247386852de06daa02902358e29e38cb4dda611dd56448c5a639b45e54dc39b5f35dbd3f51a3cf05568b5b4acd267d22f1256866f2e452b32676a53d13aa6422","ssdeep":"","tlshash":"c95144a33352f83b8676d2b124aa0081d8685812f405c55cfdbcedcba8f5e9305fae71","size":2643,"data":"","first_seen":"2026-02-04T21:26:02.733148Z","last_seen":"2026-02-18T19:25:27.204144Z","times_seen":8705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/geometry.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3372a18ddf5142d323745acd642dbe6","sha1":"069f126c2586edb9c6b7662468931774fbaf284d","sha256":"97de00f17a3892b3b4338fde680f385ac6d471034c8b5ac75607e8857a461829","sha512":"b34d180b4bbb1b9437030d7fc309eff9aeee121df39abfc23d76b49f56388895f8e44ed27bf9921e9b66c91e029acc92fe25bde5c3eb1ff241945dbc96ac1791","ssdeep":"192:7Bp/7g/VqvmyDncu8KxYchDh+AB3uszxxbvQw06Z2VRcbzlyce6PnRB6fCtiyc4f:Fh7g/VqZDncDKxYUFdFZh1Z24bzcf6P7","tlshash":"7be1c738356a394b93b0af9545b50053e862b5ae71078a8c8c7dd74f6ef54da00aff28","size":6920,"data":"","first_seen":"2026-02-04T21:20:36.130277Z","last_seen":"2026-07-09T16:10:05.432262Z","times_seen":10916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e9dce083dca47f3ad0da4de04a2006e","sha1":"72e6e695c7981530498720e0e5afdc4e7a4f8bcd","sha256":"285d199065a293136e4d06d375dbd17767da26a3775a970c43ce03819ac09126","sha512":"48af288f65e667ca2f02ac4030cc865f4eefec09c4540d3f33fc99152ac2ab3fa548a67f58167cf90c99c48554887233f90ad48f563f3ba636f8c140c8fa6f73","ssdeep":"6144:/Ys5mwtvfSuetaCLo4ERdc+sKCHh0ryunNZitYcv0eBFhtUy90:/Ys5mwtvfSuetaCLo4ERdc+sKCHh0rye","tlshash":"0464b47c31326f4ea932c853c226311ed0357edff96498bdbee55184eaa5949f0e0638","size":318606,"data":"","first_seen":"2026-02-04T21:12:37.076519Z","last_seen":"2026-08-09T22:40:04.615749Z","times_seen":24896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany","date":"2026-02-13T20:38:27.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /maps-api-v3/api/js/63/14d/common.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 10:44:59 GMT\r\nexpires: Fri, 12 Feb 2027 10:44:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 04 Feb 2026 08:39:34 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 122008\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":127940,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (726)","md5":"fcbc0e1f195d9966f78af30a7f7387fb","sha1":"86d72ab0a1d15e680bd9377e261361592eb31c42","sha256":"14415d48af1ed10aa8c66f4deff15cab211eb3a91a43977c16ff746011a0df94","sha512":"55760e2af71d824d934b30d52a4710fb8b55812348729ebf23eb536bd9bb1c6f2ef2a372ea0d8e55d62f08078721893cb5fb9b04f2ebedd9e24b3f07dbf4380f","ssdeep":"3072:DdrzlOj0qS+6nLTQcmVmfkt6/2IF5wB4WN09yFc3+VziOtBROqRF/kTT/sM09lUQ:DdrzlOj0qynLc5VmlO3BBa9KcutBRrDl","tlshash":"d4c3d8d571937073bf71b4a444a70106b26aa89ab01dcd2db1fdc8e3aef185601f9b39","first_seen":"2026-02-04T21:12:37.086596Z","last_seen":"2026-08-09T22:40:04.66697Z","times_seen":24903,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":31,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"maps.googleapis.com/maps-api-v3/api/js/63/14d/common.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany","date":"2026-02-13T20:38:27.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /maps-api-v3/api/js/63/14d/util.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72273\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 10:44:59 GMT\r\nexpires: Fri, 12 Feb 2027 10:44:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 04 Feb 2026 08:39:34 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 122008\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":318606,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (526)","md5":"8e9dce083dca47f3ad0da4de04a2006e","sha1":"72e6e695c7981530498720e0e5afdc4e7a4f8bcd","sha256":"285d199065a293136e4d06d375dbd17767da26a3775a970c43ce03819ac09126","sha512":"48af288f65e667ca2f02ac4030cc865f4eefec09c4540d3f33fc99152ac2ab3fa548a67f58167cf90c99c48554887233f90ad48f563f3ba636f8c140c8fa6f73","ssdeep":"6144:/Ys5mwtvfSuetaCLo4ERdc+sKCHh0ryunNZitYcv0eBFhtUy90:/Ys5mwtvfSuetaCLo4ERdc+sKCHh0rye","tlshash":"0464b47c31326f4ea932c853c226311ed0357edff96498bdbee55184eaa5949f0e0638","first_seen":"2026-02-04T21:12:37.076519Z","last_seen":"2026-08-09T22:40:04.615749Z","times_seen":24896,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/photos/kapitalkompass_face_696f96ccde2d63.03624342.jpg","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/photos/kapitalkompass_face_696f96ccde2d63.03624342.jpg HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 81667\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-13f03\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81667,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 480x720, components 3","md5":"9cfe6d6543536d8a295788e97b4027db","sha1":"18ff01ebe3475257136367f5e1e78a38809f2582","sha256":"238f63f5ffda401d44b3e413833b698f3886afc70ad413e4120d3e38c66650ec","sha512":"b061ae32442301f350b723413a6ee9586928342221e0231813edd31eddea94e522fd669c7309145d61946e0a19fbaaf40ee3e2527233c1cf70e2d084a4a4577b","ssdeep":"1536:fgug9mjHPkEpNgK0Y6hdhQb/Q8Llnw2Ly9qH7KzrN5z+6cJv8tikXiC5kEJX:Wm7PkEgK0NGln/tH6zz+zJv4jXiOkEJX","tlshash":"0b8312f49970d24b5c6066a32cdf1f9d77c408847ac245d42bf7834992d5b8abcec382","first_seen":"2026-02-12T23:08:36.100347Z","last_seen":"2026-02-13T20:38:53.108986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":22,"dns":1,"connect":41,"send":0,"wait":126,"receive":63,"ssl":217},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://asflsapp.