{"report_id":"9060dbe3-28be-4ee9-9be5-83d561be3adf","version":6,"status":"done","tags":[],"date":"2026-03-11T06:13:50Z","url":{"schema":"https","addr":"xpresslinkshipment.online","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":0,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"https","addr":"xpresslinkshipment.online/","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"title":"Home | Page","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T13:43:00.958144Z","times_seen":17937759,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xpresslinkshipment.online","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":0,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-15T06:13:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xpresslinkshipment.online","ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"domain_registered":"2026-03-08","domain_rank":0,"first_seen":"2026-03-11T06:13:57.089318Z","last_seen":"2026-03-11T06:13:57.089318Z","alert_count":80,"request_count":80,"received_data":4134356,"sent_data":38389,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2026-03-04T16:23:22.525353Z","alert_count":0,"request_count":8,"received_data":1724331,"sent_data":3866,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"192.178.202.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":2,"received_data":34576,"sent_data":1038,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":6,"received_data":197432,"sent_data":3291,"comment":"","tags":null,"fingerprints":null},{"fqdn":"node-ya-9.jivosite.com","ip":{"addr":"158.160.17.225","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":1474455,"first_seen":"2023-01-19T04:34:47Z","last_seen":"2026-03-08T12:40:53.67515Z","alert_count":0,"request_count":1,"received_data":716,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/01-ajax-form.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"1be30d77e5267cbcf399d6152253e315","sha1":"8875c6e6232be6cb571e8a90e312107a44c0d4b8","sha256":"e9d3e2a6c29998bcec8abc8ec7618f03d61a52ec8d4c7d5281e6ab2ec54ecd85","sha512":"4cbd6c3be98c32da0f0c28b62d20967751728fa9fe94eeaf28b0bf6a3933de82e51c89f923bf90a2d630ba9f026efbe294fe2ea12ae4029718e7f79199a00946","ssdeep":"","tlshash":"3b21af847e6f0b6e1a47221576fd72c9fb2dd1728207622aa7e9083916841cc17c27ee","size":1250,"data":"","first_seen":"2023-03-08T07:03:22Z","last_seen":"2026-08-17T09:16:50.550608Z","times_seen":1085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/10-jquery.circleType.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"166a48c628871b0d9c4fa4b0b8f89148","sha1":"b49d5cdda9a57c44a5c636c62d110926725aed37","sha256":"ee2cbf12efc08718618ea22d9f75fae7b23c2e6bc2a078af6034bfe8734ced6e","sha512":"3867adb5dac773168567755adad1ebb0e857ae037153d6b9ba72248686cb1a8ea3a97705ec2112dbb5fa7da498dba56740b57c60743e8218dfbf0904594bc0e1","ssdeep":"96:zOmRTUjwGlj7Sc6YKPDOxhA0g5gfVEAk9SkniseCFU5O9dXLBNq5wp:zOmRojwDnYCKjAR+f29q5yl","tlshash":"a8a19998aa0921290437b77acfde6a48f736532b01169163bebc11d62fb195803d5fec","size":4880,"data":"","first_seen":"2023-08-11T03:08:43Z","last_seen":"2026-08-17T09:16:50.588878Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/main.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"82f759b293fc2c612523d21b901d22e7","sha1":"2da8445a67bc8dac804d34ad1a62b90546895473","sha256":"ac78b265efd7543570891d7615fc3096ce9c016c22eb64ec152dd69155ad2fdc","sha512":"97a2e8fcd6470dfd0ed5d4414215f6a5e4ccc95ace7b89a99d67999237b08411c62e039318a6a30394433504124fd299136edc68708f365e26dee3a25b8de8a7","ssdeep":"96:dY8RkaIrUMhsxmdToN2MXXm5SFkalOEj8aLputCFC3mZdfokoLJL4m3:u8ubrUrm9jW25SKEj8aLputCU2xotMm3","tlshash":"e9121c4db11360a2473b37689f4a9a08ff70051bc242ce52bd7c4ba45f76764a1e2fac","size":9050,"data":"","first_seen":"2025-04-25T08:34:46.229934Z","last_seen":"2026-07-01T02:10:30.892778Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/05-jquery.odometer.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c35fce96f1ea9d38b7245102bcdecefc","sha1":"de238751846de9d3ca6880d04b25dc38de5e2e38","sha256":"23bdcb34c21f829e7a33294fd040c1c54376b6ed1d79157d87c87b93d5f7e476","sha512":"8df8ef1c8e44b5ee8645c8482e6cdb193cc7f4cc9e26c2e73de328d98e74bd204cd2b2c84c9ddfbdff392f76629bd126dff4b753c0be3622525126bd0af0df25","ssdeep":"192:X2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:GvokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"6042451163e1273d9307e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","size":12147,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-08-17T09:16:50.618381Z","times_seen":723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/12-TweenMax.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ae6465dae50c862dc55a547caa86a66","sha1":"38cb690397f9eef5a9592efc9ce9e936e4e863cb","sha256":"a863a77e9ee263a0ec9c1e792bb33ed0f663582b7369f472261df7b6040990c4","sha512":"e8c08fb3d7db488b7a993a491f62dba3d2a4ef581c83063ce410aa2463f4e31f8ed3c5b79bf3a229f32231ce1540a627f830ad010c291ae996783d1c002791b1","ssdeep":"1536:jjm/F0VPBJ7jG/D+EH/GPJBpYSiZAr0GOlygZYzw6JcIfGxlLYiGsYVVOiE:jC/Wv51/vme0lybJXkYiGu","tlshash":"3db318c5312270128497269a557f0a47333bddbab4098d2cf589c5de3e1ce8921aff7a","size":115897,"data":"","first_seen":"2023-03-07T12:12:24Z","last_seen":"2026-08-17T04:10:37.118039Z","times_seen":2810,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1772708810","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"24532e6a0e6d1dee673105cd1fdb96b6","sha1":"22c62b4d3f381bf6d0939e88c676b78d9417db5a","sha256":"8cff76b39dd6ae523a1590bd9269af644c2d09710f0b47970659a8b5279e91e0","sha512":"69d25ee99b3ace6e903c33ba5b55ba13ff54dd05dd81b8940116f0c955a270f05234458fe74e5182f7d4fe723757ead7370815cf8e80a019b5c0bea304b6a5b9","ssdeep":"24576:Dn9QQpR0U482V9d4QPIuSHhiC0kPLuhKY/1bMm2X2D7S/gPgYlFqnH7XhHX6mW87:Dn9QQpR0D82V9d4QPu0kPLuhKM1bMm2H","tlshash":"8b655bc5b1c5f46203d355e6a03b2005b33a2859340da068bbbccddbe95a98e6377f79","size":1538661,"data":"","first_seen":"2026-03-04T21:48:53.032063Z","last_seen":"2026-03-13T08:36:12.625429Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/03-jquery.appear.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d18fe7c86d2bcea69a0810de7b81e676","sha1":"3bc98b3a47dc6f09238bbd0e496fa11daa3caa98","sha256":"70f721f0d6aaebc5c683551fb12668e6a91a02d17ac1b41f8a4dda0fa91dcbd5","sha512":"0fc73474dfb4fa9247793332815cbc70f6b575058381032981f2a05e87432e904f275a76567511841c568d554b3426c4c548c55fb775bc9b5c1d1d6bb35efd7d","ssdeep":"48:Wl3XwqL924ayV+9FLAPfnUIeohhR9zIr0FfFoBSxMEh1u1cWSKjf4WJzw:y3XUz19FkkDo7R9crgYSpTocWZAUzw","tlshash":"2b91dc4a759b2ab54877622a9f1fb20cd721513b0202c2113cedde6c6f71864a197fdc","size":4424,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-08-17T09:16:50.613188Z","times_seen":781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/vendor/odometer/odometer.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"07013b14ea1c5e30722ded722a1dfff2","sha1":"e6b09f4356f4e0485c6c7f73e629a70a1a4a549d","sha256":"b915a94b58cd8566dbe14df96e8fac1ae0466e35660f887109c5d53e5b996960","sha512":"d765c201184b347d618c3fb63144fc68a7318af5f8388ca01d1941287b83c93344d87d10bf1b2824eaccfe7ed8dae18d52ddba4e9adc1cb38109144e33a3f54f","ssdeep":"192:CABzlvk8QecC6AOcu2flRdI5s/GMjXuu/T:FBhvk8QecCa07z+Wd/T","tlshash":"ff129580be02a725875371e151bf0709b7bb99ae6404401df67c9cdabe25c38e12bf74","size":9897,"data":"","first_seen":"2023-03-07T21:40:14Z","last_seen":"2026-08-17T12:44:31.048687Z","times_seen":1620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/06-jquery.magnific-popup.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-17T12:44:31.045365Z","times_seen":24971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/08-slick.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-17T13:38:01.039544Z","times_seen":111707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/vendor/jarallax/jarallax.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ab5d0553462c68698deead6fd45db14","sha1":"fbd564247fd92970287dbf398c8581e19076f27d","sha256":"8a1018e1a85ba6212ccb1670cea88e36b23d6bde0e56d88ca6d53ce69f1c0f30","sha512":"e600fdbb0f9d1caca58bbef68c31eeb0fe955b932b8d57daadeb92de3f795270d0c4a359e4ac6ea116b0c7efb68b449ad17351daacdef3bb2df232e7f10cbd78","ssdeep":"192:H9W5RO5CcsDpEgCpb5ck24ZBGz/1Nfw9+ThFOisY1QmAaVh4DPExc4HcBAsot6J7:dIRCYY7GxNfrMKhUPESBAsot6Jrn","tlshash":"7662e89c3221321285fb72ee201f630eb635997481aac951b52cc9fd2f65e8d40f7f1a","size":15505,"data":"","first_seen":"2023-03-08T00:37:48Z","last_seen":"2026-08-17T12:44:30.955001Z","times_seen":1169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/3736fc9/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc00deaabfafd48080a08fc0d7f841b5","sha1":"3bf17f3bd75349b1ba1f9b78c6117fadd4620310","sha256":"be8a7243d87cc8bc1c523f0b10a41c149622c9c6af30b6a4e8231b1506cfd542","sha512":"1f3d4801665e172b54578e6d0d71f066c72df7244512cf00026104acbf6f21dab5de812d2679f56b2414ae7f40fd4963f61db75bc7bfc0893c8a3debf65638fc","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8BijFLeEJK:C7H7ObdFkOIphZ8wjFCmK","tlshash":"af22d71ee7017f360fa613c3744f7b5376a480e592646cb5d89c826943b9bcab217b8c","size":10598,"data":"","first_seen":"2026-01-27T14:54:11.499444Z","last_seen":"2026-03-31T09:24:10.733781Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/04-swiper.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"b74e42eb5a00c128681fb42890676d66","sha1":"af15c1c1d94e85a0e76bd75def0b4d3b64759f76","sha256":"2f06dae9eda7f01aee86f4a386ff1749c24612c5b1e947c6c91f576c4fa8f565","sha512":"272d20406e4580242446d9dca7441ed7d105ddf0c744cc4a914c53da47f7adaff8d23ebb25f872f91feef2d13efd51067bb594eaa31490ecb91b6a2f3123bc24","ssdeep":"1536:OOgAc1fFOszeCOG3RxCK8Yi/Glq+dBZDUiOMRLMGpukRRgj8evHgZsUgeAq5qV8a:wQCL7ji/udoxKRRtYHgZsUgeAq5qOsJL","tlshash":"f4d3094eb39061a551e36257525e8241a3b72409b80ad0ac35b68cd7adbde4c13bfffc","size":140942,"data":"","first_seen":"2023-03-07T12:21:29Z","last_seen":"2026-08-17T12:44:31.025476Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/MWfS2k8Cup","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1b14eaab518623e1189aa317e01ef5b","sha1":"91d3ccc20816fc390a1b1aae68509dbb02052c77","sha256":"e01e03e060811da1f00f92a53d2a817d357f520ca845d55845df8cf90f231d10","sha512":"b9ce5737bf555ac241207dde17f113a9b7e8235767c1ebe338cc2df86e134cf0d84a7d03fbb90886c456e8eb4942b9645452f00df447eef97432d55cef64ad4d","ssdeep":"384:boU+JvepohmPF0jkrArr0aX55Mf7qISOqrebz8sROweqWcPdv:UI/tAjX54cr7sXWcPdv","tlshash":"a7823b6e7959b97743b218f9516f620a733549ebd404c920a401e98d7cb8ace813fef8","size":18118,"data":"","first_seen":"2026-03-04T21:48:52.90205Z","last_seen":"2026-03-13T05:21:20.322509Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/07-jquery.nice-select.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-17T11:49:59.184004Z","times_seen":10670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/09-wow.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-17T04:09:44.854133Z","times_seen":14457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/jquery-3.6.0.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b0e68dfbaec1b2543bbd8ab49bc0dcd","sha1":"38bff9f808f5a41db015e90ae62f56892a5b63cd","sha256":"11089c47ad87fc6773877c79c9523004a3d2cfa2642d2fd0e712b9d0ae039185","sha512":"d574a6b4bfb56a7a82cfc235d2bf3fa2bb5ac818754327ff4b1f56c4ba3f9d217cab04fa257730ef1251ce07a57d110a8273c4a599591cd9f988378d0079dc8a","ssdeep":"1536:rSmVXIpfIylRvJxQzizT+oNSTPIyoyw0e+yU2AQGeKcHDv7k07ZBRfhu00CsmmlF:rSmVfBw0pyU2AQZDY+ByCFmH4gaWY/ax","tlshash":"f0e3508976e621319207f07a8d6fcc08b275545f1a8ded057d0c92a59f1883c9bbafec","size":151290,"data":"","first_seen":"2024-10-12T13:59:00.722Z","last_seen":"2026-08-17T04:10:37.068202Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/02-bootstrap.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78129,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-08-17T08:21:27.434076Z","times_seen":19001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e132c6c4d074751497a48f71f899ef3","sha1":"cf601879af0ef856d4aa20906c141801703d0785","sha256":"19c9813a6fc6f6cb4d51a8596796e848218c69e6ebbbd6076884d39e04723488","sha512":"1def55d84cb0fa772aaf91adba9a4714ffa13d45a91fea710e86410622db405e7ddda62fdba85d5a7b582aa963edef1923583ce53d1758cd06810eafcc617bd6","ssdeep":"24576:qZRYsiAzmB59lLKyJ2j2IbTl4KgN3qZvSPzjdAp8B:qZRYsiA6B59lLK22j2ETl4KgN30SPzjp","tlshash":"d0656cd5b2c5f4a507e301e6a43b1002a33a1c1a740da468fbbcdcd7a95a58e6337f79","size":1506448,"data":"","first_seen":"2026-03-04T21:48:53.035103Z","last_seen":"2026-03-13T08:36:12.626974Z","times_seen":343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/11-jquery.lettering.