{"report_id":"8ff88156-e530-4ae9-b471-4ab669d2c3ae","version":6,"status":"done","tags":[],"date":"2026-04-02T14:57:43Z","url":{"schema":"https","addr":"eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"172.67.220.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"title":"Interpol","dom":{"size":91671,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56368)","md5":"fa89ce8d5fbce0914e1ab98109d0b6fc","sha1":"131f38b28f46b725a195553a8ba690644b800bf6","sha256":"ad352c73968f4646e812d754c3da54a86ca5589a3a98e5c1ca96256a88963750","sha512":"f7f650d0b51ea7a88f53d02f3c8ec694488488f7f8ba9175076529569cf742dac04ee19b52235c5660f52d64a6275db5e908180a84681c9ff9991a70a74c3d0a","ssdeep":"768:FlbR6cwkDxZ/DFTksPhwfj9IEIEBa4QuViUh:bwkFZRTksPSRIEIEBa4QuoQ","tlshash":"ee936833421935270537c2d520a95b77e2969e5ffae70a012eecd7f72beaca0705b009","dom_hash":"domhash1ff65907c07570b5bdf1bb17f2ade74c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"172.67.220.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-07T14:57:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-02T14:57:22Z","timestamp":1775141842,"ip_dst":{"addr":"104.26.1.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":52820,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI","source":"{\"timestamp\":\"2026-04-02T14:57:22.354460+0000\",\"flow_id\":1765676151886582,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":52820,\"dest_ip\":\"104.26.1.100\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2039595,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_10_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2025_04_17\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_10_28\"]}},\"tls\":{\"sni\":\"get.geojs.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3509,\"start\":\"2026-04-02T14:57:22.348918+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"eurorefund-italy.xyz","ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-04-02T14:57:43.862506Z","last_seen":"2026-04-02T14:57:43.862506Z","alert_count":15,"request_count":15,"received_data":1373917,"sent_data":14903,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":2,"received_data":49402,"sent_data":1123,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":5761,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"get.geojs.io","ip":{"addr":"104.26.1.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-18","domain_rank":99948,"first_seen":"2017-03-30T18:44:25Z","last_seen":"2026-04-01T23:11:59.352776Z","alert_count":0,"request_count":1,"received_data":956,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5d0330b758168d7bb923e0ab9eab9c8","sha1":"87d7d8474971205e929c64543db56fa532c3313e","sha256":"cc4037ef03f66e24bbb61a36525955055f74757a7771bd9a121431f7c5dc1558","sha512":"66e25441e4dd35b60aecda3028dcb91622b59f735254f19523fab1df6980997253a6e4ecf2dc5c7f9045a7d4912b4f6b16a177cbb33ce65b8f02b38de5fb230b","ssdeep":"","tlshash":"08111000d9d90836130572f7fa82a586b06e613bf481a79d302c07ad7ed311de13a7ce","size":956,"data":"","first_seen":"2026-04-02T14:57:47.069079Z","last_seen":"2026-04-02T14:57:47.069079Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/libs/jquery-3.6.0.min.js","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d61e1cd8875e294b853fae82b39d2dee","sha1":"0f7d51d4a1d4ce1cf47dd758e26071dafa938c2d","sha256":"d09e227d3d34e12735eb6b0e5af9e57123219aa111b509004f1237f8c0d03e72","sha512":"2da0206547f311e79bf7682fbdb7d22863ed94fa29d45c9c39bc4958fd3d7e21822c99792c86ad806b1c2efb07c8b34b71439be136778cba4a579da6bf685453","ssdeep":"1536:uLiM6nGLjLLdzN4bx60BW56Tqoam1UO/sm683CbouED6dB1iu81u86xiWzx:WnNO/sm6ZnZijciWzx","tlshash":"dc9319ddb2c7b12207a771b9007f510bf2361959280d8450f169e8e9bc79b8a827bf7d","size":89138,"data":"","first_seen":"2024-09-19T19:52:06.656293Z","last_seen":"2026-07-04T03:35:56.593505Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/libs/intlTelInput.js","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c79a1dd02df4c628a56f3835471fc932","sha1":"f2fa8f443e3b91187c8c786c5242c60a65364bf9","sha256":"b31fd662513a7c7f7c90c8df2a060f319219e380c774326322034acb0d7b2116","sha512":"a245ebd8efa3f512a4aeac9c3fc88fe7cb2593d1bd8e67225f88b01dd52ef866dd44adf931fb20913b35877ca81f630d48587cf9dcc21749f22d376f45023594","ssdeep":"768:AqDnUfAow