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 20:38:26 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156400\r\ncf-ray: 9cd7211cad47b28a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"660cc074-262f0\"\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 147821\r\nexpires: Wed, 03 Feb 2027 20:38:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bG6wzrMfgR9tvAgYZSPM5yjkrbntmdJIztFSTBvDhYLKbQNq3sYzqz4dhA8%2FTH%2F9y%2Fe2xfmUzukoph3Ib5BdpPWjGxygwJh8oo9smc2RZKyjGD1c65lMdQXiLNuFPUjUaDFA8ihu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156400,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156400, version 773.1280","md5":"1ec0ba058c021acf7feaa18081445d63","sha1":"73e7eabf7a8ae9be149a85d196c9f3f26622925b","sha256":"ae17c16afbea216707b2203ea1cf9bdb45b9bfe47d0f4ae3258ddbc6294dd02f","sha512":"16a1b8a067ad4a33dcf4483c8370ca42e32f1385e3c4e717f8d0ce9995ca1f8397b15a63c0cee044c4b0fca96c4b648c850f483eeb1188a20f8b6cbf11d2b208","ssdeep":"3072:T0NNdf7uJ/Q8zfLtuI3m4uTtijwbr+mV+5ZUTRjV:AN7r8jMbgjwvOrU3","tlshash":"b6e3139a9a1f63d89c3cd982f61ef3fb715aadab1f521220193149f9d04f0af5035a4c","first_seen":"2024-04-05T18:44:58Z","last_seen":"2026-08-11T21:25:23.995758Z","times_seen":13924,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":28,"dns":2,"connect":0,"send":0,"wait":52,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-regular-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:26.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://asflsapp.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 20:38:26 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 25392\r\ncf-ray: 9cd7211cad4eb28a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"660cc074-6330\"\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 47084\r\nexpires: Wed, 03 Feb 2027 20:38:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4HVGQO5hL1Vx2tDpbftbkw3AbbfpIPKqNKOLgMr2MdlL9vtGyryHRgaHX3e9qUOK2sJN2lHSjp3egnb7bbmCgIdmtjTLipFxtL2db0KeodinU33VvLOyvw4%2F5tHHb9oLSPrsmYbr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25392,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 25392, version 773.1280","md5":"aa7c5fa494807f7a9ec907defee083e8","sha1":"8c9331bf363872cd84f2d1089b4d72fc21784cbd","sha256":"c27da6f833431da5aa295c44540bfac0fd8270ba6a3c4346427006d8a7b34b76","sha512":"67762c4dcf59c2e2989d3bd7294b9f80cf61e00b437230a94a30993af60e060fe2ecdc34510a3c37b026c6d16b7151e311a1cce99fffd5c1771b6332f2e0c53f","ssdeep":"768:P4XxqHUwrxhT2ZYg+pQZizxLhcgUlLPpxN:PHbdVxLoVl","tlshash":"16b2e0ce0a4e788bd827853d6ad45d4e9cb3c1c26bad90aedd3f06dd132b388e56d441","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T21:25:23.989515Z","times_seen":3523,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?client=google-maps-embed\u0026paint_origin=\u0026libraries=geometry,search\u0026v=weekly\u0026loading=async\u0026language=en_US\u0026callback=onApiLoad","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany","date":"2026-02-13T20:38:26.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /maps/api/js?client=google-maps-embed\u0026paint_origin=\u0026libraries=geometry,search\u0026v=weekly\u0026loading=async\u0026language=en_US\u0026callback=onApiLoad HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1800, stale-while-revalidate=12600\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: efc848aa\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Fri, 13 Feb 2026 20:38:26 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 2577\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=94\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12885,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11729)","md5":"7c511032e1f07fe1b699363d23a9da4a","sha1":"d05d157f5fe029514bfab34c64e50a7248b47913","sha256":"65198fa5f727815760bb691bfb0b137d41ab6b116d8b605a97484c2d2d3b624c","sha512":"2b180313f340c8bfc75dd47facdaaa60b4e3bc1b8ae7e8f3bf900cfb0a3acac3ef2aa21658c2db2599ac054053c15003326f98c935be69a1ba1014f0c099b1f9","ssdeep":"384:lVsmiDzbNFC2bsjQ++5qZiCnXDmYG0bAutkV0OLunkRYocwIcQ7h54rJd6:lVtuzJFCGsjQ+uCnXDmNoAut5OaS0L33","tlshash":"8e4294776b5a0c74de09942c846dae0d39731b2b3cb2dbf5a5f298c88d304b259967cc","first_seen":"2026-02-13T00:22:31.573331Z","last_seen":"2026-02-13T21:42:40.414869Z","times_seen":49,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":76,"dns":3,"connect":15,"send":0,"wait":110,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/map.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany","date":"2026-02-13T20:38:27.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /maps-api-v3/api/js/63/14d/map.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25945\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 10:44:59 GMT\r\nexpires: Fri, 12 Feb 2027 10:44:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 04 Feb 2026 08:39:34 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 122008\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81644,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3328)","md5":"ba96d76d1c16c68ebe030ca0887cc0fc","sha1":"0ac5aad9ea28e6edd382f98dfe7d2b91d63dc21e","sha256":"368e8fbbcd72bbd162bec28e95e6638d0e5ff728df4b76bc7ad5b604f41a68de","sha512":"48e762e5db12972636f8ede4a110d6dc7ddad9865f3aa7525fbccb714ae235daa3663d4e1761546cd700e25a2f2002760c22aa669d15116dfd2ec7fc0a7a75a9","ssdeep":"1536:CrqSvDijmbWBf1iIUdP3zUTcvd93KnG3x0gQ3sl2Z/49FiqdBQYYdgX4XOF8NZAl:CrqSvDijmbWvinjUTclt+ix0JRx49UqN","tlshash":"ce83086532227576aff2c4e4505b0201b169e44ab009caed3d2cddeb9de9c8712fa736","first_seen":"2026-02-04T21:17:54.135203Z","last_seen":"2026-07-20T01:33:26.456629Z","times_seen":16739,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T20:38:24.