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"83f6723631eeb52da3101b72b7624728","sha1":"3c74ddfb1209f2fd56fd58e61829e01a073e303f","sha256":"c9bd115d1d0d0871a3e6b701384a903d7bd378313a0504ae94949f5bb21894f0","sha512":"549fe261b8aed5e27ac8b8a67d38bae6dd91f5315c1b90fd5fc6427db6c41614df3e728987c6f2a0a5c46b08b949c2590582f57a28ab2f5f8c733643c744f3f5","ssdeep":"","tlshash":"4311dcc4f3a3aa07479bb7bd513b620ee26654c354030c01f9a8d2563da7b490aa7ea4","size":924,"data":"","first_seen":"2023-03-07T14:30:16Z","last_seen":"2026-08-17T09:16:50.585106Z","times_seen":1010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/vendor/marquee/marquee.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"38cf1efd3af828942692f619be330bcd","sha1":"c7836fb3eb61f96e6c8bc0344d77cf5618798315","sha256":"feade23a47f6041e6d1008885642dd7ab7cc4f12d94b0c7191c9cf8ca55df97d","sha512":"24726ffcbe3cb351e8776e22488d2ef5b705fc99548be61ac6588a75b6ac9f0fd4d4ba7dc715a4699dcee4eb903cc915c0e557785905e27e35efaa2e03a3f2dc","ssdeep":"96:v7zVMfcftw6RO0c4xwW5uO/kFzFYejD4CHDvDAFWa3QMy9mtlHxHf2KAHfqWVHfT:vX6fcf5P5tkFz1BaWoROjiSFx/7T","tlshash":"311221d2aa613450c7db13bfd44f46864e349932251e4d7fb472c099ae60b08ab97f3a","size":9029,"data":"","first_seen":"2023-03-07T12:21:25Z","last_seen":"2026-08-17T09:16:50.574212Z","times_seen":4582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"4121b7aeac55c7d9907c37303e59c941","sha1":"762c7a50a413c04293d8eafd1538d47e68557ff6","sha256":"b481042bdbccc0bd99bde6498cfba7a0f257347e1b523e731e84d8366c5f4ec3","sha512":"c153259818f525807fcaf0a9c883dd944e7780b517cf48b447f7dea2e8ee90322afe30087ea0c464a8280255159c2979e711c4bf82e5f9d1349c380c0b47dea9","ssdeep":"24576:EZRYsiAzmB59lf6KJYzLRbTl4KgB3qZvSozjdApcd:EZRYsiA6B59lf6uYzLxTl4KgB30SozjF","tlshash":"4f656cd5b2c5f4a507e301e6943b1002a33a1c1a740da468fbbcdcd7aa5a58e6337f79","size":1504646,"data":"","first_seen":"2026-03-04T21:48:53.049495Z","last_seen":"2026-03-13T08:36:12.63961Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/fonts/icomoon3317.ttf?m31ns","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/fonts/icomoon3317.ttf?m31ns HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/10-icomoon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sat, 30 Sep 2023 18:16:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19144\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34912,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"104f05a605e860cc8af4b4527a1879e6","sha1":"cdb2de110f39a0d516e9d15d0dd86e29227f806a","sha256":"9cc34f06fe4bc4b2932fb01550a80a4b90840c80f735775867c7755e9c515f60","sha512":"bca35d494be40cd9fdac40e5407669da1b54e8316e3f81909c53e0abf8473d3e683816d9658ca3e9906f490314ee7a2f6988f9af906a4b09382bd3d67fdd4de3","ssdeep":"768:7xdcAflTO6XoD0PuKVq6eM0vbW6nGSrmZUhLgUvzVzTFjgI:7DG0NQAYW6nVrEUFf3","tlshash":"0bf23a0bdbeacf65d803e77e1a12212ddddeca2d433d9686a9c06c10ed458ec4d2c997","first_seen":"2025-04-25T08:34:46.231119Z","last_seen":"2026-08-09T01:04:12.914356Z","times_seen":44,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/03-jquery.magnific-popup.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/03-jquery.magnific-popup.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Nov 2023 17:57:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1655\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7283,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"315a8701db84cb30ea6b5341fc72e96d","sha1":"924365f00528401bf8209941cd63cf92026f1cb0","sha256":"4109ef354421000c38591be5a59f12d87a211f8f7902cf79f084d4380d788dff","sha512":"c68052a4da98decf8ef3c0c9caae99badabf5c0f771f1d0cb44c1826465e6c7a413a7944db95dd2912be5e886da647942990d294379b56ba04a3e4918c06b93c","ssdeep":"96:0Qsi7sStyXYV8RTQEpz8Z1dni9mwDYDnuuw6lYikXhrqdStZFvtFhBF0FDLEx:NFtyXYoNAUJQkXZqdStZFvRBFwLEx","tlshash":"49e1e198db122302d637daa4e7934729b7120073eb0305abffe1584ab7d995c0625fd9","first_seen":"2025-04-25T08:34:46.240733Z","last_seen":"2026-07-01T02:10:30.912014Z","times_seen":41,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/team/team-1-1.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/team/team-1-1.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Nov 2023 10:01:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44422\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 410 x 455, 8-bit colormap, non-interlaced","md5":"a0c8aa357efd5f680ff3cb566346ee1e","sha1":"6e388bc04279a240fe376199b7d7b4379fef1238","sha256":"bfd331ebea0c107c950b9a03fae3b3f9e518dfce2f16650702ec449a5200f24e","sha512":"5ecb08c0ae8e899c8cb4a7c27839205a57617da737e3614db4aa9144e8ff6f8ac7c4fee9f8f511669b6a2b8e0ad499b8a99c1dde5d6b36c40aea557d54e55c2b","ssdeep":"768:bnIxAUed4XkXLEghugCEqG8Llv30fq1vbbVyp7YMC+Yw+4R0i:jIxNXkXIghxCa8L1EfobVyVYZ+ki","tlshash":"8813f1a37dec7ed7112fbca541da1ad4a3c684daecc82a94de8e8d18074153573520bf","first_seen":"2025-04-25T08:34:46.246554Z","last_seen":"2026-06-13T21:12:02.871824Z","times_seen":28,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/04-swiper.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/04-swiper.min.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 16 Jan 2021 20:05:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34402\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":140942,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65272), with CRLF line terminators","md5":"b74e42eb5a00c128681fb42890676d66","sha1":"af15c1c1d94e85a0e76bd75def0b4d3b64759f76","sha256":"2f06dae9eda7f01aee86f4a386ff1749c24612c5b1e947c6c91f576c4fa8f565","sha512":"272d20406e4580242446d9dca7441ed7d105ddf0c744cc4a914c53da47f7adaff8d23ebb25f872f91feef2d13efd51067bb594eaa31490ecb91b6a2f3123bc24","ssdeep":"1536:OOgAc1fFOszeCOG3RxCK8Yi/Glq+dBZDUiOMRLMGpukRRgj8evHgZsUgeAq5qV8a:wQCL7ji/udoxKRRtYHgZsUgeAq5qOsJL","tlshash":"f4d3094eb39061a551e36257525e8241a3b72409b80ad0ac35b68cd7adbde4c13bfffc","first_seen":"2023-03-07T12:21:29Z","last_seen":"2026-08-17T12:44:31.025476Z","times_seen":1701,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/module-css/footer.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/module-css/footer.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Nov 2023 23:46:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2628\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25922,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6f198b4cf6a10610c9eb394b96098e63","sha1":"6e85b22a661dc59eb8b041f37e8ab73f6091a60a","sha256":"55c0af67620e9f272b9b614eb29186a96147753f3f04e729393aee250a31190d","sha512":"14f44f431eaa12cf932f3ddc08cd48adaaa41c6f1e7ca0b85bc132d4b92c5f4cc75d717f74397580445e78741b60e63605eb5db31c9faac7f76bb074e39cf922","ssdeep":"192:xFR9oPeEKNlfUl6lgIK4dXOUlm+k4C8fVSYOLwXLf4SnleFY4L9KIUlcLrRPC8fA:kifRNUP5MD1dL","tlshash":"00c2ce5c762a030666334bb997e25244e7b051c7ee0606d97f8813518ffb2fc8692daf","first_seen":"2025-04-25T08:34:46.288127Z","last_seen":"2026-07-01T02:10:30.905096Z","times_seen":40,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/3736fc9/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:30.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/3736fc9/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 06:13:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 25418\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"69a80452-634a\"\r\nexpires: Sun, 15 Mar 2026 11:09:11 GMT\r\nlast-modified: Wed, 04 Mar 2026 10:07:14 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-03-05T11:09:11+00:00\r\nx-node: m9-up-gc233\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137119,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"800956bfd6eccfe3767cf57e11423539","sha1":"13e46b35106e7235a1accfffef8099b7f7c5946d","sha256":"cc3909190d52ea7d854dc95246adf948d719c8be19b1a410ffda77f70932c37d","sha512":"08358c77ce03e533a34cb97b873728d9a01f5f9bf252fe4c8e28dfe80296aa2ecfe7c34d37f6393c4600b169bf301d5aded745e1693a87ccf0d5da6170e12094","ssdeep":"1536:gL5ZTKhyl6y6Krh7DuSye2A2GSNpByX6E6U+SlH4kUa6YFOPQLiEOxO1D76Mc+or:coJapwGo56A","tlshash":"48d3f95aead1a53ce91a541ad8c5aa3ca63de102df330dbbf344f3e143cb6d21276449","first_seen":"2026-03-04T21:48:52.784757Z","last_seen":"2026-03-13T08:36:12.333335Z","times_seen":346,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:30.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 06:13:30 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6994578d-16b0\"\r\nexpires: Fri, 20 Mar 2026 23:57:37 GMT\r\nlast-modified: Tue, 17 Feb 2026 11:57:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-02-18T23:57:37+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-17T06:42:24.782236Z","times_seen":16762,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/logo.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/logo.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Mar 2026 08:40:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30374\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30374,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 171, 8-bit/color RGBA, non-interlaced","md5":"fb48b5ee932bbc269c50cdd11ae2c70e","sha1":"97e05fb7c7b5bab54e544c98197e31e5c83ff5f7","sha256":"b61d14ad97470639063552a6f8fa631f419343fa806726025dc1a92fbba1da1d","sha512":"e9d591762182d95ea83c7f14e121235969439c9ce866103303326767c353d6e1376902c0de11dea1f0d1f53ae0854295dc0b7e34645de303a33a9410ad13424d","ssdeep":"768:8n+LxGO7VY1v++YN3wv0oWEEdb+DBaxIwfBN/oGw:8+LxLV2ON3wv0okYDBSIwZ4","tlshash":"6fd2f14bc8a3b279fe054103f365ca874309a3e261fc69665d2d39baadd1306d901fde","first_seen":"2026-03-11T06:14:03.044642Z","last_seen":"2026-03-11T06:14:03.044642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/team/team-1-2.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/team/team-1-2.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Nov 2023 10:01:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40609\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 410 x 455, 8-bit colormap, non-interlaced","md5":"2edece7c193d645596e2da4f13954107","sha1":"765bc956ad5c6eafa5f73c1b83ca2ccdeb1c5cef","sha256":"bae00c39634ba80a241f636a7129b411483092aa30b3101e3b4394f34e581d99","sha512":"238a8c16c74df0fc56d5b4b4009b6da65b2fcdf3f87546cfb0cc3f0b75d88974f9936890ae90bdc6979eb6b239a05724050d85ee43274dc531ef8b3a1dc953f7","ssdeep":"768:9pFdHuMsUpuVNzfjvGt1rNkTxfl+2RbJz3VBZt9PgooXNTbKobc2WCI7sK2K:h0MsUMDzm1rN0tzJnZtk9PhI7sRK","tlshash":"4703f1d8786eeedc7aa77f0ddf7063a5fb7404e1c64b612e53888846fe0b2046498e15","first_seen":"2025-04-25T08:34:46.294166Z","last_seen":"2026-06-13T21:12:02.932099Z","times_seen":28,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/module-css/blog.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/module-css/blog.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Nov 2023 22:19:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4059\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40847,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"81e7d73c0304b622dcaf027c99332255","sha1":"3bd4e6806b3a7cf6775c3276edabe0b0d80ed7b2","sha256":"fe1609a69891caba63be8a2e0150e9bd2ebec794d13be6a84b32836fbfe49ee0","sha512":"0e5f1a6286025a51d3969dfa774c69b5d569a9139fe6666f69ae75c6453881f677ae0c2ca3663de7f3de0019e84703d3488face6cc8120fa93884187900a2ade","ssdeep":"192:uXMEv/c+7EV34c4TpeWUlohWUl4n3Ul148qRpv/uw5+7l424T7+WUlMIWUlfj4k3:TWL9rOMSxaiNPKaB82HMrnblp92ZE","tlshash":"5603fcac4226018ad633eb7c1bd56359e5285093df124588fbd452148ffa7bcc352fae","first_seen":"2025-04-25T08:34:46.259244Z","last_seen":"2026-07-01T02:10:30.871552Z","times_seen":41,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/module-css/partner.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/module-css/partner.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Oct 2023 10:11:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 328\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1116,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"17f0ca413b803424a06fda25b224919a","sha1":"d352c89c8d3a5ad001107efc93b9ab149b40bfbf","sha256":"c2556a050645525097b5fcb61315d2d60f50dc081d43622b5064bfca2573c04a","sha512":"f7422adc08cb94b3b7e2e557d07c38fe7208c4ef632669ab6c8d6141a4ebea0a2db32ab216cbac01bb2a2c3e48c463cbd9f287c0e7a69b5c92e4d402d092544f","ssdeep":"","tlshash":"4521c29a1606012945739b681ff12389d4b08143db2708ec7b8613648fff3acc6a3db9","first_seen":"2025-04-25T08:34:46.300003Z","last_seen":"2026-07-01T02:10:30.87283Z","times_seen":41,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1772708810","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:29.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/bundle.js?rand=1772708810 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 06:13:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 339442\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69a80453-52df2\"\r\nlast-modified: Wed, 04 Mar 2026 10:07:15 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-03-10T11:09:43+00:00\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1538661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc9062cbd89916d928fe13c56a2666cc","sha1":"d9c03ca13083ba7cf5f7694d24f25de8c6a54979","sha256":"1afceb4c6f08fa87c3201cac28493bf383d330f97b7951ace3f1978bebcb2654","sha512":"9e6391a0cc2ff6c7f7d0aa746f8a5c4280952efae685b4f8a7af7d20df1d3cec2d51a11902b2aac55aea20209993d770d21d16fbedc247cb26b0793f6392f924","ssdeep":"24576:Dn9QQpR0U482V9d4QPIuSHhiC0kPLuhaY/1bMm2X2D7St:Dn9QQpR0D82V9d4QPu0kPLuhaM1bMm23","tlshash":"c6254ac4b1c1f46503d355e6a43b2009a23b685d780db064fabcddcbea6659e6233f39","first_seen":"2026-03-05T13:37:11.192562Z","last_seen":"2026-03-12T11:29:09.866977Z","times_seen":56,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/05-odometer.