5D45YiLpJonAuN1dlfJLKgHJAV:lo5JoAuN1U","tlshash":"3cf2c89d7344533be8fac196b89b014b2aee35141a84c89c787dcfcc4aa8ed5b567334","size":34655,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.592968Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/js/main.js","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee75c7d4d7c72cf68829b13a960d6757","sha1":"362f0fb094c33b80265e6d7f2f8f960734cbfb92","sha256":"d7d1a655a19db8c5f18971bd9b0711519759ff7cfbcea12fe54388620cf6aa67","sha512":"722fa9cca8b484b2954e76853466484d0e9957714ba02601114e557765a3b2fdcd550215efb62263e72000d0d56bb6350c700368b1a0034fca3794f05443bf2b","ssdeep":"48:qkA9AZeCuasctsDWv3Fw0c60+8Pf+YImv8VHo0eLMJCqPKNUYlNi8tno8:PAWuxiv3a60+8X+KUleLz207lV3","tlshash":"a1a1850a10b50c77013b36ba5a9b520276e5006fee58e9013d6c6bdd1f6c98e16f0bef","size":4832,"data":"","first_seen":"2026-04-02T14:57:47.067212Z","last_seen":"2026-04-02T14:57:47.067212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/libs/utils.js?v=22","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41e291dfd45560d2d4fb659a40ca4c56","sha1":"3792bce8f036876641cc14702b1f6a26e6d0d44d","sha256":"8abb51715ec9b4b8587b197b320ba4b6b0092234563b2c72fba42583810ef0da","sha512":"7521362194cc5073e616d9bd9701b5885216aef6da96e497cd08f85a5cf6fa94d678bd2bafa7e0860440cb7d85725d907f88156ee6d731af1d6a18a6335ee0cb","ssdeep":"3072:7XEe8tABjO03k4Pc03C4P0IMOx2EZDmXmoLGYAIrBm6nRTvUQL+D4tQrxaySCkKU:7Xwu59hZDmXmod1","tlshash":"6634deebd63c9736a5d97b35968eb3cd5a8cbca3c848527826c3b54f53788e0706c205","size":248044,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.599196Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/libs/jquery.maskedinput.js","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9833dfbc30d6fc0ebf316ed43952707d","sha1":"43772e9441e42983f229dc13ca3477d6f8f2f5e2","sha256":"bd9074e7da91f4f7df45000ea013ca770d4e9a69f2a2eb3955f755bd83917206","sha512":"c86ec760305d02e4ba89008e6ae78557e19ced1a78117e5be62c8250fc4b57bfb078de6491d154029a4d932d148bb975e3480843fc45b3ebd85ef33863fe6160","ssdeep":"96:6xaRbOnjRn9J/iDysXyDE48NsYenp8mWN3kPTz5HD2:4aCjp9J/AysXUE4OneeNyx2","tlshash":"cf91b99dbc9c721123b748a100afc5595235bf19485fd4b0e121f8d1f8389aa325bebf","size":4215,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.598689Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/img/hero-bg.png","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:22.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/img/hero-bg.png HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/lander/intershot_new/css/main.css\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145; pixel=1368378865007468\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 504460\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\netag: \"68d30ccd-7b28c\"\r\nexpires: Sun, 12 Apr 2026 00:04:25 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 53576\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pM4NK3E6mcNE%2B4%2FhHyksaan2D9RgPHkFQB9NtvG1G%2FqjeSyLFId%2B%2Fi7E%2FldKhb58ZnAvOYBl5Z3xVKWWv0l9j%2FrHwpq5RmvYZ1NUVMqGZAnMOcRY%2Bjp5Z1TbKO2AchAdJZGNBaSqaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60af80f8a55a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":504460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1140 x 390, 8-bit/color RGBA, non-interlaced","md5":"61c6658d9456b3f0445a5951a64296b1","sha1":"00858004452571da899a282362af90df87768fe8","sha256":"479cb2a8e3ce8f51835a4fe345147762ac90b160aa986a920a30d25bda77096f","sha512":"229e44fa3224760ef87b7c7cb0f3df9dc84cf4b097c1b00eaee6aa7a86848b67fe92af7a38757b5f28c4a8453bfd6fd82e07eee0c78473d74b20419ad3b0dac5","ssdeep":"12288:rkPKC7zgqB7vVINGk8R2DHjrqA/RWBAfv5ccPc:cTcNt2UjmA/RWBATU","tlshash":"beb4230cd437aac102dd44e6387b7905dbfd113ae6dd1bea4520a8998a273b3f211f76","first_seen":"2026-04-02T14:57:47.05298Z","last_seen":"2026-05-24T06:20:25.92353Z","times_seen":4,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/css/intlTelInput.min.css","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:21.