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:25 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Encoding: gzip\r\nExpires: Fri, 13 Feb 2026 20:38:25 GMT\r\nSet-Cookie: _subid=1sjos4f9g9c; expires=Mon, 16 Mar 2026 20:38:25 GMT; path=/\n10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8; expires=Sat, 14 Feb 2026 20:38:25 GMT; path=/\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":31078,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (787)","md5":"d14d00d63ad2fbca2db6edb06804da83","sha1":"4c6d7409a9e144d923db3a63bf72a776ca879df7","sha256":"26c9c9a31a1619bdfb504553cbb813d255d1372fc623a02e7a69aa1feb77d38b","sha512":"82713c5873e2b95ba7680e423c711c530842c28fd5d4f4c8ad2f0be0ca1540858589eac006d65cff05bb231e773a102ce09f9abe48dd9aa026a3dd4a7f5dad17","ssdeep":"768:zoZRLisUiBbybCb+bnuK2ifem/JaCeiPJvp9ZgPkPF/:6LpUybybCb+bFRfeGrPJvKst/","tlshash":"fbd29531b4f4243b854782ea761aab5b7ae1d21bca2b5904b5fc67d54fc3c82cc1362d","first_seen":"2026-02-12T23:08:36.097698Z","last_seen":"2026-02-13T20:38:53.113671Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":408,"dns":188,"connect":30,"send":0,"wait":197,"receive":1,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde28d2.99484021.jpg","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde28d2.99484021.jpg HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 44824\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-af18\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44824,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 1267x712, components 3","md5":"87a3072ccbad58e5efc9d7f15f52c04f","sha1":"7f5c60421e65cdf431fc7b4dd42097bae56d72c5","sha256":"3c89b1914dc9b25b222064aee209c44d78a8f791b425dd8e71b6539d31acfd02","sha512":"9b715f3f7cb0ae5e78812dc881ebc20cf007dd6d4fec39c17a25e91825a3a8b450a2733a65fa490d37013cf49d0588f9641d061062cc8aacfa468d9d6b1cc4a1","ssdeep":"768:Ol9lBQwliUhawIz8QqtPOETKFh97dOZ8xL6ElPQXsLgO+z8ZZmDfP1gL3:OjrQwJcDoQCGBfL6ElQsLRmhk","tlshash":"6313d037fda05bc2b469d3f97f014dc59649af186b8778937002cf873a34b294598939","first_seen":"2026-02-12T23:08:36.069376Z","last_seen":"2026-02-13T20:38:53.115172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":406,"dns":0,"connect":0,"send":0,"wait":73,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/aos/2.3.4/aos.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/aos/2.3.4/aos.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:38:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 4109\r\ncf-ray: 9cd7211b2defc272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03d5d-3962\"\r\nlast-modified: Mon, 04 May 2020 16:05:49 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1979463\r\nexpires: Wed, 03 Feb 2027 20:38:25 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7VCROJJ89RfR%2FY%2BWza55FQWI2S%2FaCglUzzGae9Wca5JRnVf2J4gK17nA3NuK31O%2FbtUKOEq%2B46Ap7fpxLjd595gvA0WqVgEhO7LnzT3CvHT6OxvCSF6mU3pDtZnRopOkcyUTBLOF\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14690,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14690), with no line terminators","md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-08-11T13:52:57.984789Z","times_seen":10368,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/maps?q=Friedrichstrasse%2045,%2010117%20Berlin,%20Germany\u0026output=embed","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:52 GMT","end":"Mon, 20 Apr 2026 08:41:51 GMT"},"fingerprint":{"sha1":"0F:50:AB:64:9B:F5:E8:E2:93:93:57:63:8F:7E:FA:1E:85:EE:4E:69","sha256":"7A:C0:51:F4:28:EF:25:D1:05:45:35:E5:93:56:AE:8C:29:AB:52:F5:47:3A:13:FD:82:70:42:30:E3:17:55:D1"}}},"request":{"raw":"GET /maps?q=Friedrichstrasse%2045,%2010117%20Berlin,%20Germany\u0026output=embed HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany\r\nvary: Origin, X-Origin, Referer\r\ndate: Fri, 13 Feb 2026 20:38:26 GMT\r\ncontent-type: text/html\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=90\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":2202,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T20:57:33.581028Z","times_seen":17843402,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":247,"dns":1,"connect":32,"send":0,"wait":119,"receive":0,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/aos/2.3.4/aos.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/aos/2.3.4/aos.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:38:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1438\r\ncf-ray: 9cd7211b1d77c272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03d5d-65c5\"\r\nlast-modified: Mon, 04 May 2020 16:05:49 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 148768\r\nexpires: Wed, 03 Feb 2027 20:38:25 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zwxgvwdtOyVXQEw%2BbJyrJ5VGmlHrrk72qpZOhkoW3KbhW0%2BAEdKa51%2FUf%2FLvMeUq7krYYacXmJAPcn2VmJ3v47SNXGZpJ8qkNRwqRXIcwlhJbOfd%2F9qE0qDZL3PtCtsTjOmvMsgc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-11T21:04:10.758008Z","times_seen":44175,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/photos/kapitalkompass_face_696f96ccde2d43.10020836.jpg","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/photos/kapitalkompass_face_696f96ccde2d43.10020836.jpg HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 55176\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-d788\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55176,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 483x720, components 