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/05-odometer.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 08 Mar 2020 02:59:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 434\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3620,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b0db2ffb579367350645c5cce8bcb622","sha1":"f52705958f241317f66b5ca2153cee1c1aa8b892","sha256":"6613bec6b1e7bf01e3507ca03d1f4baeeb321d13275fcd99ee7fc85f3025e89f","sha512":"4312b7eec24f918e3fdef8d00e35b3fcbc47477e4eae2f4299ea103e1926466d14d3b60634b539e26132abcf654de1ae13c40e47dc44a482cde7f5ce669618b1","ssdeep":"","tlshash":"ee71f51d1f60132463367406b7d927a0fefcb9525623e59db74aa44bcd03db9c288e17","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-08-12T10:40:31.722089Z","times_seen":450,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/08-custom-animate.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/08-custom-animate.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Jul 2023 10:32:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2275\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31975,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"dbf4dc74cd97d371ee68d440591433f8","sha1":"08943e0e485db98016c999049d1dbee35b597b6a","sha256":"14fa27f6a1df9bbf5834b7f02e90cb0f5ea8e564d3d21bb9d7cbff5d46e4cff9","sha512":"9e20e7a274f5abe45a83ae06044740e033ab94573dcccbaa1a2ab76a6f0a0d69bf7b391cdd778958e468a09fa770f9cf4328c0ec297f81e866c751a74341ce9e","ssdeep":"192:ilBoHP0IixikPLE93ZvYXY2+Y27h9+J9+QbCQ6wxiK8Ks8Kn3pX3pQrk8ZKI4NTT:o0gvzECy","tlshash":"abe26a961c42044487774721d7db4e2ceb38597368131ebab3d7248e4f65ba813ceeae","first_seen":"2024-10-12T13:59:00.674708Z","last_seen":"2026-08-12T10:40:31.674483Z","times_seen":60,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/vendor/custom-animate/custom-animate.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/vendor/custom-animate/custom-animate.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 24 Oct 2023 17:14:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2396\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32988,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1219dc768fdaff06b81cb03cb2a59e7b","sha1":"926286ac5981209764f98bdd3177dc86c2eacc07","sha256":"c90961359afdf7bdbb1de2999848ce60104e82688377f6d6768642a28fb7c3dc","sha512":"537cffe9c3128a23bb2b1638bc15e86b26beef70a6074e899d40b4ecaa9319455e2f0b145c500b0b51ad8553abd3062a3ade8d5152bbf990582bf622168118ba","ssdeep":"192:svEVrVo2+o2wTo0Fo0/h9+J9+Qlxi9wxiG8Ks8KnTaiTaFrk8ZKI4NTHP3h6FS6d:cucvzECD","tlshash":"e8e2699a1c42040447774b31d7df4e28eb38596368131dbdb3d7258e4f69ba8138eeae","first_seen":"2025-04-25T08:34:46.241756Z","last_seen":"2026-07-01T02:10:30.848252Z","times_seen":49,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/project/project-one__img2.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/project/project-one__img2.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 10 Nov 2023 09:57:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 54839\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54839,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 410x300, components 3","md5":"bd137a133ceed37a99ed7e954821cc09","sha1":"1e9bb0fbaea13eed8a577012715d5ddd31a6cf64","sha256":"dbccba0b7e79f69dac45174d7a1b80a48314a4657766b0ac1d7c012fd17d979f","sha512":"2ff7c3e35c9594fa6fd0be01cda1962480ee590385d0724c7dfe3b0317bfe47b0ee2f342a8768a836a9fed7e0672e3a9441283bf8c6ab74ca4245be9c7c0551b","ssdeep":"1536:A9QfNuBh11yKtmlU47XrnMfjJTYFULkNTYD:i3BvQKt+U4rrPULB","tlshash":"2e33010c37d3343b79b919f388ad093f76062caaf7188369016a194fdd8d968330766e","first_seen":"2025-04-25T08:34:46.292987Z","last_seen":"2026-07-01T02:10:30.921817Z","times_seen":35,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/jquery-3.6.0.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/jquery-3.6.0.min.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Oct 2023 11:16:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35930\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":151290,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (755)","md5":"7b0e68dfbaec1b2543bbd8ab49bc0dcd","sha1":"38bff9f808f5a41db015e90ae62f56892a5b63cd","sha256":"11089c47ad87fc6773877c79c9523004a3d2cfa2642d2fd0e712b9d0ae039185","sha512":"d574a6b4bfb56a7a82cfc235d2bf3fa2bb5ac818754327ff4b1f56c4ba3f9d217cab04fa257730ef1251ce07a57d110a8273c4a599591cd9f988378d0079dc8a","ssdeep":"1536:rSmVXIpfIylRvJxQzizT+oNSTPIyoyw0e+yU2AQGeKcHDv7k07ZBRfhu00CsmmlF:rSmVfBw0pyU2AQZDY+ByCFmH4gaWY/ax","tlshash":"f0e3508976e621319207f07a8d6fcc08b275545f1a8ded057d0c92a59f1883c9bbafec","first_seen":"2024-10-12T13:59:00.722Z","last_seen":"2026-08-17T04:10:37.068202Z","times_seen":89,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/slider/banner-one__mian-img.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/slider/banner-one__mian-img.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 10 Nov 2023 10:01:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 112922\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":112922,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1025x760, components 3","md5":"36b587464b88972c8435c4af16e2cf3b","sha1":"fb0d5754f8dd126d41272a47a91125ff95e46fff","sha256":"d7b6b29b7a26f86530b8d4876ec0117e07a628cf53826ba2c10a1370098ec379","sha512":"8ae0f094ed64398f233502c2644afc7d4e9ebd7186c7cb6aa00d631c143f5897b810951cb40e862467a7ed2f761cc0fcc28bd013317d4d3174eedf47604d811b","ssdeep":"3072:bBg0pCjGfubAcpvWzo9bbFVP83UzwpX3IN0pk0zV1/Pz:bLCSWbV8o9H3HzcICpk0L","tlshash":"8fb31274e8be8e60942b20c8c5864135e7939b92fdd98f0339356ce155484e63c67bbb","first_seen":"2025-04-25T08:34:46.301137Z","last_seen":"2026-07-01T02:10:30.86726Z","times_seen":36,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-11T06:13:27.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 09 Mar 2026 08:41:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7262\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}],"data":{"size":85009,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3532affff9f69665a52a3a013775d1c4","sha1":"771786f482c74b916af26b4f22950fa6ea7fd3de","sha256":"33ea294b65b206a2262b35b1322ec6b20ef6e1e142a59889ca15cafd7aa0c919","sha512":"a1c316528591ca8d1ec3abedc0ba27d8d43f6d3eb4babb5d42495f639610c14c85e043c53c6aa0c2ae2fb7700f8d4d5874af6915d68f2ea6eac7d041f049884c","ssdeep":"768:KMs3cQzSgZz8qfeMwgOlx6HkO6EW3dYultu/:KMssDgZzffeMalx6HkO2qula","tlshash":"7b83792164f015370292a1e26a716f2bafd1e60bcd5f196032bc4fd99fe7d86cc03669","first_seen":"2026-03-11T06:14:03.054302Z","last_seen":"2026-03-11T06:14:03.054302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":229,"dns":149,"connect":37,"send":0,"wait":38,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/MWfS2k8Cup","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/MWfS2k8Cup HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6195\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"69a80453-1833\"\r\nexpires: Wed, 11 Mar 2026 08:13:28 GMT\r\nlast-modified: Wed, 04 Mar 2026 10:07:15 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc10\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18118), with no line terminators","md5":"c1b14eaab518623e1189aa317e01ef5b","sha1":"91d3ccc20816fc390a1b1aae68509dbb02052c77","sha256":"e01e03e060811da1f00f92a53d2a817d357f520ca845d55845df8cf90f231d10","sha512":"b9ce5737bf555ac241207dde17f113a9b7e8235767c1ebe338cc2df86e134cf0d84a7d03fbb90886c456e8eb4942b9645452f00df447eef97432d55cef64ad4d","ssdeep":"384:boU+JvepohmPF0jkrArr0aX55Mf7qISOqrebz8sROweqWcPdv:UI/tAjX54cr7sXWcPdv","tlshash":"a7823b6e7959b97743b218f9516f620a733549ebd404c920a401e98d7cb8ace813fef8","first_seen":"2026-03-04T21:48:52.90205Z","last_seen":"2026-03-13T05:21:20.322509Z","times_seen":357,"resource_available":true,"data":null}},"time_used":1215,"timings":{"blocked":527,"dns":317,"connect":66,"send":0,"wait":86,"receive":1,"ssl":215},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/project/project-one__img1.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/project/project-one__img1.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 10 Nov 2023 09:57:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71540\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71540,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 410x300, components 3","md5":"5957be12c29d935a33afad2b63e7f16d","sha1":"5b6ce0549211cc9ff7c33cb552f51351f178b9ec","sha256":"7763d7dc5835ce28d8f27b8762c236f70202e187ae5717823bd4f06aae415484","sha512":"201352987ae1e1ecaca4118c861da8e22f61c74c08f751d565a45624e533537de8b59691919800bf5f11ee8a0f837b60057b43f2752b5a1606213ab4518c3290","ssdeep":"1536:qDrmJBWqg7FUdmQywLtDYEJzb1AdztGuP5GNZjhYqm:q2BywLhX9mdz8pNkt","tlshash":"f563f14fdeef230d4d14b0f5cae26605b3026accf1631c179aed489ca89b2c5b875d66","first_seen":"2025-04-25T08:34:46.30648Z","last_seen":"2026-07-01T02:10:30.857153Z","times_seen":36,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/07-animate.min.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/07-animate.min.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 10 Aug 2019 01:14:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4618\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"8ea67bf7d4ccacd55a30e2046f9241b2","sha1":"9e7eadfdcdf03a5664aaef256c76248ee786dd3b","sha256":"5d825a730b53e73c1ebf5e26ad9b5fc8e67ba28324ac6a55d5c966f4df4aa7b6","sha512":"1336cc299baba59cdcd3af3d2a9968a721ecc3ee2fbf15f62d295c761de8e88488caaaf27a8002f044ee3084e6306d6bde9a680c61bb5de71ef8056244c7f14a","ssdeep":"192:LIQHnIwf2T/awfDZUiduG+MONjnbimZbHMxymDSVbyPiVEzfukrWL7XU+qLmfRvw:LIW/yffHf7SpS/fjf7","tlshash":"9063096929e1114466370a15c7df9f78263ce5a31826ecfab3d2588bcf41fac23c9617","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-08-16T20:36:31.839159Z","times_seen":906,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/vendor/jarallax/jarallax.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/vendor/jarallax/jarallax.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Oct 2023 10:54:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 159\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":335,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b80225d900588f8298b80d0a248eb1ea","sha1":"63ddc9c975da1a89cc9778521268ffc76d11c969","sha256":"a80fcab3658c799f1732e8567bce5d6e422e51afbac13e385779c87b1c4a5d5b","sha512":"8b3e005fe9a4ca2946d42f07b542c92884b81defbca17c93015da9b2f9110faed0c68c8d44d8af2308b5da08bc2f4ecf938064c2225af930509b46f6b0092f9c","ssdeep":"","tlshash":"33e07d8107241549ad3bdb9c7b840628e2ad41dbcf83d01933c4f745cfb1604a6a5daa","first_seen":"2023-04-07T05:54:15Z","last_seen":"2026-08-17T12:44:30.993862Z","times_seen":1563,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/resource/mobile-menu-logo.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/resource/mobile-menu-logo.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 25 Oct 2024 12:15:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1279995\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1279995,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4096 x 1355, 8-bit/color RGBA, non-interlaced","md5":"7b16319811ee42ebb95494fe0277b22a","sha1":"0546302bf5b6950ae7931a903f3627b783b9bd46","sha256":"ce572b29a0ef240edcb2ac73ba37fc0fd16852acf87b17817dcf9f078252f08a","sha512":"797304d6dace03cfa83eb4603164cb779b42d5ecada1c00eddead55b2f59b6c3f92161b0be90aa4ab197f549339698566e40f435adc4cdab341c105cac77ec80","ssdeep":"24576:ORi6cMUeK6sah4M9eg000KRZ3a0OuIiI9CdWXNOqy25vX:OM6c3q0avRR9xIJbNOqy25P","tlshash":"1325010193a464bacbc5cf140b0b9de0d52c36affe1f0a5e1b5b17ab34532eda96194c","first_seen":"2025-08-29T18:18:32.028709Z","last_seen":"2026-05-01T14:41:17.913608Z","times_seen":6,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/shape/banner-one__shape2.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/shape/banner-one__shape2.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 21 Oct 2023 12:06:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3598\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3598,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 183 x 306, 8-bit/color RGBA, non-interlaced","md5":"f1324b4272f2b13e8c6a71e8859770bc","sha1":"0d037e22bf63c0cb15889b228da4bcfe876e0dcf","sha256":"6dbfd649b7acfadb853ed48c19f62c6e90eedb5a385dca54577cacad2c88670e","sha512":"cebd6801eb5f04a7c76311f2cd77ea5d0dabdf8db0ce73d28d6eeedb11af4174dadd33202d6b941720b1838bc99ff47041d5ad780cdffa190f9879afad014eb9","ssdeep":"","tlshash":"0d715e17f3ec6d618c43678933d11b47e0b74d19f5fa4de9881138a4192fc846e0c9a9","first_seen":"2025-04-25T08:34:46.254209Z","last_seen":"2026-07-01T02:10:30.890324Z","times_seen":35,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/testimonial/testimonials-one__img2.