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/css/intlTelInput.min.css HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\npriority: u=2,i=?0\r\netag: W/\"68d30ccd-62b1\"\r\nexpires: Sun, 12 Apr 2026 00:04:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 53578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N6gdyqfPC%2FX4GqA0hzSWWLz0nCGegwV9khi%2BNo%2BMzLE61Nrs4F5vnRKTq4RZ3It9mBfEpOh4ofQIV%2FafTUwMt35AsmM3sT5QfziOumhCZsc4KnL%2FaNaPJHw8QoMaR4BtCQaFQL65Qg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e60af7fa8935a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25265,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"16417bd404fffaf2387e70b3c50fa757","sha1":"c995f6e9323769cb8f81c2105e6dcfbc56096a15","sha256":"04ce566e74691f4c17592d6662bf8cbf6b5e3b45fde9e7fb4e6a50d6b55d5954","sha512":"d20348843f62374289b344c8d89fd0036c2e3b7f89eca7dbad41295e9fdb0315cde4225edac56c13659cadda51c5df41e3fbdb2fc7e661b4d743ca788da4c453","ssdeep":"384:HzITF7FWKTmwAmDQTeIcQeIWi7mZlsaAaniXlvhdB:HqF7FWK/Hib","tlshash":"f0b236678bb32945b92bf2a1196406a237375c0bf81a4f2d63d639bddf490e014f37a1","first_seen":"2024-05-10T20:55:53Z","last_seen":"2026-06-24T14:05:07.260976Z","times_seen":20,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/img/logo.png","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:21.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/img/logo.png HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 23722\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\netag: \"68d30ccd-5caa\"\r\nexpires: Sun, 12 Apr 2026 00:04:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 53578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lUBIy5YTFLk7ETvO2G2r0hxdoQ7XDls2%2FUy71qeA68Bqv0XXyxxbCVQ6leIPMys9TnxR8okTLXROcK2fa3Q7Jzu8i7xewhYAsC7um%2FeEY7Ht2zFqEs1c19EmI%2BrrmPApqeDjl5cxug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60af7fa8955a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23722,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 184 x 169, 8-bit/color RGBA, non-interlaced","md5":"aefc362c713f713629560b6af24f9847","sha1":"b4291bb7d59f367073bf478df5457fcad02918e4","sha256":"8e58401464a02b7abb4f7d853b068e99111c8014a091b1904678f823a24cb07c","sha512":"17d0792109869f14143fc5ba07f69bfbb45dffccc4cd25c7c098692150cef0fd9bc8be9b81fb5def29aea3096a5462fa898c7763aee661d452ae92f054cc0093","ssdeep":"384:iLLHZSsJUxzmuIQHeBTnSRTVKnoI5VHqA6D3PWRy2AFWGuwF/RUrguFt+d1:W1LSxz2Q+o68bhYzKRo1ef","tlshash":"98b2e19a52c268067604f8bd535130d9fe844efedfb08666bef4069781532b12fef099","first_seen":"2026-04-02T14:57:47.054999Z","last_seen":"2026-05-24T06:20:25.921217Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/libs/intlTelInput.js","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:21.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/libs/intlTelInput.js HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\npriority: u=3,i=?0\r\netag: W/\"68d30ccd-87c4\"\r\nexpires: Sun, 12 Apr 2026 14:57:21 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BgBK7HSNkImehNjyCqfPC7PCgOw7qFJscrH0w8846Mt6byrd9bPkp7Eo1rW7lN3K1wzO1%2FTqJYfUwEZkBS9%2BsvvIImLBUjhFnRqizuTZNd91FHkRDTmtBg7i74ChGhXdoi61LO1bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e60af7fa8975a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34756,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34020), with no line terminators","md5":"c79a1dd02df4c628a56f3835471fc932","sha1":"f2fa8f443e3b91187c8c786c5242c60a65364bf9","sha256":"b31fd662513a7c7f7c90c8df2a060f319219e380c774326322034acb0d7b2116","sha512":"a245ebd8efa3f512a4aeac9c3fc88fe7cb2593d1bd8e67225f88b01dd52ef866dd44adf931fb20913b35877ca81f630d48587cf9dcc21749f22d376f45023594","ssdeep":"768:AqDnUfAow5D45YiLpJonAuN1dlfJLKgHJAV:lo5JoAuN1U","tlshash":"3cf2c89d7344533be8fac196b89b014b2aee35141a84c89c787dcfcc4aa8ed5b567334","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.592968Z","times_seen":92,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/libs/jquery-3.6.0.min.js","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:21.