3","md5":"b65ce73a217032465418b5ce547a140b","sha1":"371e10a01f8cec4dadc31bfff11e2307a68118aa","sha256":"76206972aa9897c3c201694ba56ff1759e6998ae3ca39e43765a3b8efb3bc286","sha512":"4fbcda0e0ccf13c31974ccc467b54082ae21a66ae5715980bd58739d5e411aa57ce5a0e7fe4c6015a49d1b52418b57059487d25cb1c2b564bd2a417d9f71a41f","ssdeep":"1536:Qz1Mih5ms9JsuI5P820PgBpR+4sjpVET6:+h5msEPJ+4Op66","tlshash":"c743023fa1e067e05e0f16a3c85f89b250d8a580fd9e7c170a94558e5ed3af4af1c704","first_seen":"2026-02-12T23:08:36.037871Z","last_seen":"2026-02-13T20:38:53.123513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":23,"dns":1,"connect":31,"send":0,"wait":101,"receive":56,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2ac3.84968517.jpg","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2ac3.84968517.jpg HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 59900\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-e9fc\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59900,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 478x718, components 3","md5":"b7ad3752edb6982be923403a478e3157","sha1":"20c49fe11e2bf0c4f664498ce8136b63a8d4a407","sha256":"f0c1bed54e4b80c40311f8d0704cb210ca024474dbb00f3ffade969fc94b8985","sha512":"e28456cf077332f84afa56b5ef14aef96e9c74411e7cbb4c9d4d9b26435084d1da101e8fcb7507a8704213d464b42559aa7b208ffb01eda18dbd7f886023ad59","ssdeep":"1536:jrKft7NTQ8TwMXZVMgK6sTErNKV4pVywp7J3kMm:SPtXu6UErNzywp7tkX","tlshash":"f24302caaf071a98f60ace6530babd5fd5350506a8cd2d5658f5852e9fd000ae13f44f","first_seen":"2026-02-12T23:08:36.077664Z","last_seen":"2026-02-13T20:38:53.125148Z","times_seen":2,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":414,"dns":0,"connect":0,"send":0,"wait":75,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2ae5.67364074.jpg","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2ae5.67364074.jpg HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 180446\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-2c0de\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":180446,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 916x718, components 3","md5":"04d31ce557124719aa55f99db824c850","sha1":"779897012801e4e7f4889b6f3274fbbf42535e73","sha256":"aa6192401e09c6541f0eeddd03d636b3e129a23a16ec77f7c31b063f8d997f42","sha512":"f34b9e5fe7f48010f374216571ae729d1241b95e068e28a00a1726e2117e75e5380d5ebbe395d75b802eeb6b362040f1e388c9513253fb858e584a99395c5ade","ssdeep":"3072:9tw7GUplU9fc8DOPJIB1jlHv+VVJltQT//50Fetik6QrsdBMOtlHjRgARorLJVIo:9+GyJ4UwbYt+R0Feti/QgdGOtlVgAsLd","tlshash":"980422b88ca5bbed712c15e7f8924c4b82c08c2ac74d980942e51d96d342f27f5ebe5d","first_seen":"2026-02-12T23:08:36.040273Z","last_seen":"2026-02-13T20:38:53.127601Z","times_seen":2,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":77,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/favicon.ico","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:26.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/favicon.ico HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 2014\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-7de\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2014,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"463a9937c807221357da16db369c1ecc","sha1":"9799953179b72116172901504ddc48380d4815b0","sha256":"b887ca00cab97c2a0d6eef0620c0a3d33732ca17c628f7b6423e598ea7431517","sha512":"db3ab5a7a964eef0e07cf2c520e25ff5f3a8d9eaf79ebd8c1ba7e0328472cafc829190a812c4aa2cac15498a6e937fab9bd768832c3133ad2dc5ffced5c148e0","ssdeep":"","tlshash":"e9410cdfff84637d5409f49b080666b10a2c17535f02f355d15f68fad64944aae016fc","first_seen":"2026-02-12T23:08:36.105164Z","last_seen":"2026-02-13T20:38:53.128746Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.gstatic.com/maps-api-v3/embed/js/63/14d/init_embed.js","fqdn":"maps.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany","date":"2026-02-13T20:38:26.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /maps-api-v3/embed/js/63/14d/init_embed.js HTTP/1.1\r\nHost: maps.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 79327\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 07 Feb 2026 06:12:25 GMT\r\nexpires: Sun, 07 Feb 2027 06:12:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 04 Feb 2026 08:38:20 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 570361\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":292574,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1842)","md5":"d5fb1a254a4d8532c79c2be0aa4ad27a","sha1":"2485944ef8e071d3788d0fb915c3ec7b22d53436","sha256":"669b19d632548287f024de394a6ca594def6eb4221cf106177b80f73464d45b2","sha512":"8c02e858561816ca76d10bce7e6528e091dbd0ff290fbb2bcc3fe041202337de515018ca99dc3be0a1c071e30fc6b5b8cae1460c0769d30683b6e8af67f0bcfe","ssdeep":"3072:n1ekAQav1ivjsZQRLSgaYi0SqxCCe5HqYXuUU/y8516:n1q1IjQ0WaiExCCOHTXuUU/yCE","tlshash":"aa543b8c766230668273d5b1002f118bb535ecaaf44c89b8b265e9e57d74cb802b7f7d","first_seen":"2026-02-04T21:12:37.090737Z","last_seen":"2026-02-18T19:25:27.147222Z","times_seen":8708,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":55,"dns":1,"connect":9,"send":0,"wait":10,"receive":20,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/geometry.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany","date":"2026-02-13T20:38:26.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /maps-api-v3/api/js/63/14d/geometry.