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/testimonial/testimonials-one__img2.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 10 Nov 2023 10:02:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4648\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4648,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 95x95, components 3","md5":"01a74c543bba0eebd62189d3ef2132d9","sha1":"936246ddf5aae03c287fea94a69d4075e0cda61a","sha256":"31e7e19a9ba8202e66a739d6ee48faac03970f034dab9bb0217747e8d6a1f562","sha512":"0f805831d3989262ae6737fe14d250eb14652e4b348f14411c5f38fa742c23a8ff9758f6f6c92d054abee27d95018d6d7bb6f161e42dffa2348fc4b98683f885","ssdeep":"96:RbTBxVjy7z6Wmn42ijegtpK+HTEaCc2sfwZwjDMSi40:RHB2z6W7jdtkuDmZk4S2","tlshash":"0ea14cd5ca876ce4f9772d368f92c30227166e01e98a6be620bc1570c8761f51371ed3","first_seen":"2025-04-25T08:34:46.274025Z","last_seen":"2026-06-13T21:12:02.879848Z","times_seen":33,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/footer/footer-widget__photo-gallery-img-5.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/footer/footer-widget__photo-gallery-img-5.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 15 Oct 2023 10:10:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14243\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14243,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 80x80, components 3","md5":"907749efac371e285485796868578815","sha1":"128b7fd7dc5d0e1b170c187bf401b8021b7a4c3f","sha256":"7105e38521f26ccab619fa53c99965ba0249ee623816675cdb94aa174d37ded7","sha512":"c8fd1d5ce23588217f9cacc35b87a379fd714011f3b1f01fd5195ebe237d319af18ed4566e60203a98710b7f7924aa03d9060a3eee73d609b5e182878e9b50af","ssdeep":"384:JV0n/bjhGy8/dmHLb3or8UhEBAnwLXFUfDj:JV89Gy8/43rU+xmfv","tlshash":"df52d08bb648d13e09138f199b1d39c4fcca8e676cc90c450f248966e690c99d6cfe64","first_seen":"2025-04-25T08:34:46.278268Z","last_seen":"2026-07-01T02:10:30.870592Z","times_seen":30,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/footer/footer-widget__photo-gallery-img-6.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/footer/footer-widget__photo-gallery-img-6.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 15 Oct 2023 10:10:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10435\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10435,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 80x80, components 3","md5":"17f124db1818d6de82a248873e1ac072","sha1":"ae808aa6b8dfe4c18a402e1eb6996952a59530b5","sha256":"83fcdb2762c1be190fa6815e0ad6c765fe7e82c7cd543bebbeb3863f64078e90","sha512":"4d900cb262a8ea3a5b93ce9ae4f2b94bcdd166a517dec60c9bab59cd70d2a84fb233fcf7657323a5125bcd4a7ef395721229b56aa46d32263722bd2d0d2cfea0","ssdeep":"192:JP23h57cEYoVpPLUarj2gyQFQ7SxUSOBqSABu5tgRE6+NGED+rZevIhg1fOlB:JPih5hB+gyQCuxUSOxf0HpNeQhg1fO/","tlshash":"be22bf3fd6374f1d6c6d9668f91a91042283dd237a2d10cd1e6d1390f3a9dc6ea0d8aa","first_seen":"2025-04-25T08:34:46.305432Z","last_seen":"2026-07-01T02:10:30.895137Z","times_seen":30,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/06-jquery.magnific-popup.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/06-jquery.magnific-popup.min.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Oct 2023 17:06:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7046\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20219,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-17T12:44:31.045365Z","times_seen":24971,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/footer/footer-one__recent-blog__img2.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/footer/footer-one__recent-blog__img2.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 15 Oct 2023 10:00:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11010\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11010,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 80x80, components 3","md5":"f5f6ecd0cfa6b59468444df44f0fe12f","sha1":"7b0f58517341ddadd45df8d7b880de66d866897d","sha256":"2cb5560b81fcc8a80ca1cb82d91c8bf2baedec63fe40015a454fc7c0097d1d92","sha512":"c1728b3a0b5b15ff3ed6148acaec34665ec1ca25d5c52057d4c29481a3a4e003bd24ed57eda7579a119cf698815c660ae39df35ff90d57a5d1f169ca2e42eedd","ssdeep":"192:JdExUfraD91flBukDRb0bBj6sjGvG/C9BZZj/T67gmuaSTKfFCXrg:JdExUTixHl0bBGZGq9B//T67nuxKOc","tlshash":"b932cfdaf7c3f7599d1f55e80b12216eb6030405a765a18a3bd6050ee9cc2eedc356c8","first_seen":"2025-04-25T08:34:46.247902Z","last_seen":"2026-07-01T02:10:30.849387Z","times_seen":27,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/main.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 05 Nov 2023 22:12:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1835\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9050,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"82f759b293fc2c612523d21b901d22e7","sha1":"2da8445a67bc8dac804d34ad1a62b90546895473","sha256":"ac78b265efd7543570891d7615fc3096ce9c016c22eb64ec152dd69155ad2fdc","sha512":"97a2e8fcd6470dfd0ed5d4414215f6a5e4ccc95ace7b89a99d67999237b08411c62e039318a6a30394433504124fd299136edc68708f365e26dee3a25b8de8a7","ssdeep":"96:dY8RkaIrUMhsxmdToN2MXXm5SFkalOEj8aLputCFC3mZdfokoLJL4m3:u8ubrUrm9jW25SKEj8aLputCU2xotMm3","tlshash":"e9121c4db11360a2473b37689f4a9a08ff70051bc242ce52bd7c4ba45f76764a1e2fac","first_seen":"2025-04-25T08:34:46.229934Z","last_seen":"2026-07-01T02:10:30.892778Z","times_seen":39,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rajdhani:wght@300;400;500;600;700\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.202.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Rajdhani:wght@300;400;500;600;700\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 11 Mar 2026 06:13:28 GMT\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5718,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"890583dacdbc48d3155991cc85838538","sha1":"d3e085d05a0748cad96960e6baaaed03f8953662","sha256":"973829226d0ed346e57f98b2526ed405d47525dea607db0713309058682727c3","sha512":"85ffb88f7bffc2fc22383893315cbf46b10b9fb210290702458a6ab91eeda9c38ab4d193bcf6129ae0210e8daf10a4ee0ca6ec2da7df3c771ddfba41b6f7725d","ssdeep":"96:8OWKOWAJc+uqOWSN/OLmOLcJc+uqOLoN/OgGOgMJc+uqOgr6N/OxTTOxTTJc+uqM:YC0HzToaao49xkH4HUCDL","tlshash":"e3c133a1092bb85067933cc213ce7d36df0e23946854a935affe1c9cac9ac765351b4e","first_seen":"2025-09-19T05:10:02.937666Z","last_seen":"2026-08-16T23:26:18.375182Z","times_seen":516,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":359,"dns":17,"connect":59,"send":0,"wait":77,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/module-css/fact-counter.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/module-css/fact-counter.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 28 Oct 2023 11:57:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 875\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6186,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ea4f3a0d3e7ed88343eaaa7d4da76277","sha1":"127bdfb9a1185342ed9c642b95ca5cd72b712c9c","sha256":"e095ad9c7fcc253cc08e714d5cdd738ec47920482c2cff82eab251fc51a55db2","sha512":"171a1dedeb15ac503fee99d381a5a30a11dd9d59248b8c5c187147fd1ba24ea900f52c87b8ade5927b605d458dcfba3d18394473a590fb4d98dab308ef45d628","ssdeep":"192:MiM0w4uxUlIzgUls9k4SYgxTteJmliAJIP9+xVrUlb9EPL:9qA4","tlshash":"a4d14b5c671351155f339bac2bd51365f1619093aa0e02983acad2068fffbfc8242f9d","first_seen":"2025-04-25T08:34:46.302354Z","last_seen":"2026-07-01T02:10:30.858109Z","times_seen":41,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/fonts/fa-brands-400.woff2","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/02-all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 01 Aug 2023 16:27:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 109808\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":109808,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 109808, version 772.1280","md5":"005c9aa92b564b73b7582cc4f1fa49cb","sha1":"373361ed756b1fe68ce2f5968d467826b6973bb5","sha256":"faae6fc0aa94cc5bde5076647c817a23206096a1cbeda10d1c6f3d89d6163ed1","sha512":"cf057683226d25fab8518295d9a2bbc7261b85a0e911d323f949719b6484beb99843887ac634e58f21988c5af3b8d825b8289cbfe29b2d4e1817016be1499bba","ssdeep":"1536:598+segXMbYt4ZF+jfdgY0q+JtV63kYFF8ChI+2F2aqQPj+QU0yXbO/YvSdE:AeeemxT+kkgeChI+20aqqDhcSK","tlshash":"56b312cbe021d582bdee1c5b69ba14bf61180424427dbe9dc306746bbf16e023d0bd27","first_seen":"2023-08-04T22:28:11Z","last_seen":"2026-08-17T12:15:27.144832Z","times_seen":31085,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/06-swiper.min.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/06-swiper.min.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 16 Jan 2021 20:05:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3821\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13425), with CRLF line terminators","md5":"6604e7f8fbafb482f29e0dfa78e0e2e5","sha1":"520ff7d839d3a94c855c9d75a76b5b166a5bf1b9","sha256":"6d0a4af85bd32d089f36e072c98a15212d4468d562be75c0c3ef16c611c971cf","sha512":"be16d57b531449c3df6ce164fb091adf7afb184d408f3bbfb0087d2d9fcf93363b97b1e62d78d0662dba3c087df296b418b25b165386d1e0c05e947d759e31d6","ssdeep":"384:T7UbeQS7Rgx9BU0m/XCcif65W/1mXA82FHpx:Tob67gbhm/XDif65W/1mXA82Fn","tlshash":"a352236417003837f3774f6e46a1e6b59f60cc838a934d9db2c0dd44d6f98b9121eb95","first_seen":"2023-04-11T05:32:16Z","last_seen":"2026-08-17T12:44:30.982241Z","times_seen":1535,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/10-icomoon.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/10-icomoon.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Oct 2023 10:44:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1211\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6035,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"86e3de880baad8195a9f2801567618b1","sha1":"3d346767a8fdbb6b01e77992fe68d0d06a4bcfcb","sha256":"af337776e6bee32c44a02a89697b38e7c53c79edd53889d795bc4548b6c2802c","sha512":"2716b9d69cdc40d9a0778f4b1f1a3bfe94968327a569181244897bd35cbf2864e255683f35e5df11429126a908c5bce52e71e707c701dceeb373f3523bc79cb7","ssdeep":"48:QfOUmrZOrOk9A+OrMan/BMyZoFRBhZTVkiJxpCvmZZDCnOdgj2mkZvCOAYF3CqSh:QfOfOrO6A+OrMYG3Fh/kdv4D35nvC4Sh","tlshash":"fac12ae498bd1da01308e4d16342a620ff1ca3a89d871d5bf2b3788cb7e23415197afc","first_seen":"2025-04-25T08:34:46.253107Z","last_seen":"2026-07-01T02:10:30.920384Z","times_seen":41,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/brand/brand-v1-1.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/brand/brand-v1-1.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 25 Oct 2023 09:23:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3022\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3022,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 70, 8-bit/color RGBA, non-interlaced","md5":"5abf88e525871e30d456517ac306a264","sha1":"94c3bb6654ed28c28bbb76ee444c6ae96093ac6f","sha256":"dbce1eef3164b2009aa8a69864cfd09fa1c13b146eb47348036973e335f1d3df","sha512":"2d4723a7dd143595b4fa9dfd04af1aa8e52cb871dbcc7e3800616a0abe8f065c201c20cbdaeafa492ae31a455fdf76a170c497858c313b233cc192e535225c24","ssdeep":"","tlshash":"e1511c6ef4829fc272416ac791e2e127d50d5984a9e493beb585dc2b47e14338805cfe","first_seen":"2025-04-25T08:34:46.228934Z","last_seen":"2026-07-01T02:10:30.881561Z","times_seen":29,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/07-jquery.nice-select.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/07-jquery.nice-select.min.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 12 Jun 2021 08:08:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 930\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2942,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-17T11:49:59.184004Z","times_seen":10670,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/08-slick.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/08-slick.min.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 11 Sep 2017 15:08:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10097\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-17T13:38:01.039544Z","times_seen":111707,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/module-css/testimonial.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/module-css/testimonial.