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/libs/jquery-3.6.0.min.js HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\npriority: u=3,i=?0\r\netag: W/\"68d30ccd-15c32\"\r\nexpires: Sun, 12 Apr 2026 00:04:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 53578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fF3jhuSSpQUcGWWKdYsld0stZDLNiI1gase4Ft9siHUFH35UFgJ4Y2V0d56CO7in3ssqiL3yvQIKjNj0EtjiuxWj56V2HX8KF%2F%2FPCgE3ejtP8RM8g47aaDEDDrmcb9OxWJYAdwUozg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e60af7fa8985a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"d61e1cd8875e294b853fae82b39d2dee","sha1":"0f7d51d4a1d4ce1cf47dd758e26071dafa938c2d","sha256":"d09e227d3d34e12735eb6b0e5af9e57123219aa111b509004f1237f8c0d03e72","sha512":"2da0206547f311e79bf7682fbdb7d22863ed94fa29d45c9c39bc4958fd3d7e21822c99792c86ad806b1c2efb07c8b34b71439be136778cba4a579da6bf685453","ssdeep":"1536:uLiM6nGLjLLdzN4bx60BW56Tqoam1UO/sm683CbouED6dB1iu81u86xiWzx:WnNO/sm6ZnZijciWzx","tlshash":"dc9319ddb2c7b12207a771b9007f510bf2361959280d8450f169e8e9bc79b8a827bf7d","first_seen":"2024-09-19T19:52:06.656293Z","last_seen":"2026-07-04T03:35:56.593505Z","times_seen":60,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/libs/utils.js?v=22","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:21.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/libs/utils.js?v=22 HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\npriority: u=3,i=?0\r\netag: W/\"68d30ccd-3c8ec\"\r\nexpires: Sun, 12 Apr 2026 14:57:21 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7D2ZOJpuCUFjlXs%2Fu%2BVqitxOplr17FNiECsjO%2Bpr6NlOoygHQIddJX2OgUAvfNzmjCBgVdI82YZK2cfqKA%2FgX2CoDTbdTlZLlwGI7VuKyjS2ruSVC9LBTVp6k8Z2o05D6Db9pn0phg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e60af7fa89a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248044,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"41e291dfd45560d2d4fb659a40ca4c56","sha1":"3792bce8f036876641cc14702b1f6a26e6d0d44d","sha256":"8abb51715ec9b4b8587b197b320ba4b6b0092234563b2c72fba42583810ef0da","sha512":"7521362194cc5073e616d9bd9701b5885216aef6da96e497cd08f85a5cf6fa94d678bd2bafa7e0860440cb7d85725d907f88156ee6d731af1d6a18a6335ee0cb","ssdeep":"3072:7XEe8tABjO03k4Pc03C4P0IMOx2EZDmXmoLGYAIrBm6nRTvUQL+D4tQrxaySCkKU:7Xwu59hZDmXmod1","tlshash":"6634deebd63c9736a5d97b35968eb3cd5a8cbca3c848527826c3b54f53788e0706c205","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.599196Z","times_seen":90,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/img/time-bg.png","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:22.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/img/time-bg.png HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/lander/intershot_new/css/main.css\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145; pixel=1368378865007468\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 268546\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\netag: \"68d30ccd-41902\"\r\nexpires: Sun, 12 Apr 2026 14:57:22 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13qdp9goFfeCJkUa6Ocrbk3p6lo%2Fzm7m9mrfQxKylCqniMrIvjuCyjTNNtmo8W3Hs3FW1HlNESETBehif3%2B2tfOKTBV6C%2FOGGK0Pz2FaK%2FNH49mXE60MPhB0pCcV1k6sfcRCYBcfLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60af80f8a65a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268546,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 804 x 462, 8-bit/color RGBA, non-interlaced","md5":"9bb4a6b5f3792beb05fdf3c7d2a53955","sha1":"e7d5a87663105e8c8744a0a237fe210ae57065fc","sha256":"138e548f1c06bfaae4ecdf023b8fc2e797d566e645a65d5f5ad2045d16d458a9","sha512":"4f3b857cdbc9e3e5cbb63b18ed34c6bcfe8129a47f171cdb2c6eeaf76e4730d52293a2844fc65380ad57600287c27df43a7fd28dad1ef0248ed03d58bc0c8edc","ssdeep":"3072:aP1TDlMTCnD3pIC9gaJM2sW0YPuPR/iMr4veXRypGtIUu3zX1dF4TRXxUDehGqHY:a12GDaC9vMR/iVqRy8n8d4XxUQGq6sC","tlshash":"e94423b8bdced2c5bb1e9d3595c6707e09a75b6062a0f90532e6016f825934d3fa0fc2","first_seen":"2026-04-02T14:57:47.058766Z","last_seen":"2026-05-24T06:20:25.916588Z","times_seen":4,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_fjbvMwCp504jAa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:22.