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2505\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 10:44:59 GMT\r\nexpires: Fri, 12 Feb 2027 10:44:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 04 Feb 2026 08:39:34 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 122007\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6920,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (597)","md5":"c3372a18ddf5142d323745acd642dbe6","sha1":"069f126c2586edb9c6b7662468931774fbaf284d","sha256":"97de00f17a3892b3b4338fde680f385ac6d471034c8b5ac75607e8857a461829","sha512":"b34d180b4bbb1b9437030d7fc309eff9aeee121df39abfc23d76b49f56388895f8e44ed27bf9921e9b66c91e029acc92fe25bde5c3eb1ff241945dbc96ac1791","ssdeep":"192:7Bp/7g/VqvmyDncu8KxYchDh+AB3uszxxbvQw06Z2VRcbzlyce6PnRB6fCtiyc4f:Fh7g/VqZDncDKxYUFdFZh1Z24bzcf6P7","tlshash":"7be1c738356a394b93b0af9545b50053e862b5ae71078a8c8c7dd74f6ef54da00aff28","first_seen":"2026-02-04T21:20:36.130277Z","last_seen":"2026-07-09T16:10:05.432262Z","times_seen":10916,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:38:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18938\r\ncf-ray: 9cd7211b1d72c272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"660cc074-49fa\"\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 139820\r\nexpires: Wed, 03 Feb 2027 20:38:25 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uwrd9CdQEF0marBTovmrBa5pvpib0cr1EotNU0UsCAZ08PQS%2BvX9bu62T1xAbKWkNCAAW8tqCzIKeHjkfJ8HOc4Y701LyFpa0g8zIIsrPEnnWdKlKbFYR1Xafdtm7hML9Eqk8nqJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103009,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52282)","md5":"c325be79a5ecca85d68eb9e5b65a547a","sha1":"f2a96686228994a46961657df4c9405afec8e9c2","sha256":"5ceaaba22d75b58e04150311f596306562a3e595e27ed4b1dfa451b82dda9e50","sha512":"4a71f958af9b67180f1ece38b96217f8b2c9009f7fd8f90f299e508808fa4daf3ac3e7ec6f64e47267d1c955f7a419cc15c57ba103c9925f507af4825abdd6e8","ssdeep":"1536:t1MCMPMCMjMCM4MCMwMCM3sVM3709gbQZMfjSFOlyPG9dXgRM0J:W709gUGGFwyPG9dwRM0J","tlshash":"16a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-04-05T18:44:57Z","last_seen":"2026-08-11T21:28:29.86516Z","times_seen":12615,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":6,"dns":0,"connect":1,"send":0,"wait":37,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/logo.png","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/logo.png HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 39431\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-9a07\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39431,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"7ea6ce2a6347b631674b17a672e7f51d","sha1":"4eec042d42bd11b9e95172b765b02bfaba505c00","sha256":"1b2e0248d5d7cff74bc696cbe0acc26e4e315e94273b8623a50aba0f7d180294","sha512":"be23ad2a8583b9162f60d8a1609b536bbe4159a641e882dbdf3f4a2af91e9b39e613f09b019bb34c930f504206b55dd78479484ce1ddd094908135f2d37c0645","ssdeep":"768:rLGaa1oU6K7GfAdmacLJxSgP9mfpLPyIIl4PVPpLoJ:3BaBtaAAaIJP90+mdBsJ","tlshash":"b403f2b199c7e1d48e5337815a9f907ab832fbdc4c98b0683b41dcbeca65a738c70455","first_seen":"2026-02-12T23:08:36.05427Z","last_seen":"2026-02-13T20:38:53.134384Z","times_seen":2,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":344,"dns":0,"connect":0,"send":0,"wait":75,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2a49.60746024.jpg","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2a49.60746024.jpg HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 62743\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-f517\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62743,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 1080x720, components 3","md5":"202aefc8e03ffd2a4eff351b7cf28a2f","sha1":"e68e2837c82f2e581b4f09f29c9a910d03c099ac","sha256":"81fde6eddfdaf6653dfacbd2c3e5befa6ddbf793155e44464330b95f52a756ba","sha512":"e475d526bd2d19ebd7ce83a73f029274479d3ff586ab55e4ee20b7455433fc0927fc3d9a87992ec7dd77d564997cd1c7db0b2122505b45477814d3016440bbfa","ssdeep":"1536:rOyMIuHyEGOR3w2O25LwbMpVbOB9OmW+gTAatBTIj/l:LM3HmOR3bO25UCIotBTIR","tlshash":"d75302e1229b2102a21ae77f80ec8ab9a7e5d4557b7d7d2c71e3879874ef01139d4d0c","first_seen":"2026-02-12T23:08:36.099338Z","last_seen":"2026-02-13T20:38:53.13741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":479,"dns":0,"connect":0,"send":0,"wait":88,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:26.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://asflsapp.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 20:38:26 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 117852\r\ncf-ray: 9cd7211cad52b28a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"660cc074-1cc5c\"\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 49385\r\nexpires: Wed, 03 Feb 2027 20:38:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3OJO32gN1ruXMjiyBFo8ysx9jn8xD2pORsi3F1M2bpwbiGeLzf%2B2i%2FQx0zaqxQM8A83Y9RiWyinQMn0xG%2FN7GPN2vggq8uMkCm9g9BrTZZxWPmhO0dfSSnrVrYbLvKm4foaadYe9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117852,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 117852, version 773.1280","md5":"b55b1345f0b919f0cab774ec25d6654e","sha1":"c39dd7c713983702de91b08ae00b194b0bdb9008","sha256":"232c6f6a7678304f9efaa26f30b1610debc2ba9f4cd636b5e6751c8d73761b92","sha512":"793756b3bf0e21181d06f44593a99a1986b90db4704f4765d4a1e8937acf3d1d38a750c6d6082545bbc80c04fc8dc03da5ab2b4a3f31b7f2345751050df115fb","ssdeep":"3072:Rs3c1iEht0b6W85CbPgRgaCMtsWOwydzrCyzhRaLZTBlZsEmOQadt:RDik3CzS8MtDOw+XaXZ8Of","tlshash":"74b31251ac7bce3f72b16c584a42db8aa3c4a3c9e3c174194eab3dadd11682e71d8d11","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T21:25:23.99655Z","times_seen":9580,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":45,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:26.