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Nov 2023 23:11:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1821\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15504,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ad923dbeb52afb01d7cf6e603bace799","sha1":"134445954367981f102eab479afa3224fb6e9a1e","sha256":"72dda3dfe7c0ec9f567dacdaf350f575e67a845c873e6e62273cc371c7fd3ddb","sha512":"a87775f1b02866f073c736d89aa6630ec62a78683a395ec43eeea7bb53fe0f87cb4debf6bcf0341631bc90d02196dbbf042c4ef6b6e5c520c1d2d0dc0bb60836","ssdeep":"192:KcUl04QoZal+RbxZLD3/jUlcEi6IWUl9+8hgQwES/U4bp8Zal+RbxZLDf/RUlQGH:CvuYI4puYWE+cwQubT","tlshash":"a5628c4e971a02139773f7b4dbd05348d3319047df120a69ba806616dff5b38e1a2e6e","first_seen":"2025-04-25T08:34:46.269117Z","last_seen":"2026-07-01T02:10:30.864994Z","times_seen":41,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:30.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 06:13:30 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6994578d-eb0\"\r\nexpires: Fri, 20 Mar 2026 23:59:25 GMT\r\nlast-modified: Tue, 17 Feb 2026 11:57:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-02-18T23:59:25+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-17T06:42:24.770959Z","times_seen":16760,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/vendor/odometer/odometer.min.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/vendor/odometer/odometer.min.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Jan 2022 10:35:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 406\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3116,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3116), with no line terminators","md5":"c5c5fd142cb067412692ca3202cf8884","sha1":"839930805cd5086af7bc88b4248d50f533bab7c0","sha256":"c023b507dce43045404d4f737df6672956dc2cb3dfca9dc61b74480219315ef0","sha512":"71b1a3dea5ed53d1a5356cbf3d09181b20f68191ac7a2b9edc31a48543bb0b47be25fcf4ec515b0cbc060c74d3687b9af4490ea4b07c3b1a4b59ede74dff6a8b","ssdeep":"","tlshash":"8351e2154f91136863367506bac81b60befce9015123e98e735da54bcf43db9e398b0b","first_seen":"2023-04-08T14:13:01Z","last_seen":"2026-08-17T04:10:37.119356Z","times_seen":2115,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/about/about-one__img1.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/about/about-one__img1.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 10 Nov 2023 09:52:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53420\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53420,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x510, components 3","md5":"2096be708258ecb49ada5d7f759aae4f","sha1":"f87348a75b158686b8788a2d1a669498c7746692","sha256":"401457a02e50052224e156f280df528114289ae8924c452f05a5e99daa560b37","sha512":"524282d939f7c85bff8abda9b0826b5a6b265275f5ed02cfb061fb87fc80c939709b33f6174f933c769a902c17896a9cf36a40e1fe953accc4ce3c7e1213b631","ssdeep":"1536:3oUWqWtCA05UrDuueI/kNIJXORYOrUfQY0:HWqWAA0OSue1IJXOrg0","tlshash":"9433020190146cc7fad071d806a2d651d7ebdda4c0db7b186bf3ca61bd20b4a7b8d98e","first_seen":"2025-04-25T08:34:46.267709Z","last_seen":"2026-07-01T02:10:30.891342Z","times_seen":34,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/brand/brand-v1-5.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/brand/brand-v1-5.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 25 Oct 2023 09:27:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3590\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 70, 8-bit/color RGBA, non-interlaced","md5":"4c2b4714b03114b2ab4f41f4526aa78c","sha1":"c9e72e1712bfe36753c88549fe46029749482d44","sha256":"dc923ffe47457fa312901592afa2fcb5295506fae497880d18ca86584e3d91d1","sha512":"d658a581675df9d432b73560d58b26568c1a1f6917b8a36e0f30ffa161365a6256e474b2a8058e52a215da7b86db1e9a66b06150af405b515816ba810a5cd317","ssdeep":"","tlshash":"d0714c2ef9d2bc825549cef5e4ea4717da1b86806ba5d49ad4ecc6421de00f0e808ddf","first_seen":"2025-04-25T08:34:46.295146Z","last_seen":"2026-07-01T02:10:30.903544Z","times_seen":29,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/05-jquery.odometer.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/05-jquery.odometer.min.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 Mar 2020 02:51:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3694\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12147,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12122), with CRLF line terminators","md5":"c35fce96f1ea9d38b7245102bcdecefc","sha1":"de238751846de9d3ca6880d04b25dc38de5e2e38","sha256":"23bdcb34c21f829e7a33294fd040c1c54376b6ed1d79157d87c87b93d5f7e476","sha512":"8df8ef1c8e44b5ee8645c8482e6cdb193cc7f4cc9e26c2e73de328d98e74bd204cd2b2c84c9ddfbdff392f76629bd126dff4b753c0be3622525126bd0af0df25","ssdeep":"192:X2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:GvokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"6042451163e1273d9307e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-08-17T09:16:50.618381Z","times_seen":723,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rajdhani/v17/LDI2apCSOBg7S-QT7pa8FvOreec.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/rajdhani/v17/LDI2apCSOBg7S-QT7pa8FvOreec.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xpresslinkshipment.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15688\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 12:25:10 GMT\r\nexpires: Wed, 10 Mar 2027 12:25:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:40:35 GMT\r\ncontent-type: font/woff2\r\nage: 64098\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15688, version 1.0","md5":"d5448938a162ccb434b09f4572c0191f","sha1":"be9eae3d1d9f4fbd2208e0fd3c871b17b65b6516","sha256":"5b7e4a6f97163c2636724d4de90304fc895653dcfe64c67a7a22f26331ca5c5f","sha512":"df0245084768642738387f7a0daa11c4bd0109617c4120bfd88083c30d686ee2bd327e426ce0d9ee1f50839c5e2890f8a2a2d7acce3705fe8fa324fe623ad942","ssdeep":"384:Bktl5HsgImpL/2gZDAMAyNWE3pZrsjyb2mf+X:Bkl5MgDpT2g5AMtswpZZ2mf+X","tlshash":"7962c046a5a6b998f4d4ecfb0086542c19bb5ca11c6230f3c719356f5bd3e75cee4540","first_seen":"2023-04-14T01:29:53Z","last_seen":"2026-08-17T13:20:02.664032Z","times_seen":6190,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":240,"dns":0,"connect":0,"send":0,"wait":96,"receive":9,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/team/team-1-4.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/team/team-1-4.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Nov 2023 10:01:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 46950\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":46950,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 410 x 455, 8-bit colormap, non-interlaced","md5":"647251c6d9024f27bd7c0de9d6486a3c","sha1":"bcdbc928c84deaf9acc21bf43dc1c5832c3da70d","sha256":"c7384563ed73d15aa868d645921a730511f8779e54611bc1f31498e1fdd603e2","sha512":"f2e20ffce2be57df994306489fc3721f608fbe6647b77008373073d83ff926b14d278d47280fecd6c8b65fc1db03c597da885c145ea29e48421f2c1bb61bdd13","ssdeep":"768:NtEhHai1qv/JRGlgIAO9rwleYrVkiFqA++eI1xDXLum0t+B1rwcltpFW:NtEhHaiUv//GmirU57z+fMSm008cFFW","tlshash":"c82302eb4419b7bddfb149d78b4382db08937a47caa6ee9cee10e3348025f41d5b9104","first_seen":"2025-04-25T08:34:46.261331Z","last_seen":"2026-06-13T21:12:02.897214Z","times_seen":28,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/footer/footer-widget__photo-gallery-img-2.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/footer/footer-widget__photo-gallery-img-2.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 15 Oct 2023 10:09:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12226\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12226,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 80x80, components 3","md5":"e71cd338913031550382bd2ad1dee57f","sha1":"82e2a9ad112b9b02224e2f902329ba75be41ed21","sha256":"0e38e4745f03b1938630d013b6b219d6cac0299badd5125a261cd053d3b5cf74","sha512":"3389d08e0779a8d110d6ea29729581b73e89590a4e50c55d7d00c7f96305e5814d5253ebb4ed5cdfd64246d880cc00ff4891b7c3bf7e84aa2e7948606eb16e53","ssdeep":"192:JHXc9F8mdkMd5XSSEp6GhID4QsWDWkf9ka5mnnEfZC00KWzrm7F+JhPXg5we/Zvp:JHAFDpxA/q88DWkfxmnEhtta+iPwa6T","tlshash":"2642c0f6c144a3200cbde1f55f1e77e6a4e6d5746f8be20238a6c711fadb5a81101778","first_seen":"2025-04-25T08:34:46.249121Z","last_seen":"2026-07-01T02:10:30.876274Z","times_seen":30,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/02-bootstrap.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/02-bootstrap.min.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 09 Oct 2021 19:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22192\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78129,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-08-17T08:21:27.434076Z","times_seen":19001,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xpresslinkshipment.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 16:30:17 GMT\r\nexpires: Wed, 10 Mar 2027 16:30:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 49392\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-08-17T13:41:28.926252Z","times_seen":33053,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":336,"dns":8,"connect":65,"send":0,"wait":58,"receive":18,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:30.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 06:13:30 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6994578d-1396\"\r\nexpires: Fri, 27 Mar 2026 23:25:12 GMT\r\nlast-modified: Tue, 17 Feb 2026 11:57:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-02-25T23:25:12+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-17T06:42:24.755561Z","times_seen":16761,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/testimonial/testimonials-one__img1.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/testimonial/testimonials-one__img1.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 10 Nov 2023 10:02:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5849\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5849,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 95x95, components 3","md5":"47192423ea985f37721675100042fc55","sha1":"10f7d98683c25b12d5668bfafe85a48571574069","sha256":"9786c4d265ec98e255b1b95a79530ddbbd3cd0d8bbd882477a4ad5cde54c0046","sha512":"9709400067e42d30f1cd7d471c3e37c9415cd1bfcdb58c7316af14454c029e6453fdb9c8fd36215e4cec058e3ff417039c03ba7c01d64b4503eb0790c85f7dec","ssdeep":"96:RZzVDjmf0vQlsyYGrtUF/NOWmDFnRW7UE2PPSGZs/hLOS9x00gbOBqYOfxs05rGv:RjDjBv5y1kCgT2PPSGZsQ4OfW2M","tlshash":"47c19d83edd505056fc76d3380e4e7a05e50ba6ff902aa8301851b8da8f2b2573d3b95","first_seen":"2025-04-25T08:34:46.255349Z","last_seen":"2026-06-13T21:12:02.867964Z","times_seen":34,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/vendor/marquee/marquee.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/vendor/marquee/marquee.min.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 03 Jul 2023 08:18:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2160\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9029,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9029), with no line terminators","md5":"38cf1efd3af828942692f619be330bcd","sha1":"c7836fb3eb61f96e6c8bc0344d77cf5618798315","sha256":"feade23a47f6041e6d1008885642dd7ab7cc4f12d94b0c7191c9cf8ca55df97d","sha512":"24726ffcbe3cb351e8776e22488d2ef5b705fc99548be61ac6588a75b6ac9f0fd4d4ba7dc715a4699dcee4eb903cc915c0e557785905e27e35efaa2e03a3f2dc","ssdeep":"96:v7zVMfcftw6RO0c4xwW5uO/kFzFYejD4CHDvDAFWa3QMy9mtlHxHf2KAHfqWVHfT:vX6fcf5P5tkFz1BaWoROjiSFx/7T","tlshash":"311221d2aa613450c7db13bfd44f46864e349932251e4d7fb472c099ae60b08ab97f3a","first_seen":"2023-03-07T12:21:25Z","last_seen":"2026-08-17T09:16:50.574212Z","times_seen":4582,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/module-css/breadcrumb.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/module-css/breadcrumb.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Oct 2023 18:18:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 430\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"088169fef5061e90c703850df5977b20","sha1":"391202824ba1d0dec2cad2ec71954e37c7b45960","sha256":"0f3e44d626d247974685747a4c99da09f0b6718647f57ee90d9aa8b11f83f2ec","sha512":"1f82acd9ed79ff044e56e91cbee679b039f6552afc82694d6e1ad2e5f485b5ce406949febb3fd371c7cc0f32b32234f878396a917892dc3ea55d650a7b4b444a","ssdeep":"","tlshash":"d841bb08873a6261b9378768b7d62e59d36811439d0a02a8bfc4660e5ff537cf281f5d","first_seen":"2025-04-25T08:34:46.31076Z","last_seen":"2026-07-01T02:10:30.864193Z","times_seen":40,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/module-css/team.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/module-css/team.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Nov 2023 23:02:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1040\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6855,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"776d78271ad90c460119e292d889285e","sha1":"cd36607406594224abede421830fc207da7ed315","sha256":"d6edbcbce3ddae0bf421a5c268e651db0436035892d3e1560835cba87545bdcd","sha512":"2307bea192de232b42764372fdf76b98e1b6acf2fe794ca5260e0c4b14e3bfbda06d7a9d83cdaf45c798205206928fc26d2518c3624ca105d436538efb4006f5","ssdeep":"192:VP0YUlLONHTUlVhnCTqD46H4BuFUlNFD4/wbpWUlBcxUlhsfUlUCiWUlw98CCrkN:ejP5IZ7NefM","tlshash":"58e1c008a62d16079973f7749be1234ef2704083ef410599bad092569ff6b7cc392dae","first_seen":"2025-04-25T08:34:46.264677Z","last_seen":"2026-07-01T02:10:30.886732Z","times_seen":41,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/MWfS2k8Cup","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/MWfS2k8Cup HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xpresslinkshipment.