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_fjbvMwCp504jAa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://eurorefund-italy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35148\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 21:40:31 GMT\r\nexpires: Sat, 27 Mar 2027 21:40:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 494211\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35148,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35148, version 1.0","md5":"668e6f05ea3ddf3faa59b34f42a4a135","sha1":"5bc094f86d855234fcaf2159f5be6ff843876b53","sha256":"c18c15f12fa091b2d893eeeaceaded0ff4eef16507eb721261912d2e3d5bc99d","sha512":"6dbebc2128736ca5203b4ce2b885e2006f3ba22e716035865bcef3dc67e3878dad3fecbb849c24a6b0f432e7386dddec131ce7d315191e62e344e6a06b93a74a","ssdeep":"768:3xtohmguZOL9Pei3wcnMq1qZnndg3GebK5eKaBFdiEL/9eM17PMfGgrsP3h5oQCs:BtoOOWw+qc5yWebKhapiEL/MeAfGoGjr","tlshash":"0df2f23f14964eb2ef3b0d31b6f4e4b5c9be890d23ad8fa8518027735906437b471629","first_seen":"2025-06-02T07:25:03.904113Z","last_seen":"2026-07-24T08:32:15.666678Z","times_seen":132,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":83,"dns":1,"connect":21,"send":0,"wait":22,"receive":23,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-02T14:57:21.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13 HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 14:57:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncache-control: no-cache, no-store, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQsT8ovYL3nlDYNiSCNsvnhueBpw0hhkmnd9arPM1%2BRkTKFrs2gFd0cYW2bvoK6ERf8KqEZKqQqCwripOThemDuZuu5krF6NWPyfH%2BrbbMCaKVywefzEVtbC7NZWmT2o32dokwSLRQ%3D%3D\"}]}\r\nexpires: Thu, 02 Apr 2026 14:57:21 GMT\r\nset-cookie: _subid=1sjos4f3r29t; expires=Sun, 03 May 2026 14:57:21 GMT; path=/\n0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; expires=Fri, 03 Apr 2026 14:57:21 GMT; path=/\n_token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145; expires=Sun, 03 May 2026 14:57:21 GMT; path=/\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.4.33\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e60af7cfc8fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":11247,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (349)","md5":"7aca2713d9eb4d5395e5c3be2fdca132","sha1":"efdefa18403225c556f1d921f9a0fe552f35b42b","sha256":"b23ef347337017fd2689f666d3471393c3b4d94d031ede6deb8cb9be850e5682","sha512":"92a370e80688554ff4e6cc014294336c56b30d152c7ae6263b7c03ddeba6494f0f6fc0a6ae836afdb4f3dfaa5239a396b5ac6ca7a9179530379cfbd2ee01cfda","ssdeep":"192:T5xKIFsKAOmJgIYmKLkKJso/RqskvzZSrSfUhCIPedaiwtHUfs/MCOYcPWS:T5okR6c/hCIPwaiwt0fxnuS","tlshash":"f532742428e7d8eb0087b0beeaa7a2053d7490177545da4478fc07b46fe1d2e8a777c9","first_seen":"2026-04-02T14:57:47.060233Z","last_seen":"2026-04-02T14:57:47.060233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":75,"dns":57,"connect":1,"send":0,"wait":252,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz@0,14..32;1,14..32\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:21.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz@0,14..32;1,14..32\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 02 Apr 2026 14:57:21 GMT\r\ndate: Thu, 02 Apr 2026 14:57:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5075,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d588945e36282970403b358308029ac7","sha1":"ca4d1b15960329d3c37846fbc2059fe3e7bb4383","sha256":"620f18ae1a78ebdc09e21af503935eeecf65bd0688eb8fdaddb0053b2b08fabd","sha512":"ed66f5d8496f9a8ae3b2f2944ed1c79f839cf78fedd6bacf48145726d3b4e58bbfea0f738b2190b28df94e1411ea091a1118bf059b40daf8d285e37d5c5f519f","ssdeep":"96:aYgEa0oqYgEa0ZFZHYgEa0qYgEa003vYgEa0AYgEa0yJc+uTYgEa0tNDOEaEqOEa:vOTfO9OgOH3gO8O1VOTENf+H34XIDu","tlshash":"6ca1bb92002bd440ab931dc623cf7e36adce11a57486d47d9bfe0cc96cead63522875d","first_seen":"2025-10-01T05:45:21.748177Z","last_seen":"2026-06-08T14:47:37.729895Z","times_seen":34,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":83,"dns":1,"connect":22,"send":0,"wait":33,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/css/main.css","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:21.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/css/main.css HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:21 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 00:04:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 53578\r\ncf-cache-status: HIT\r\netag: W/\"68d30ccd-ba4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQfJc4Pv27C5i%2B6GFPwExHaVcMX6WQq9KGrQrrUzfsqf4H14SlC9yCg%2B%2FsGRaQ1UjHf21RNiYpbUw0dJDPy8fv%2BA84N2dYHHJxtarF3na%2FJ2OFVdJ8iKUzoZu%2F5D4UfrgnqrBHbrQA%3D%3D\"}]}\r\ncf-ray: 9e60af7fa8945a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2980,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f4950f80fe36df0b67005789c15c2c35","sha1":"cf3e4a34400af7743de9e6709ec729baa09f0445","sha256":"857097bb2b058b54b3b051ff77036e79d9f6ff3f650b7601b82ab340614e2b33","sha512":"311ddbff6a077959ab1b54c9545e4da342891b21d182619a4e4ae8e1554761fb1b45fb4db63575220e4f52aa4c77604e097ce9fc37159dfd62d8fb949f0fbbf2","ssdeep":"","tlshash":"9851bcd8e505a005b27b8d74b3a25f96a74d40529b0787bebff0515cf2899998321fcc","first_seen":"2026-04-02T14:57:47.062649Z","last_seen":"2026-04-02T14:57:47.062649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/libs/jquery.maskedinput.js","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:21.