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:52 GMT","end":"Mon, 20 Apr 2026 08:41:51 GMT"},"fingerprint":{"sha1":"0F:50:AB:64:9B:F5:E8:E2:93:93:57:63:8F:7E:FA:1E:85:EE:4E:69","sha256":"7A:C0:51:F4:28:EF:25:D1:05:45:35:E5:93:56:AE:8C:29:AB:52:F5:47:3A:13:FD:82:70:42:30:E3:17:55:D1"}}},"request":{"raw":"GET /maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://asflsapp.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Zqrk8Fmq2Hy4zeQkRPlz1A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1\r\nvary: Accept-Language, Origin, X-Origin, Referer\r\npragma: no-cache\r\nx-robots-tag: noindex,nofollow\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Fri, 13 Feb 2026 20:38:26 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 959\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=264\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]}],"data":{"size":2202,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1235)","md5":"d1f5490c8e1178261342618c2c8f292d","sha1":"69c05f756851623fb263e9e7041f8b0f873ada92","sha256":"583e1162f933dea20404585e1234ce1febb607271ddeec30b488630f74bf03cc","sha512":"d75454fcdc3c0245fbebc3375f2d6eed04c74e8d626b5f70e8e0a8fccdcd9cbd7aca4a64fb78fe1408d4c5b4b13d04eb716b8e7b995536b17302e172ea6c3afd","ssdeep":"","tlshash":"de4152040c56bcf2cf02125179b93b0a3aae80b724a1cdf1b4dc8d458f018a36917a9d","first_seen":"2026-02-13T20:38:53.14784Z","last_seen":"2026-02-13T20:38:53.14784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/main.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany","date":"2026-02-13T20:38:26.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /maps-api-v3/api/js/63/14d/main.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 10:44:59 GMT\r\nexpires: Fri, 12 Feb 2027 10:44:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 04 Feb 2026 08:39:34 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 122007\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":296228,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (547)","md5":"085296768382f38c696c4f02cd87f5b3","sha1":"6b243751a12a921bc4df483e3683c3037113f2a9","sha256":"1b39e2ccfce0a4c9cb6fcc2fa7a14ed1734cd025b3362a73906436345cad03cc","sha512":"4949a51f27436c46e2ab08f3489ede00652ee9adb3dcc0a86b72a0bfdcbbe49e17afc894df0fa265743ae6a4ba7998010b62d3e5425a9428116f29e105e47056","ssdeep":"6144:f9aXhBuO4wqO+qYeDr1t+SCDjEKuoF0P/VTeSeQW59VTdNf8p6NPDRXgpAWN0cz1:laXhBJ4wqO+qYeDr1t+SA4KuoF0P/VTf","tlshash":"9a542c9472a2706687b2e4e440370106f17e649af04c8eacb69ccde7bdf69464677f38","first_seen":"2026-02-04T21:21:09.989278Z","last_seen":"2026-08-11T10:46:24.96209Z","times_seen":10340,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/search.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany","date":"2026-02-13T20:38:26.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /maps-api-v3/api/js/63/14d/search.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 1112\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 10:44:59 GMT\r\nexpires: Fri, 12 Feb 2027 10:44:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 04 Feb 2026 08:39:34 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 122007\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2643,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (845)","md5":"651c2c51ef3f2477987742b4eb54e4d5","sha1":"67531696973bca4535103faceaf5fcfb4ece9238","sha256":"d61db1be28e3a0a85e01e74a806909f538ef3821e888469dff28f197c7632dcd","sha512":"247386852de06daa02902358e29e38cb4dda611dd56448c5a639b45e54dc39b5f35dbd3f51a3cf05568b5b4acd267d22f1256866f2e452b32676a53d13aa6422","ssdeep":"","tlshash":"c95144a33352f83b8676d2b124aa0081d8685812f405c55cfdbcedcba8f5e9305fae71","first_seen":"2026-02-04T21:26:02.733148Z","last_seen":"2026-02-18T19:25:27.204144Z","times_seen":8705,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany","date":"2026-02-13T20:38:27.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Fri, 13 Feb 2026 20:38:27 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 23\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.google.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nserver-timing: gfet4t7; dur=93\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a80554c91d9fca8acb82f023de02f11","sha1":"5f36b2ea290645ee34d943220a14b54ee5ea5be5","sha256":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","sha512":"ca4b6defb8adcc010050bc8b1bb8f8092c4928b8a0fba32146abcfb256e4d91672f88ca2cdf6210e754e5b8ac5e23fb023806ccd749ac8b701f79a691f03c87a","ssdeep":"","tlshash":"c7200000000000000000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-08-11T20:42:39.841204Z","times_seen":430996,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":67,"dns":1,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2b00.75144165.jpg","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2b00.75144165.jpg HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 19400\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-4bc8\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19400,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 1078x718, components 3","md5":"d8f90644f526a2777f8ffa6647a5237d","sha1":"70534941872628e7debd753b5490210046c0ede1","sha256":"d9dbe6fd643f5949015d0fe550e45f2043430277cc2c9efe75fa15508ef2881a","sha512":"9d0c22f7f2a5ae20beff677877e68d2eb4330a1d43ab1492711f24c1802048e1e6c46789e648101466f1187473950c10bf2ccd9624e9bd7fa391ce741b7917e1","ssdeep":"384:+JMn9/PHjbQrcyA+5UcAdGKOkzGNaDLFUeJ3S9VM8YzEINvtnd8:++/PnyG+L/kzGN7MW6zK","tlshash":"5692e90fea1a6a436829cfe8bf061cbc6714374c9da736961673ef8738a42045c4c56e","first_seen":"2026-02-12T23:08:36.049333Z","last_seen":"2026-02-13T20:38:53.157751Z","times_seen":2,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":17,"dns":1,"connect":46,"send":0,"wait":128,"receive":1,"ssl":217},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 