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 719\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Wed, 11 Mar 2026 08:13:28 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc30\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"e0506b004f7573fa3c86288cf0555dbd","sha1":"82b93cf500d310698984696d13bbcfa13f7b2faa","sha256":"5b498ae4ba57a46404df7cb0351fcdc2c467286e383036671cf1809d6af0eb16","sha512":"1cc7578813dc24648d72e7011b6ab3fd63421860fbed8255be7d503cb95d6e50739beb11ecf50de124c35d48b428c8f84ddefaa298da68154b3793b259cd5610","ssdeep":"","tlshash":"a62141f24c48686b09857ec7a12bee07283c82a6eec14e70cb949c2c10663d6131b60b","first_seen":"2026-03-11T06:14:03.08499Z","last_seen":"2026-03-11T06:14:03.08499Z","times_seen":1,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":126,"dns":1,"connect":59,"send":0,"wait":261,"receive":1,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xpresslinkshipment.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 16:30:17 GMT\r\nexpires: Wed, 10 Mar 2027 16:30:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 49391\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-08-17T13:41:28.926252Z","times_seen":33053,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":296,"dns":6,"connect":46,"send":0,"wait":53,"receive":19,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/3736fc9/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:30.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/3736fc9/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 06:13:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3407\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69a80453-d4f\"\r\nlast-modified: Wed, 04 Mar 2026 10:07:15 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-03-10T11:09:32+00:00\r\nx-node: m9-up-gc10\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10573), with no line terminators","md5":"fc00deaabfafd48080a08fc0d7f841b5","sha1":"3bf17f3bd75349b1ba1f9b78c6117fadd4620310","sha256":"be8a7243d87cc8bc1c523f0b10a41c149622c9c6af30b6a4e8231b1506cfd542","sha512":"1f3d4801665e172b54578e6d0d71f066c72df7244512cf00026104acbf6f21dab5de812d2679f56b2414ae7f40fd4963f61db75bc7bfc0893c8a3debf65638fc","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8BijFLeEJK:C7H7ObdFkOIphZ8wjFCmK","tlshash":"af22d71ee7017f360fa613c3744f7b5376a480e592646cb5d89c826943b9bcab217b8c","first_seen":"2026-01-27T14:54:11.499444Z","last_seen":"2026-03-31T09:24:10.733781Z","times_seen":1154,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/project/project-one__img4.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/project/project-one__img4.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 10 Nov 2023 09:57:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 69992\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":69992,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 410x300, components 3","md5":"6b040b249f57ddfe99786778628855db","sha1":"3b772da8ae5f58770f1a36c240f55a6e85c11d0b","sha256":"04d0fc10d189457a8be5590e8066e5bf0b6e901714f1c1e2a8b2d6dd469db00f","sha512":"1fc486baba7cf5c5d2156ef798d368bddc40b4e9f82cdea0078900f4aadcd5a11d3f7d5201cd95e05fb1c5e29376d5ddaa35d7979bdd893bd02c3564cbb3d286","ssdeep":"1536:r7eQevBmqut9Lwf2IuZth9n/4LDrHzBOs7nQGNlfz+:yBm5dh/Zth9ngvrHzBOenQG+","tlshash":"fc631290ee047872d6a75ab7b567342c911b4d55ef808dfe3570eac96c604b2ce03fa2","first_seen":"2025-04-25T08:34:46.307524Z","last_seen":"2026-07-01T02:10:30.902309Z","times_seen":35,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/02-all.min.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/02-all.min.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Sep 2023 15:40:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21867\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":102157,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"d4323858024a7a96f2e0e0449df90ba4","sha1":"b3eef8ee5ecbbf51b63419cf922c58cfc4734631","sha256":"552b316e5b535ba9e456aad19ed48e2a4386c7093398190269a2648c08f25939","sha512":"c30ca4bc92e35318073dc224ce22d2b3d4de06b94f8538c1093eb0c2008509f3f7d1f6a3e2496688d8dabea627840d8b4843745fbe11401ffcafd786c0ca9e9f","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuIprrlCa:M709gMGFiyPGuIprlCa","tlshash":"82a3b7f8e44c15d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-10-27T16:52:55Z","last_seen":"2026-08-13T22:00:34.556634Z","times_seen":540,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/footer/footer-widget__photo-gallery-img-3.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/footer/footer-widget__photo-gallery-img-3.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 15 Oct 2023 10:09:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11083\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11083,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 80x80, components 3","md5":"c6b763545a742c1d23a22b9df479bf71","sha1":"0e43be5e6b8349e0ef8995084eb46e21beb22682","sha256":"d3b6ee877c4eabef969a7ddc650fb593ba3394e3c1c2c0fd3a53b53df8f7f81f","sha512":"87b78c6016bd91584534759531270b24c65e5f34d32470ce4daa3bc22ff93853702d69f57e18b362f0632876721092b662302a8fa34f0dcfbd133e63a0b2fdbe","ssdeep":"192:JQ3d51XbAhpy79nieIuKwmrMlOAb6I6W5jA85bNSyCS8IRfasbnh9Gqqc:Jy9nieIBeOAb6IP5b4I9njqc","tlshash":"8632b0fb59e2c3309e3369ca207410eb8ace1fd8b410571d75ed6d9ac1a55cb970718e","first_seen":"2025-04-25T08:34:46.308752Z","last_seen":"2026-07-01T02:10:30.884538Z","times_seen":30,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/11-jquery.lettering.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/11-jquery.lettering.min.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Feb 2022 08:04:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 428\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":924,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (859)","md5":"83f6723631eeb52da3101b72b7624728","sha1":"3c74ddfb1209f2fd56fd58e61829e01a073e303f","sha256":"c9bd115d1d0d0871a3e6b701384a903d7bd378313a0504ae94949f5bb21894f0","sha512":"549fe261b8aed5e27ac8b8a67d38bae6dd91f5315c1b90fd5fc6427db6c41614df3e728987c6f2a0a5c46b08b949c2590582f57a28ab2f5f8c733643c744f3f5","ssdeep":"","tlshash":"4311dcc4f3a3aa07479bb7bd513b620ee26654c354030c01f9a8d2563da7b490aa7ea4","first_seen":"2023-03-07T14:30:16Z","last_seen":"2026-08-17T09:16:50.585106Z","times_seen":1010,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/module-css/banner.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/module-css/banner.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Nov 2023 23:49:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2130\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18446,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"52c2cae2a4b77b6ce36628e14067aec5","sha1":"f6943bc5ac23e2fc59d5619ba8962303438f6f5b","sha256":"e145621875f9144bcb6dda799a63c2e13991757420aeaac5933b85d6c4fce594","sha512":"3d47f6a7246a2ef008e085afbfba00f470945fdef7255a8b8c7ff147d14a267e4ce548b79685ba6944d0648aab23ffaba0cb9bc88fe10918f68afb77c7e36919","ssdeep":"384:/7xF67ZxlslBl+lOxF67nxF67YTdDxF67zxF67iwV2unVRnVrVHV1V8t:TxF67ZxlslBl+lOxF67nxF67SxF67zxh","tlshash":"3282da294e1011059233d76c6fe50b58e6799043ee12049df3c6264bcff66bc636afab","first_seen":"2025-04-25T08:34:46.237708Z","last_seen":"2026-07-01T02:10:30.863206Z","times_seen":40,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/module-css/contact.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/module-css/contact.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 02 Nov 2023 22:26:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1115\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7021,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"71c520f3772074562c68285196124ac0","sha1":"bee0ac015ecd27fe3166aad3d3394e6c36de3eb9","sha256":"29db2f8cc1ba872ab36ebd0d64c7b6144e0484f359b92ae4c9c3d3fbe997b937","sha512":"e75011c66b138642e0c39be4c3a8b3d5a0a7cffc2f2ef981df0a18bcea85877fd33918710cb0ca8462349513477f9ae2acb5602e721542db0334efc3dbef2d7e","ssdeep":"192:RFgp4m+7CsUl/gF+ci2fHpIp1alUlub9FD4FvRdy:0pQ","tlshash":"fde1bddca221011e5673d76977e56b14d761a087ce0f0689fb8092584ff67fc8e12f89","first_seen":"2025-04-25T08:34:46.297466Z","last_seen":"2026-07-01T02:10:30.900444Z","times_seen":41,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/resource/video-one__img1.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/resource/video-one__img1.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 10 Nov 2023 09:58:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 244502\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":244502,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x650, components 3","md5":"c6110029528686a714c90d9ae5a1647b","sha1":"5047f8aef33068c1ca4cb07f18ac93972fba3135","sha256":"f867c3d8a7e26f24dfacb904dec6ef58b2dc1c533b5691e4c26754b68cc0ff4c","sha512":"b4e622be085e9fc069ce883e2c4ff758ba5f1637924eec86969baa59b1821fdbe99ae023c3290fe77daf42604689d06a338bbc7e3e0202d94205ce633c8635d7","ssdeep":"6144:iGvdwhsUtunZxfNQEskZ2Vy7OHgDdz5FNUOFuFFk8:i6AtgvfNQWZky7OStLyX","tlshash":"7e3423102eb38489f9a91e3d4c453b6050cac98cadd58fd203c75d46eebad98e37649e","first_seen":"2025-04-25T08:34:46.304302Z","last_seen":"2026-07-01T02:10:30.887756Z","times_seen":36,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xpresslinkshipment.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 16:30:17 GMT\r\nexpires: Wed, 10 Mar 2027 16:30:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 49391\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-08-17T13:41:28.926252Z","times_seen":33053,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":216,"dns":1,"connect":43,"send":0,"wait":44,"receive":49,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/01-bootstrap.min.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/01-bootstrap.min.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 10:21:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23421\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":218807,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (562)","md5":"25dd66fca94c37f57c328ae410c683f9","sha1":"53fd4aa094f0e7ea1eac6bb263cb65329702cff9","sha256":"d56b1aa1e7f5e963b3e1a2d343614dccfb4ee9b098ead7b6e669f8744a45800d","sha512":"5bc40eaf25bfc72515eb795618c0792fa92e6e30abb50c25f563d478f551fdd7be1276fa286630328e4ce07faaee78739c27f57f20b3291ab67c585a4a1c2f8c","ssdeep":"1536:qfnpVWlih7kWq21yGYjGUtF6WMQVl2YIJvtszleSQmuw:qFh7NtszleSQmuw","tlshash":"a724404ae9f22959184b806c59ee6bb5b33c4083c31edd79bd8f3354cf492918d62f88","first_seen":"2025-04-25T08:34:46.282495Z","last_seen":"2026-07-01T02:10:30.861501Z","times_seen":41,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/brand/brand-v1-2.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/brand/brand-v1-2.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 25 Oct 2023 09:24:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2901\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2901,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 70, 8-bit/color RGBA, non-interlaced","md5":"4bea8c1ec513d058a15be5b36ad453a9","sha1":"56dd7c8a1d6ccb6f632a3986b7adb5f6ba3e7b67","sha256":"e58043d4628cfe3aeb3d0fc9e2ad8923fb02485fd4cc1701d2c0cb15abe0aeb1","sha512":"57d555d7f637fd28e68fc80a8d67e155f14d0130372620b6f8474a6d467e580e26efd8b4965803376b0d05b69492d5a3be34aecdd7d9924d05fa56394e55b63a","ssdeep":"","tlshash":"0b511b42bc831cc0f799a6a010e7356f9859ded1c585c16539cf8c578c759b0a45e6c2","first_seen":"2025-04-25T08:34:46.225597Z","last_seen":"2026-07-01T02:10:30.89908Z","times_seen":29,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/03-jquery.appear.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/03-jquery.appear.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 Mar 2020 02:52:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1239\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4424,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d18fe7c86d2bcea69a0810de7b81e676","sha1":"3bc98b3a47dc6f09238bbd0e496fa11daa3caa98","sha256":"70f721f0d6aaebc5c683551fb12668e6a91a02d17ac1b41f8a4dda0fa91dcbd5","sha512":"0fc73474dfb4fa9247793332815cbc70f6b575058381032981f2a05e87432e904f275a76567511841c568d554b3426c4c548c55fb775bc9b5c1d1d6bb35efd7d","ssdeep":"48:Wl3XwqL924ayV+9FLAPfnUIeohhR9zIr0FfFoBSxMEh1u1cWSKjf4WJzw:y3XUz19FkkDo7R9crgYSpTocWZAUzw","tlshash":"2b91dc4a759b2ab54877622a9f1fb20cd721513b0202c2113cedde6c6f71864a197fdc","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-08-17T09:16:50.613188Z","times_seen":781,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/module-css/about.