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/libs/jquery.maskedinput.js HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\npriority: u=3,i=?0\r\netag: W/\"68d30ccd-1077\"\r\nexpires: Sun, 12 Apr 2026 00:04:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 53578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v74%2Fwl%2FuqfFijkevoXr6hC%2FFwM5a8djP6JI7p4HTXpLIb8%2BYp9%2FBOVPwO90%2B%2Fu79M4wL634yBNbEEjnol784zowRZxX8DBykBHZI5wQCXvDVahn7NnSZqR6o2tO6T36hGLzg1UX%2F4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e60af7fa8995a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4215,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4215), with no line terminators","md5":"9833dfbc30d6fc0ebf316ed43952707d","sha1":"43772e9441e42983f229dc13ca3477d6f8f2f5e2","sha256":"bd9074e7da91f4f7df45000ea013ca770d4e9a69f2a2eb3955f755bd83917206","sha512":"c86ec760305d02e4ba89008e6ae78557e19ced1a78117e5be62c8250fc4b57bfb078de6491d154029a4d932d148bb975e3480843fc45b3ebd85ef33863fe6160","ssdeep":"96:6xaRbOnjRn9J/iDysXyDE48NsYenp8mWN3kPTz5HD2:4aCjp9J/AysXUE4OneeNyx2","tlshash":"cf91b99dbc9c721123b748a100afc5595235bf19485fd4b0e121f8d1f8389aa325bebf","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.598689Z","times_seen":100,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_fjbvMwCp504jAa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:22.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_fjbvMwCp504jAa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://eurorefund-italy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12584\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 01 Apr 2026 08:46:17 GMT\r\nexpires: Thu, 01 Apr 2027 08:46:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:41:40 GMT\r\ncontent-type: font/woff2\r\nage: 108665\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12584,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12584, version 1.0","md5":"def6a57b7dcc09aadefacda79ebb99ec","sha1":"5dd2eaf640747ef7747a350b16608ee1c9cd7185","sha256":"daa0e13c3793e2dc909e51a6babd3c51d54d5ef27a1cabb68282f2c4758de018","sha512":"b827243cad2ec623192000a437ec887cde234226349ceb36531a772d0a3d1792e58c21b7daf7b07148b334772a17bdef4903cabed67e6d082e295da409051d56","ssdeep":"384:fgTQP8AgBsUE+f/ypYiQQp8bJP9qTDr0d5R:fgTQyGUEvuiQQpkPgr0nR","tlshash":"c042bfb0d361a84af53342bac5a58c264ee557c4975d99278cb43f6f1bb22c6ec9c030","first_seen":"2026-04-02T14:57:47.064508Z","last_seen":"2026-04-02T14:57:47.064508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":127,"dns":1,"connect":21,"send":0,"wait":22,"receive":3,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/img/logo.png","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:22.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/img/logo.png HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145; pixel=1368378865007468; token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145; subid=1sjos4f3r29t; aff=13; flow=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 23722\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\netag: \"68d30ccd-5caa\"\r\nexpires: Sun, 12 Apr 2026 00:04:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 53578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8tTqo5Pi4UblCnRU84wMU%2BDtOQni8n9iApVE9e%2BxhodjkBEETZhzASyNfh2d%2BdbiyfYvywyLPiB%2BPEOEBwlrYPOlF%2Fqpa%2FMwl1Kn%2FRPUDt0wO62KqsyyGgO4ROxT1m982yCt%2F%2F77uQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e60af8268ce5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23722,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 184 x 169, 8-bit/color