13 Feb 2026 20:38:25 GMT\r\nage: 3949246\r\nx-served-by: cache-fra-etou8220150-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232803,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-08-11T21:09:48.669169Z","times_seen":26284,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":24,"dns":0,"connect":17,"send":0,"wait":14,"receive":7,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2a60.75468626.jpg","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2a60.75468626.jpg HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 72433\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-11af1\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 1080x720, components 3","md5":"f418b3e54cd1b321ec37ae885246f2c4","sha1":"9df2f72df6018e5806ed46a1cd3061b855842edf","sha256":"781867c2a6fca3f079d38761a15582355055e942d4384a0ac759357ee3976837","sha512":"25f25a0cf43229473c5a3e5a38eb37adbed815e842b31b28c2b854b2568b0e8d23955d129630a3c9349070264283f73ad75ba26fecbc3dfb90d1e5eeee01fc1a","ssdeep":"1536:rI8RWshmu1rw1o511XojxyQCQoQkOBIlEbNnnJ9C4rYTcURDQGuws:LR3hmuG+51ajcJdQk92nJInTc4aL","tlshash":"e163026db0625016970eb1366801b0ea7e92849f2673555eef204f90ba4ef3b8c97d0b","first_seen":"2026-02-12T23:08:36.047642Z","last_seen":"2026-02-13T20:38:53.169309Z","times_seen":2,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":485,"dns":0,"connect":0,"send":0,"wait":88,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/photos/kapitalkompass_face_696f96ccde2d15.90216523.jpg","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/photos/kapitalkompass_face_696f96ccde2d15.90216523.jpg HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 75520\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-12700\"\r\nExpires: Mon, 23 Feb 2026 20:38:25 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75520,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 480x720, components 3","md5":"ab789c23ef3b4545ee856ee288a9c64d","sha1":"36b0e3f45edb2eeb5c639259253940aba7ef3a3d","sha256":"97f422c4ec10897af9390b5d3edb19ff1ccfacb305a98f82a1e80fa1b0446696","sha512":"3a7684337048fa3932f6170defc811f79c14eddd68a046d6275a9d4b7d8ee5f74befe88557acb6b6f5d6ee8af1015ecc4ca3fde5b5b2d54f6862e41ed911300a","ssdeep":"1536:fW2QeMh0fWp1/aPjVlN+Pk62a9F+0QLADs3wFRz7uksd6kHRlK:FQrKup9aPLL6D+0fQ3iz7E8kHnK","tlshash":"8b730252dd43d9d05caa40772b3694b9ef83df31b98a6161a7f7382b130f0d1e8a6139","first_seen":"2026-02-12T23:08:36.065422Z","last_seen":"2026-02-13T20:38:53.172577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":108,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2a17.34387710.jpg","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2a17.34387710.jpg HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 55460\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-d8a4\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55460,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 1077x717, components 3","md5":"872b467626fcdee7d1075ecb34a6fcc7","sha1":"680fdcfeba9bfed54ee98029377c038f3ba3448d","sha256":"120b3ced846e78f732f4d9ac598edfa0e170b460cc30c4a9a48c31890b1f2de4","sha512":"075751c4b5b8e68462ad1bd342d55a58ff668ea8a97e5c6967ad752eb3c33590b9583990fabe098bff4428669729b47ff8fef95635b3a3a2c9c4ba89a33be446","ssdeep":"1536:rOaAizO5RKlIdL91eFDaitZYkFLNJxHhm:qaPzOa6d7eFDaitZYkFLNJxHhm","tlshash":"1a43019731576d8886ceeeb9fc0c0d3d1ad40717e2beb5ae2a651cf539240671c3a29c","first_seen":"2026-02-12T23:08:36.061987Z","last_seen":"2026-02-13T20:38:53.175667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":414,"dns":0,"connect":0,"send":0,"wait":77,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2a92.67533084.jpg","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2a92.67533084.jpg HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 68556\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-10bcc\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68556,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 1078x718, components 3","md5":"2c780161bc5ec3f6914f30af3f73ee8e","sha1":"2f2fc6393e0c5b3f1abe3627faed888b973c5df6","sha256":"f7483c20b9bff3a7871e4c34b77b0f72b98a1e6d6555ebc17c0d640db72dc3c3","sha512":"abfd5693d58bd62af1296cf84b239afc5c021d6cb7f41edae0459bb3586cfb6c313406388b46d00e82dfd3e4e0e5be8d8cc1a729779c88374c8677b734e22cf8","ssdeep":"1536:T0UAE3SgJES8Zzpn+eV+kN84IsDGox602gVagkMYWK:4rE33JE3zp+Wr5IsDGy602slYx","tlshash":"4b63f2671c0ec005559a80f5bd245c7e3908a329fd9abaff969a2de32d240772cdd43b","first_seen":"2026-02-12T23:08:36.070839Z","last_seen":"2026-02-13T20:38:53.178459Z","times_seen":2,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":26,"dns":1,"connect":46,"send":0,"wait":127,"receive":54,"ssl":224},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2ad7.95742633.jpg","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/photos/kapitalkompass_696f96ccde2ad7.95742633.jpg HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 27779\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-6c83\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27779,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 480x720, components 3","md5":"4f81fc856b2eb419032ee9b32a346170","sha1":"8ba69f5e4c70e3981054e766eac3ee23347b1c96","sha256":"c3ff62bd9da7ee7a12553ea47f1d8b3a8705f7151cc9da63ec298f0e350682c0","sha512":"dbc79d578341d1b10bcdbd72f60c984ddbfca1636b3486c9fb2f6a7cfe6fc157f1500394a48393bd475515818b58b13ae6af74fa5533b43064e8b0468d70b41d","ssdeep":"768:f5sT8Pt6LiRNfjnst1TfRbPpy1foEq/OqLvDmb3bOZ:fWTUtPjbnst1TfpYrq/OyKo","tlshash":"fcc2e106d7dd2a8fff4190f1aa80a97922b8875817d19ac147d7c114fcd69f224ca34c","first_seen":"2026-02-12T23:08:36.10184Z","last_seen":"2026-02-13T20:38:53.180847Z","times_seen":2,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":415,"dns":0,"connect":0,"send":0,"wait":97,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 13 Feb 2026 20:38:25 GMT\r\nage: 3876082\r\nx-served-by: cache-fra-etou8220126-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24464\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-08-11T20:46:50.190978Z","times_seen":30802,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/onion.