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/module-css/about.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Nov 2023 11:51:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1715\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12824,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"20dd1f8883c2ad624bd5f136f8951a54","sha1":"079873594f6d060b406632b8932eefb49476300f","sha256":"e8bfa089a6bbc5807a155ecb7987dd370e11ca0449b777f1a6c8fe64fc60f24e","sha512":"d23dec035e1f5057373d534a2622cbddad95ddf67f327819d6410b502edffd6f82153a30cfb802b8814d459a1a46cae9bfb20bdf2e4cb3a72154fc285d3ec531","ssdeep":"192:QNcQ5hszPGZCPxUlJtUlTUi+YeEe/Ru17bpp5/vTS3GZHpNLR9WCCC+1vwxfmKqG:MBsu+","tlshash":"5342d34c87520109d677dbb8abe02395d6704057ce92004bb7ca62558ffe7acc793eab","first_seen":"2025-04-25T08:34:46.283853Z","last_seen":"2026-07-01T02:10:30.906785Z","times_seen":35,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xpresslinkshipment.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 16:30:17 GMT\r\nexpires: Wed, 10 Mar 2027 16:30:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 49391\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-08-17T13:41:28.926252Z","times_seen":33053,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":129,"dns":2,"connect":46,"send":0,"wait":90,"receive":28,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-9.jivosite.com/widget/status/2528837/MWfS2k8Cup?rnd=0.6046559709809417","fqdn":"node-ya-9.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"158.160.17.225","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2528837/MWfS2k8Cup?rnd=0.6046559709809417 HTTP/1.1\r\nHost: node-ya-9.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xpresslinkshipment.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://xpresslinkshipment.online\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/6.0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\nx-powered-by: foxy/6.0\r\ncontent-length: 80\r\ndate: Wed, 11 Mar 2026 06:13:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780446fa512b30aa47165ef6f05679ae","sha1":"5e7cde8794e6380a82746c4ab4e2a61b4a7ef3c0","sha256":"166027b8b197c675ac51fbf0f217671c09fcf14212e9c4fb8e87849ac812a1b4","sha512":"fb8fede35220106141bdd29e7808052e84d9fec96254a158bb833b1c249b68946caf2680c8fce702a71cf62fbd769a82b141129e3952016a8f1a1391d639addf","ssdeep":"","tlshash":"d5a024350511f05c0374c350d1d775010130010131d1d034d351f04071f74d00cff007","first_seen":"2025-05-07T10:33:37.215793Z","last_seen":"2026-03-11T06:14:03.095723Z","times_seen":3,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":409,"dns":316,"connect":43,"send":0,"wait":42,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/brand/brand-v1-4.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/brand/brand-v1-4.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 25 Oct 2023 09:26:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3068\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 70, 8-bit/color RGBA, non-interlaced","md5":"3fa44eb429cc1dbfec6d227dde058b68","sha1":"8a247e18540521f2a517a810e868c9a0f40563a8","sha256":"25620d6ccb982b52bd27650277c15c2bdfa9b55eb6bd4ca359f6dea246fe8f71","sha512":"bf3a0a28e78078d0af357f55cf05a89cee476e89e8f873b37c9930406c0f05b8263f97ce11c3354c66197b8ac24ed9ec4d56a1bbc3752da3fcd9a0e00e3a7dfd","ssdeep":"","tlshash":"17514c85f6c138d09a95e5e11dbb283fad1bd880f453814975cef51c6e240f4d43aaeb","first_seen":"2025-04-25T08:34:46.275519Z","last_seen":"2026-07-01T02:10:30.909082Z","times_seen":29,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/footer/footer-widget__photo-gallery-img-1.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/footer/footer-widget__photo-gallery-img-1.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 15 Oct 2023 10:09:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12131\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12131,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 80x80, components 3","md5":"d978f0ef6fc8609ed4bbc7695840d679","sha1":"bc412156274903a6ab3a28927e9800be7260da6c","sha256":"16969ad7be6c4608297d77c868a540e4693509222e06c0eb69bea08541f217b5","sha512":"6b7f16473faf0226e09ee2b8766c8b2c502d49dd6f80bf50539832f90fcb51c45a288850ef078d38417663e402788dc9a7cbe124efaa9a863ae4bd952949089e","ssdeep":"192:JTK/8Ny7gwZ9CYcrbN2O3uOfgl5vBOYPryiZUBr2f/3P8G9D693vb2mV/LnQk:JcCwm512UuqglNBOwrUBr2HP8G9A3TLl","tlshash":"7f42cf52f908d55ed4269b3d0d706782e0bb446a78162b9667ee43f0ccc64df690e42b","first_seen":"2025-04-25T08:34:46.29625Z","last_seen":"2026-07-01T02:10:30.875448Z","times_seen":31,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/01-ajax-form.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/01-ajax-form.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 14 Mar 2017 16:25:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 428\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1250,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1be30d77e5267cbcf399d6152253e315","sha1":"8875c6e6232be6cb571e8a90e312107a44c0d4b8","sha256":"e9d3e2a6c29998bcec8abc8ec7618f03d61a52ec8d4c7d5281e6ab2ec54ecd85","sha512":"4cbd6c3be98c32da0f0c28b62d20967751728fa9fe94eeaf28b0bf6a3933de82e51c89f923bf90a2d630ba9f026efbe294fe2ea12ae4029718e7f79199a00946","ssdeep":"","tlshash":"3b21af847e6f0b6e1a47221576fd72c9fb2dd1728207622aa7e9083916841cc17c27ee","first_seen":"2023-03-08T07:03:22Z","last_seen":"2026-08-17T09:16:50.550608Z","times_seen":1085,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/12-TweenMax.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/12-TweenMax.min.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 02 Oct 2022 07:00:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 38559\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":115897,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32043)","md5":"7ae6465dae50c862dc55a547caa86a66","sha1":"38cb690397f9eef5a9592efc9ce9e936e4e863cb","sha256":"a863a77e9ee263a0ec9c1e792bb33ed0f663582b7369f472261df7b6040990c4","sha512":"e8c08fb3d7db488b7a993a491f62dba3d2a4ef581c83063ce410aa2463f4e31f8ed3c5b79bf3a229f32231ce1540a627f830ad010c291ae996783d1c002791b1","ssdeep":"1536:jjm/F0VPBJ7jG/D+EH/GPJBpYSiZAr0GOlygZYzw6JcIfGxlLYiGsYVVOiE:jC/Wv51/vme0lybJXkYiGu","tlshash":"3db318c5312270128497269a557f0a47333bddbab4098d2cf589c5de3e1ce8921aff7a","first_seen":"2023-03-07T12:12:24Z","last_seen":"2026-08-17T04:10:37.118039Z","times_seen":2810,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/vendor/jarallax/jarallax.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/vendor/jarallax/jarallax.min.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Oct 2023 10:54:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5057\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15505,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15303), with CRLF line terminators","md5":"7ab5d0553462c68698deead6fd45db14","sha1":"fbd564247fd92970287dbf398c8581e19076f27d","sha256":"8a1018e1a85ba6212ccb1670cea88e36b23d6bde0e56d88ca6d53ce69f1c0f30","sha512":"e600fdbb0f9d1caca58bbef68c31eeb0fe955b932b8d57daadeb92de3f795270d0c4a359e4ac6ea116b0c7efb68b449ad17351daacdef3bb2df232e7f10cbd78","ssdeep":"192:H9W5RO5CcsDpEgCpb5ck24ZBGz/1Nfw9+ThFOisY1QmAaVh4DPExc4HcBAsot6J7:dIRCYY7GxNfrMKhUPESBAsot6Jrn","tlshash":"7662e89c3221321285fb72ee201f630eb635997481aac951b52cc9fd2f65e8d40f7f1a","first_seen":"2023-03-08T00:37:48Z","last_seen":"2026-08-17T12:44:30.955001Z","times_seen":1169,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/fonts/fa-solid-900.woff2","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/02-all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 01 Aug 2023 16:27:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 150020\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-08-17T12:15:27.141273Z","times_seen":41268,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xpresslinkshipment.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 16:30:17 GMT\r\nexpires: Wed, 10 Mar 2027 16:30:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 49392\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-08-17T13:41:28.926252Z","times_seen":33053,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":311,"dns":0,"connect":0,"send":0,"wait":50,"receive":12,"ssl":276},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/fonts/fa-regular-400.woff2","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/fonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/02-all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 01 Aug 2023 16:27:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24488\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24488, version 772.1280","md5":"747442fa76f1d9a31f9a54a2e8a4b448","sha1":"07fc0ae14bb3187839082aed3bca11dfb1e04524","sha256":"9169d8be7a8177e5a92a4d04b6de7f6504b938573bf4da5889871c4f376d3849","sha512":"274dbe5bc31c560d2cc2d15afe5485687b2f7dd0ee24ffed99627310ea36a6a3cc1c91e22368f909d056f4faab051838d469e0bfe8a30169b735aca5eb0f402f","ssdeep":"384:Ok8mTTNu15tM1xuB9dYY7YRHmOdjzUJsAr4p8Oq7kpPyXBpqrhDRBybCpMuT33SI:OGg15tM1xuBYY7YRHmcjzUJJr4p8Oq7a","tlshash":"0cb2df2cebab2746c908513a2ec4deef3dac1b674d0461298c45edece8847281d9c964","first_seen":"2023-08-14T23:16:18Z","last_seen":"2026-08-17T09:12:10.875084Z","times_seen":10627,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/04-nice-select.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/04-nice-select.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Oct 2023 20:49:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 959\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"48330d63ca3adb9b5b7f9c017171bb9d","sha1":"c7aad786f1229d807556486024afd103cfb8ba6d","sha256":"8d94d95318d93de39e7271a19fd6accb1143b234fe91e5f8532141836c48a15b","sha512":"d81abec0be2a32e9c3eeef590c8905339a5fce49472fa06a3a3623ca96e16563d36656ad044f29e21d89754c20806e7722a6af7937f2e89e33538c6f829fa9d6","ssdeep":"96:oID5hTrXeiw6WeswIxN1zNFT9u8J3Fq4nE:oID5hTaR6WeswI7bFT9u8J3FdnE","tlshash":"409103799a231552282f476fafdb6b18233dc0435826cc6cb7c0d60a4f0e69c8cd5b8b","first_seen":"2025-04-25T08:34:46.244106Z","last_seen":"2026-08-12T10:40:31.753568Z","times_seen":58,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/shape/banner-one__shape1.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/shape/banner-one__shape1.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 21 Oct 2023 12:05:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2894\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 126 x 135, 8-bit/color RGBA, non-interlaced","md5":"789dd39c4759c73ffa8d54e02dfd6bf3","sha1":"0cb2db6dd6e82baea6a9a1001355aa92526cafa0","sha256":"5f7e87bb98bb8b5ffc0a25f00a08d0ed5aa28e827d314ff9a74c66ad750d1f7b","sha512":"e7112ca131c682619f6696cb057080c0767bbe5978a6d59c95e43362d92c0b5233b2cc5cd4af047411ecec0a04c79b1d46e8a523844c4112a4663d49b6a5ea3c","ssdeep":"","tlshash":"19512b83b30315dbf7f5ddb6514928316cf51cba86286188c22bcfcd9a884009769e38","first_seen":"2025-04-25T08:34:46.226786Z","last_seen":"2026-07-01T02:10:30.893615Z","times_seen":36,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/project/project-one__img3.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/project/project-one__img3.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 10 Nov 2023 09:57:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55499\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55499,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 410x300, components 3","md5":"49f7dddf4807932d3414aa50b7896aa3","sha1":"eee00ef5091b49d8ee26a72927e47ede0425ed6f","sha256":"8328d0119352de79bd665fca32685b93a6bb5c14ef5ccfd714bfcde353838915","sha512":"21dd78ad11c43d71b3f832a025a762ff25ac6b4b85e51ffa6576243d18ad3e7774c90d668c5f912689c2e498930d226426bdde4430d124911847257cba42f9bc","ssdeep":"1536:p1kPXRleS7YckjlpPSEgODH8RUEBz9p0h43xbQVPa+eml:vAXRP7YznSFODH8CkpyhEbQX","tlshash":"1b430299ed61cd81956816ecc5330e9936128f6763ac947e58980f33fda01c71afc36e","first_seen":"2025-04-25T08:34:46.224472Z","last_seen":"2026-07-01T02:10:30.880989Z","times_seen":35,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/footer/footer-widget__photo-gallery-img-4.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/footer/footer-widget__photo-gallery-img-4.