RGBA, non-interlaced","md5":"aefc362c713f713629560b6af24f9847","sha1":"b4291bb7d59f367073bf478df5457fcad02918e4","sha256":"8e58401464a02b7abb4f7d853b068e99111c8014a091b1904678f823a24cb07c","sha512":"17d0792109869f14143fc5ba07f69bfbb45dffccc4cd25c7c098692150cef0fd9bc8be9b81fb5def29aea3096a5462fa898c7763aee661d452ae92f054cc0093","ssdeep":"384:iLLHZSsJUxzmuIQHeBTnSRTVKnoI5VHqA6D3PWRy2AFWGuwF/RUrguFt+d1:W1LSxz2Q+o68bhYzKRo1ef","tlshash":"98b2e19a52c268067604f8bd535130d9fe844efedfb08666bef4069781532b12fef099","first_seen":"2026-04-02T14:57:47.054999Z","last_seen":"2026-05-24T06:20:25.921217Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/css/reset.css","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:21.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/css/reset.css HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:21 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 12 Apr 2026 00:04:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 53578\r\ncf-cache-status: HIT\r\netag: W/\"68d30ccd-50e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTM6eKEKPsAhrtkh1VLuGu6LDjz5vMcj8vpvisoj20nyNN05gqTfs8lqx5m2CtZasFiCOEW4Gd9wbtEXzDNpLiFGJ5AEABMHapOgs3c2QS1MKP1GS%2BO%2BvmTRjlCsSncrH%2B%2BNYtQw%2Bw%3D%3D\"}]}\r\ncf-ray: 9e60af7fa8925a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1294,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e9df2baf8ec1199293b9cffa75a4983e","sha1":"bdf2a1149830631b9c0210d4525a285abf2c87db","sha256":"22f6d56ee46d42f7d8ff716a0493d01aff2903caacf552df5d55e18d5600e460","sha512":"12da4253394c69483618bae6930a8c69bb67d0c0f720eb360384c508cba9705022939add1c36b9ce13025891833fb6b7d5d8d5083d5af3a44781872e4389ad47","ssdeep":"","tlshash":"232120a021b5ae542123d67876c6db81731cc112091dbdf89ef444ac8f8a34997f235e","first_seen":"2026-03-02T08:26:39.922667Z","last_seen":"2026-05-24T06:20:25.913683Z","times_seen":14,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/img/woman.png","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:21.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/img/woman.png HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 48564\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\netag: \"68d30ccd-bdb4\"\r\nexpires: Sun, 12 Apr 2026 00:04:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 53578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W0gHLaxWqA1XZgOH90oz0Sea5fxH8jRWhBQ5PPFBidGLmnjhsA33tyDEWh7CNw9bOGcZ6IBQok%2F7WgUHTahjeeoukC74uqGXKVm86C3cWdJ81Zo5uN8PgJLcIUy6jCAYa0TVYBtaVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60af7fa8965a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48564,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"7125502ea285afaa7383b4977a91c481","sha1":"6319d36f1c2c1d70709ac283a85b4c933fec3b7f","sha256":"64aae7cf764479fa7cbcfead20324e45d06162f66f44813414a3bd0a616c0513","sha512":"d7843821a96f781bd4927063e22a9615e6d58c9c44317feabd7f2ce9dfb027cc6cc3313fa605e1d1b9e8224c6d079d47fbc30f6bcea657f31f0058a9aec21139","ssdeep":"768:LHBdqFfUA+HYvcnMV2izDaMYNBO1PGbylttHMO6qREvUoXB+fwrRvUH2vS:DBdqaHtQ2iz+MYyYAttHc+EPB+faRcHD","tlshash":"2b23021897f8c58a3255a8fadda3bb532b7815eb9750ef079430c5d2b301ca2853d6c2","first_seen":"2026-04-02T14:57:47.066249Z","last_seen":"2026-05-24T06:20:25.915299Z","times_seen":4,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/js/main.js","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:21.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/js/main.js HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\npriority: u=3,i=?0\r\netag: W/\"68d30ccd-12e0\"\r\nexpires: Sun, 12 Apr 2026 14:57:21 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tiVvwNkfvK7AaTuLTiA2UF4slAhMB5zPqp8dQuUiRGzyWrczQidiGvCA3jrDwmDFUmoGE%2FqaUrjpmxneeSkPqP9ZikV1XlmTn1jMyvD6Ytv6%2BCI8QhBE434rM3jl5x21pacbBieJgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e60af7fb89b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4832,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"ee75c7d4d7c72cf68829b13a960d6757","sha1":"362f0fb094c33b80265e6d7f2f8f960734cbfb92","sha256":"d7d1a655a19db8c5f18971bd9b0711519759ff7cfbcea12fe54388620cf6aa67","sha512":"722fa9cca8b484b2954e76853466484d0e9957714ba02601114e557765a3b2fdcd550215efb62263e72000d0d56bb6350c700368b1a0034fca3794f05443bf2b","ssdeep":"48:qkA9AZeCuasctsDWv3Fw0c60+8Pf+YImv8VHo0eLMJCqPKNUYlNi8tno8:PAWuxiv3a60+8X+KUleLz207lV3","tlshash":"a1a1850a10b50c77013b36ba5a9b520276e5006fee58e9013d6c6bdd1f6c98e16f0bef","first_seen":"2026-04-02T14:57:47.067212Z","last_seen":"2026-04-02T14:57:47.067212Z","times_seen":1,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get.geojs.io/v1/ip/country.json","fqdn":"get.geojs.io","domain":"geojs.io","tld":"io"},"ip":{"addr":"104.26.1.