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany","date":"2026-02-13T20:38:27.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /maps-api-v3/api/js/63/14d/onion.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10042\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 10:44:59 GMT\r\nexpires: Fri, 12 Feb 2027 10:44:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 04 Feb 2026 08:39:34 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 122008\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30874,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1803)","md5":"7b1e4c4cf6a7f8ad3896bb91f4204824","sha1":"cf06e3c45f19229889417e63c292e79ad02b4717","sha256":"8b15fb4c680cf50d12c71161882345d54f31506a939cc52ffc378c67462f0f37","sha512":"a556f8a69a7cccd0699165c3a00d4be8c865d3fae4403ac4619476572a21bdcff817486e06b6ce4a7a3131dd72353c76e72d5565c7b4343c03b01cb8e88dec40","ssdeep":"768:RwssFmzhdxWvpZ2dq3zO7jT2TXmgfNKQLdA02uzOsciUBa2lNDZKG0kU9NgmmOFJ:FYb2fduBqTel","tlshash":"35d282987193709782f2b6a1817f010be26da8c5f408899c79fc8cd67bf458626b5f3c","first_seen":"2026-02-04T21:17:54.12186Z","last_seen":"2026-07-15T12:21:29.050727Z","times_seen":12674,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/14d/search_impl.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?origin=mfe\u0026pb=!1m2!2m1!1sFriedrichstrasse+45,+10117+Berlin,+Germany","date":"2026-02-13T20:38:27.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /maps-api-v3/api/js/63/14d/search_impl.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 1331\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 10:44:59 GMT\r\nexpires: Fri, 12 Feb 2027 10:44:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 04 Feb 2026 08:39:34 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 122008\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3586,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (565)","md5":"32a4a8bb15ee32c7b77badb888e14cc9","sha1":"0a5e073627fdacdde9abcc734520ce5e080ec33b","sha256":"9e41265dcb5d1e258fcabcb5cb4ff062dc0950ecfa18139a2cfd281b73443a9d","sha512":"0bef43794b45163eefc8ee12aba6760f0d675b626468d7b75024163c86fbd9cd2444ed6e0ad42bbc3ea82957abba8b2403acc150f22ab38992e1f0fd6712489c","ssdeep":"","tlshash":"4f7142b532197293822951901c9d8018256cd0cab50ec4f6be58ef269efc8c793f1af4","first_seen":"2026-02-04T21:26:02.754983Z","last_seen":"2026-02-18T19:25:27.170134Z","times_seen":8062,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asflsapp.icu/_/asfineg-wp_1767955660/assets/photos/kapitalkompass_face_696f96ccde2d79.50079594.jpg","fqdn":"asflsapp.icu","domain":"asflsapp.icu","tld":"icu"},"ip":{"addr":"95.81.123.117","port":443,"asn":39308,"as":"Andishe Sabz Khazar Co. P.j.s.","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asflsapp.icu/","date":"2026-02-13T20:38:25.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"asflsapp.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 12:58:06 GMT","end":"Wed, 06 May 2026 12:58:05 GMT"},"fingerprint":{"sha1":"88:3A:6B:79:F9:EA:82:4B:DE:B5:8B:80:D2:72:BC:30:23:DF:D7:0F","sha256":"4A:72:53:8F:38:CA:C5:7F:55:91:7F:8B:53:34:C9:B9:C3:85:0F:B7:10:C3:3A:69:42:D8:C0:EE:B3:CF:91:D2"}}},"request":{"raw":"GET /_/asfineg-wp_1767955660/assets/photos/kapitalkompass_face_696f96ccde2d79.50079594.jpg HTTP/1.1\r\nHost: asflsapp.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asflsapp.icu/\r\nCookie: _subid=1sjos4f9g9c; 10a78=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEyN1wiOjE3NzEwMTUxMDV9LFwiY2FtcGFpZ25zXCI6e1wiNDJcIjoxNzcxMDE1MTA1fSxcInRpbWVcIjoxNzcxMDE1MTA1fSJ9.hm2NFUJXex5dV3Oz7KqcLx2n4Yq880flJjcXLeG9An8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 13 Feb 2026 20:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 75069\r\nLast-Modified: Thu, 05 Feb 2026 14:02:03 GMT\r\nConnection: keep-alive\r\nETag: \"6984a2db-1253d\"\r\nExpires: Mon, 23 Feb 2026 20:38:26 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75069,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 478x718, components 3","md5":"2ef000be07d5d6e6194b554d8b91b685","sha1":"3d6ef282158b0b85c591cd94e0bbb2150338b01f","sha256":"6d1b2d4c7a73eefa501a18070d17f3e3fe67a8d1f2b3a1c84c86758579997c07","sha512":"26183dba75d9083b0ba24907c9a3ea3859137af1d723f1a47648f263133cb4c61bafbdb8aee6e21142a004b2250d7272999bcfeb3609429592f98f0b60eb8d39","ssdeep":"1536:jX8usCbMuSedU5lCoudUaoB306FrSyQAMU1Xu0Aeii:xsCPd2PuqaQETyZl1XUDi","tlshash":"b57302d546b0f7986941cc5d8b3c6e974bbe1230919043c814faaa27b1561e292ff1f5","first_seen":"2026-02-12T23:08:36.075608Z","last_seen":"2026-02-13T20:38:53.196351Z","times_seen":2,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":21,"dns":1,"connect":27,"send":0,"wait":94,"receive":70,"ssl":181},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"asflsapp.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}