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 15 Oct 2023 10:10:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11668\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11668,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 80x80, components 3","md5":"855f1f6fa2eb5437a400e3bd740999dd","sha1":"5ac61824234819c1a73aa0da28bbc934f98bd06d","sha256":"8f0d8588ffaf01857f3cb0b679d587152d1bffd23908adc4d7ff96858f0a780f","sha512":"36b5e6f7a0e90fa8cc6cc495c84b3e4cd3199cf89b3d63b44c0e3f7372f533a5a090d99914504f94b4c5d1749842db666d27cb289d40a681998c2f17ba8eea96","ssdeep":"192:JREZ4SDSh8x8WE5+RDjGn3w76nCOTPrW9JSZkTUtAi0+1s257AuUwyz6Yo3jCIGr:JRPL2mW51jGn3PjPAEk6dsUAHwyp8jAr","tlshash":"7332c09b4c4546f049bfe1a82bcd7aef42c1506bb9d421a2e5130433cf3c989268e91e","first_seen":"2025-04-25T08:34:46.235296Z","last_seen":"2026-07-01T02:10:30.910535Z","times_seen":30,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/module-css/header.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/module-css/header.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Nov 2023 23:42:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3456\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27156,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d2c1ba2f486ef7bd4ab049b748960a39","sha1":"938fc176b98ce1d8516a085451e5ac29a00d3c68","sha256":"53377e21756d198ed55337d509259fa55603aa842581580571a7f09459d92538","sha512":"3a34d5ae9a8555f61e44b5fa8cd60075d981505946115afe87c1e7a090f8e0b49adbf85d62267d223e4742f1a032df06548085984492a50834b8a630aba71798","ssdeep":"192:Axf/SMaQVtaKev/yJ7cvrMv4N1oiC/CcM041Uln9FD4A6qqZDWs85ocKyuapVhdL:fjvMNIY3oW6PnqT","tlshash":"fec21f4c862221469233db9cebd21708e6b44043ef06015dbbd65b469ffb7acd153eae","first_seen":"2025-04-25T08:34:46.24302Z","last_seen":"2026-07-01T02:10:30.850727Z","times_seen":39,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/module-css/services.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/module-css/services.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Nov 2023 23:36:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2429\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21434,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d02a940423ab0e8904615d64567531e5","sha1":"88c9f946f90ccd4421dda68ad8f15ce40f211bc7","sha256":"2086a4b573cbaf41e3f3bcb509c109f0bd32ddaac1337e05c9f335af6b772f0c","sha512":"643cc00ad283ac60745a6e1bd04b11165e8193439d2df381445a94c5806beea0b7cdb4735f2e52eff6fc7edcfe3fbbc8e32032e74f87c46e51a0bf88ba51f9b6","ssdeep":"384:RTUQMqkSmdoy6ZKojT1yBq2wDcbgZ2ZzUr:RTUQMqkSmdL6ocizUr","tlshash":"4ca23f6cc3150159ca37f7745fd23248e2285063ff271548bbe85115aff9bac8392eaa","first_seen":"2025-04-25T08:34:46.258086Z","last_seen":"2026-07-01T02:10:30.855231Z","times_seen":40,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/09-slick.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/09-slick.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 11 Sep 2017 15:08:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 483\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-08-17T13:38:00.996183Z","times_seen":74300,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/style.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Nov 2023 22:51:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9395\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79978,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"45c5ae8adb88c65f934698f3c9c3ea89","sha1":"a53b4d3659690c9c12cfc9c7ebbe9e5820da3036","sha256":"50d8f11ceb647e4ec677509b5185a3b6dbb148568bbda868391dd6b33ca0aa7e","sha512":"74dc54eb0c5eab973ff6763a2c5ea84474047b38c8a734a3fc5d1071ffadd8335218b0298ec811a6a4b498e8d4fb2f2b8600ce9787aa327ca2c58ba124b4330c","ssdeep":"1536:Ou9ntDhOMKoP/Kouzoj8mLKS0W5kQ/2FLM7AaE1q7WaV5V0i72avk:2r","tlshash":"c073529cd621010aa333dba85be51749f2742083df0611acbbd592558ff67bcc262ede","first_seen":"2025-04-25T08:34:46.227874Z","last_seen":"2026-07-01T02:10:30.852928Z","times_seen":39,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/team/team-1-3.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/team/team-1-3.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Nov 2023 10:01:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 50152\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50152,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 410 x 455, 8-bit colormap, non-interlaced","md5":"64f431d6b08f869cec8e535910e3882d","sha1":"13c228b8c0a1bc7dd9a756f15e91a14293fae6bf","sha256":"c01d848784a0151827e74c7114e184e1272a0cda4cf5480fba064efabbe73096","sha512":"40c7281186966c989c20887bafffbe395640b3ee40872014d485818ae422cb3f4b18a61b24fb044c98f5c1f9fbb1cb0285f861bf5dbe366aa41fccef176654f0","ssdeep":"768:NtppySUReJMusKZuI5fTpbbys9sxcMq8BY/jpyn/81aviYfLuCdFIkYMDnyUvDYT:I8JMusKnNb+Nc98BuoLHdqPu7xe","tlshash":"fa33024568ab691ee237c5b31a3aa4d054b4509ce3b2b127f7f2330f1eb2285e777458","first_seen":"2025-04-25T08:34:46.314091Z","last_seen":"2026-06-13T21:12:02.88287Z","times_seen":27,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/brand/brand-v1-3.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/brand/brand-v1-3.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 25 Oct 2023 09:26:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3315\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 70, 8-bit/color RGBA, non-interlaced","md5":"01cc1377a3b9f070267de9bf4430e0e6","sha1":"3139461128c51a4cc3908012f01a5f2e93577c8f","sha256":"ebf862bb4b5fc34843c609ab4f8f59e538efd6788c933022f466fb2a28c8c1d0","sha512":"a27f26a14619aa123fc3ceef75d41687fa0892a01d5aa8a0e1f93ef278944a802ff821508a85e2aa7be478dbdaf49efec8feb7869f067df7b43a78022369e1d4","ssdeep":"","tlshash":"0b612b4b99e02bc0106541c667c364b69e52c5c09cd0e329d584c6773eaadf3da3a0f9","first_seen":"2025-04-25T08:34:46.313051Z","last_seen":"2026-07-01T02:10:30.922433Z","times_seen":29,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/footer/footer-one__recent-blog__img1.jpg","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/footer/footer-one__recent-blog__img1.jpg HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 15 Oct 2023 10:00:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12701\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12701,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 80x80, components 3","md5":"90ca9ec8d25789f4bae9d3b9fc1135bf","sha1":"6736039828970324d1d4c1636c4adfd60dddd45e","sha256":"8fec4553a6027be20ff966c56b53d62c9c5083082393d6bc53fc9b65c3516099","sha512":"03ef9e199aedf6ca2d21966d7d429576859dfe34ca10d2df2be5f506acb854f4b21bd4868a88d281c45ae205c20d3d171e206706417d8547c2b4920aa47c5bd2","ssdeep":"192:JQ2OxwusMBedwb6I3gBj6flEU6LoSr0yMRwOUYoxqVOGAshUpfLQE3V8Fzh1uJY:J0zFep7R6OoSlzOUYomTAshaQ8V8j4u","tlshash":"de42c0514154e080cb5ba37385d8ccdf82d6dea979abc89b8923c3a1c6b486775ceb0d","first_seen":"2025-04-25T08:34:46.276939Z","last_seen":"2026-07-01T02:10:30.882179Z","times_seen":27,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,500;1,600;1,700;1,800\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.202.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:28.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,500;1,600;1,700;1,800\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 11 Mar 2026 06:13:28 GMT\r\ndate: Wed, 11 Mar 2026 06:13:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27486,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"d1822c246512fca42d70bae3f05dedf5","sha1":"62e69a3762e226a7b160f71980308bb84b92d94b","sha256":"f9dbdc8415a36077c046de0117b784be75ed93b735d7c6665ed47709489cca5a","sha512":"98bc9874bce2cd1aaa1800f7713fff34f9353120f01bcc20df638b0b89d434bbf05ae86d3423567ab03c7289284aa2738e6e045c0b554f724b82bfe68a92000a","ssdeep":"384:jolk6sXYSDtlk7swLN6Glk0sh6kxDlklsKd/clQAlVnly+lXFl8clBjl+X:YsY0nprlbxLM","tlshash":"71c2ace1481e5494bf472cc263ce2d33de0ea355309495299afd1f9eaca7d2232647ce","first_seen":"2025-09-23T13:17:36.333169Z","last_seen":"2026-07-01T02:10:30.885458Z","times_seen":22,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":331,"dns":17,"connect":57,"send":0,"wait":78,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/img/favicon.png","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:29.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/img/favicon.png HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Aug 2022 06:00:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3118\r\ndate: Wed, 11 Mar 2026 06:13:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3118,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ef27c8c9a7cf88b892bbaa2bb8cc903f","sha1":"01f3a3bfd4acd4b51d6f06eff4da0f9900633b69","sha256":"2852709cac5e41f3c034b2acc8bc3308ed0c89d3aa53c6c9dd0603ec2d62ddae","sha512":"bd2888898a313b847664669a640210bc748c1036ff9c511494ca85224f3cd69beae0e84c8d983907443ba0703bae87347185b36c9950aa09a3854885e5f2817f","ssdeep":"","tlshash":"b8511b04ff3028508d5deb4959e896c706b79fd08781a812bcc88f17ad645fadf591c2","first_seen":"2025-05-07T10:33:37.195099Z","last_seen":"2026-07-01T02:10:30.918326Z","times_seen":22,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/css/responsive.css","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/css/responsive.css HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 06:13:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Nov 2023 22:55:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3619\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33245,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e1d05a9cb6b8a3285ab10d1a6850be92","sha1":"35c13186d2d5ab8bb98ae999f5845a1d94fd7bf4","sha256":"ab1e6034323774d495772d0ebcbb16757a93a50be741daf7822103af1fcfead7","sha512":"a22a60a8957083a4b46520aa7129252ab3469d72d1bf7abb846624e8063d9ac24534f9af332c887401faf4a3102955f8dc4a84f4c0803bb771a676f081c7f1c0","ssdeep":"384:UETZ2IBuDxVq5GLmPTIG7knuoJEPsOT191U1LKJ7TRL:b2IBuDxVq5GLmPTICknZJEPv/uLKzL","tlshash":"71e2bc0cb90b110c4789e2d4bbb46ef1ed226066eba740faf4f05725e0e864c57d96ed","first_seen":"2025-04-25T08:34:46.245368Z","last_seen":"2026-07-01T02:10:30.90155Z","times_seen":40,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/09-wow.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/09-wow.min.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 23 Jan 2018 17:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2572\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8415,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-17T04:09:44.854133Z","times_seen":14457,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/js/10-jquery.circleType.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/js/10-jquery.circleType.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 22 Feb 2022 23:22:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1166\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4880,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"166a48c628871b0d9c4fa4b0b8f89148","sha1":"b49d5cdda9a57c44a5c636c62d110926725aed37","sha256":"ee2cbf12efc08718618ea22d9f75fae7b23c2e6bc2a078af6034bfe8734ced6e","sha512":"3867adb5dac773168567755adad1ebb0e857ae037153d6b9ba72248686cb1a8ea3a97705ec2112dbb5fa7da498dba56740b57c60743e8218dfbf0904594bc0e1","ssdeep":"96:zOmRTUjwGlj7Sc6YKPDOxhA0g5gfVEAk9SkniseCFU5O9dXLBNq5wp:zOmRojwDnYCKjAR+f29q5yl","tlshash":"a8a19998aa0921290437b77acfde6a48f736532b01169163bebc11d62fb195803d5fec","first_seen":"2023-08-11T03:08:43Z","last_seen":"2026-08-17T09:16:50.588878Z","times_seen":115,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpresslinkshipment.online/assets/vendor/odometer/odometer.min.js","fqdn":"xpresslinkshipment.online","domain":"xpresslinkshipment.online","tld":"online"},"ip":{"addr":"192.142.54.88","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpresslinkshipment.online/","date":"2026-03-11T06:13:27.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xpresslinkshipment.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 14:19:49 GMT","end":"Sat, 06 Jun 2026 14:19:48 GMT"},"fingerprint":{"sha1":"A8:1A:F1:37:97:84:2C:F0:7D:E5:88:AF:9B:00:FB:A8:61:62:3D:E6","sha256":"9A:6A:B5:5F:8A:D3:43:7C:D6:36:0B:BD:E6:B7:90:D2:CD:16:72:A9:88:BB:2C:E1:51:45:EB:36:C5:E0:7F:91"}}},"request":{"raw":"GET /assets/vendor/odometer/odometer.min.js HTTP/1.1\r\nHost: xpresslinkshipment.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpresslinkshipment.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 11 Jan 2022 10:35:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3374\r\ndate: Wed, 11 Mar 2026 06:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9897,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9874), with CRLF line terminators","md5":"07013b14ea1c5e30722ded722a1dfff2","sha1":"e6b09f4356f4e0485c6c7f73e629a70a1a4a549d","sha256":"b915a94b58cd8566dbe14df96e8fac1ae0466e35660f887109c5d53e5b996960","sha512":"d765c201184b347d618c3fb63144fc68a7318af5f8388ca01d1941287b83c93344d87d10bf1b2824eaccfe7ed8dae18d52ddba4e9adc1cb38109144e33a3f54f","ssdeep":"192:CABzlvk8QecC6AOcu2flRdI5s/GMjXuu/T:FBhvk8QecCa07z+Wd/T","tlshash":"ff129580be02a725875371e151bf0709b7bb99ae6404401df67c9cdabe25c38e12bf74","first_seen":"2023-03-07T21:40:14Z","last_seen":"2026-08-17T12:44:31.048687Z","times_seen":1620,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"xpresslinkshipment.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}