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:22.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geojs.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 07:10:51 GMT","end":"Mon, 18 May 2026 08:10:47 GMT"},"fingerprint":{"sha1":"EF:5C:D3:F8:E6:B7:38:CD:CA:46:66:77:FC:18:FE:8C:52:3D:67:B9","sha256":"02:D3:72:B3:A3:39:B5:47:16:7B:73:15:97:B5:EF:8E:7B:0A:14:D2:1E:C7:AD:7A:AF:C5:26:23:EB:93:A1:2E"}}},"request":{"raw":"GET /v1/ip/country.json HTTP/1.1\r\nHost: get.geojs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eurorefund-italy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 14:57:22 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-request-id: 24a45b6f70df42aadbd68984d839adde-ASH\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ngeojs-backend: ash-01\r\nlast-modified: Thu, 02 Apr 2026 14:57:22 GMT\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OesIyIyF18JJx9kwSiCIiYqvKaI7zV8d37D7OK7LwhSg3fAw5aoSHb7l2jVSs0TxnfjJckEqVVlNZCGepknrl7SQeHPeVPCm0j%2B6R9AzCBhKHWjCje65ZOWi0FBadA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e60af82ce8556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"54400c77b72b40a2e948ef52d4abb096","sha1":"2d4b2d15425f9aa29ecdb2c336390cf078928511","sha256":"be4ef38271c428e15a35e8582e5c7bd3df677b5478f84c323bf42a74a15336bd","sha512":"b499b922309a28a1c41d1b06b3b034eeebccb40c5f40054617adce3098b672fdbc76c59402d65677b635326a4a710da754d03cb79c0e25831fce08bcf6c2e05e","ssdeep":"","tlshash":"4da022ae20820b2ccc20c2eca00b338223c2c202c33f2803c0c03f08c3003ec2000220","first_seen":"2023-08-05T23:07:18Z","last_seen":"2026-06-06T18:12:42.644428Z","times_seen":972,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":44,"dns":34,"connect":1,"send":0,"wait":140,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eurorefund-italy.xyz/lander/intershot_new/img/flags.png","fqdn":"eurorefund-italy.xyz","domain":"eurorefund-italy.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eurorefund-italy.xyz/x8dcjKnq?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1368378865007468\u0026ad_name={{ad.name}}\u0026aff=13","date":"2026-04-02T14:57:22.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurorefund-italy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 09:02:36 GMT","end":"Fri, 26 Jun 2026 10:00:11 GMT"},"fingerprint":{"sha1":"39:C6:DF:52:8B:86:31:E9:63:71:00:75:F1:30:3C:B0:E6:A3:8F:46","sha256":"95:4C:22:86:02:91:61:89:F1:A2:A7:F1:52:52:CC:BA:FD:23:52:DB:BA:0E:03:CA:A7:E1:28:84:3D:15:78:79"}}},"request":{"raw":"GET /lander/intershot_new/img/flags.png HTTP/1.1\r\nHost: eurorefund-italy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eurorefund-italy.xyz/lander/intershot_new/css/intlTelInput.min.css\r\nCookie: _subid=1sjos4f3r29t; 0b527=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI4MTBcIjoxNzc1MTQxODQxfSxcImNhbXBhaWduc1wiOntcIjEzMzVcIjoxNzc1MTQxODQxfSxcInRpbWVcIjoxNzc1MTQxODQxfSJ9.5yGkaiFd_F1JFo1rzhjSBINxVZYvODiaQM9VuvhXjRk; _token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145; pixel=1368378865007468; token=uuid_1sjos4f3r29t_1sjos4f3r29t69ce83d199aca5.45712145; subid=1sjos4f3r29t; aff=13; flow=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 14:57:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 70857\r\nlast-modified: Tue, 23 Sep 2025 21:10:37 GMT\r\netag: \"68d30ccd-114c9\"\r\nexpires: Sun, 12 Apr 2026 14:57:22 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pV7cHXYYAFJNxoZW2Ds1Ouije4zFtWPJUBtJMluPJwiwQ8NHEyCGvkyEqIslbNdiT%2BNa5RGev%2BkPEl2NBz%2BPfdG7XtGrCPU1XCSSXY%2BvHg4JluIwdPv3w35l94tYye8znpqX8a3xfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e60af8288d55a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-07-24T06:30:50.123585Z","times_seen":25137,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"eurorefund-italy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}