{"report_id":"95c37059-b551-4429-81ef-bbdbc8fcfe0a","version":6,"status":"done","tags":[],"date":"2026-05-14T04:28:24Z","url":{"schema":"https","addr":"www.av7yd3eu.com/","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"172.67.213.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"title":"av7yd3eu.com/download","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.av7yd3eu.com/","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"172.67.213.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-18T04:28:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.av7yd3eu.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":72,"request_count":18,"received_data":42993814,"sent_data":8196,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud CDN","description":"Alibaba Cloud CDN is a global network of servers designed to deliver high-performance, low-latency content to users around the world. It is a cloud-based service provided by Alibaba Cloud, a subsidiary of the Alibaba Group, that enables businesses to accelerate the delivery of their web content, including images, videos, and static files, to end-users.","website":"https://www.alibabacloud.com/product/content-delivery-network","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["CDN"]}]},{"fqdn":"o.alicdn.com","ip":{"addr":"43.109.53.2","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2008-06-25","domain_rank":89234,"first_seen":"2021-04-29T02:52:24Z","last_seen":"2026-05-14T04:09:24.302594Z","alert_count":0,"request_count":2,"received_data":450507,"sent_data":898,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"upload-us.f-1-g-h.com","ip":{"addr":"104.18.12.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-27","domain_rank":2825239,"first_seen":"2025-06-10T03:10:45.392134Z","last_seen":"2026-05-13T14:42:36.184939Z","alert_count":0,"request_count":4,"received_data":107922,"sent_data":1860,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-05-13T19:34:05.395595Z","alert_count":0,"request_count":2,"received_data":233348,"sent_data":854,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":1,"received_data":43971,"sent_data":551,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":18,"received_data":186594,"sent_data":8790,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-05-10T23:28:03.250326Z","alert_count":0,"request_count":4,"received_data":258622,"sent_data":1766,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/vendor_modules-Digde8N2.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cd0478566ad540ff569048c18ec8baba","sha1":"c6cca57218040783cfc1facd1bb641e80d893a07","sha256":"f58e0958e1fa88fbb781e0e90d044e60550a3f157388f3ed505d6eb749c460a1","sha512":"a36495d35303a6222d4f4d60b13090c8164e87db34be6d45e92d9a9514bf42516b5322b3c61fabb10670d0000d0844625226ef4acc036af5612b38c3d53066a9","ssdeep":"","tlshash":"5f110e503515bead02e81de6a04b2948f6380428146ae1a097ecd9b895f508b656ff3b","size":1000,"data":"","first_seen":"2026-05-10T16:37:34.35094Z","last_seen":"2026-05-14T04:28:41.712511Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/versionControl/combined.js?v=v223","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6553a65108617ab0f1436b9833bbe45","sha1":"12575f47719b7204e859e8b949a85c138c5e9820","sha256":"e16f8e8822b8be6b8a671b05ebfc2a1b6036b450a89f25519c54c1c0f303f34e","sha512":"870ed4f6ce8c48543e28048d4a58c818280dc8c4c7c0378c8679e661fef813f0b6608583ea4b186b09c063ab1b8f7200179fae59214f78106ea93995fd8595d6","ssdeep":"192:lJtXatX8sEXZ7D8WQQtir56Y9tozbPlnNmfdIe9MsQxW87GnArHcfE0qp97AETQs:BS87DFi7tE4fdI8MT5AcPXUETNh7KW","tlshash":"1372e91d36b420b542a37219abefd70d3131422b2845dc157b8d83a80fa5ead46b7edb","size":16887,"data":"","first_seen":"2026-01-21T19:51:56.02324Z","last_seen":"2026-07-04T16:20:31.860539Z","times_seen":1343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6741c361b163822e50a5e488a58f11e","sha1":"4ba4fabe112e82b9f5715c015cb3d6acd6bb9eef","sha256":"70d48b90639510cf0005372e4eee3439bbbbcd43dbe1019c98525a5bf2294b00","sha512":"cd6e8378ee8925eddeb8a78f976f5d2fcfe8ad863af2b5249cc2d0137689fe2cea0a33d3875b2388faf3d204105adfb0b3c4efb17430955c841c263623843907","ssdeep":"768:NESIX2OA3OGOdQsGosXsAvJDRDl28hixCvZA5L8ADvWInbdAI6D9P9q:ySiIbOlw5/S","tlshash":"59c288db46cf54082bca3212c685a8e50b6a664f1cc5b745b38b6e33ab85fc4374b17d","size":26011,"data":"","first_seen":"2026-05-14T04:28:41.713206Z","last_seen":"2026-05-14T04:28:41.713206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c66c3da450ee0cae17eaedd2df3145fb","sha1":"75bd0d946b808978cfc21f7318af9868a1609363","sha256":"320ff32e2eb2a46c3ac0f2550f92a2cb74018d3328bb9ead9191f6adf66bbe87","sha512":"17514222192e03a653ec98f33fc1ad72a0f0b0ba5babcfb22bbb9c3f5d9f89df2ca48474bd0cfd4d61432c6542b514d2637b0c5a1f0418853f164d5e9f7b111f","ssdeep":"768:NESIX2OA3OGOdQsGosXsAvJDRDl28hixCvZA5L8ADvWInbdAIc9P9q:ySiIbOlw5/4","tlshash":"8ec288db46cf54082bca3212c585a8e50b6a664f1cc5b745b38b6e33ab85fc4374b17d","size":26010,"data":"","first_seen":"2026-05-14T04:28:41.714393Z","last_seen":"2026-05-14T04:28:41.714393Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-09T08:47:14.380517Z","times_seen":740539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/versionControl/combined.js?v=v223","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6553a65108617ab0f1436b9833bbe45","sha1":"12575f47719b7204e859e8b949a85c138c5e9820","sha256":"e16f8e8822b8be6b8a671b05ebfc2a1b6036b450a89f25519c54c1c0f303f34e","sha512":"870ed4f6ce8c48543e28048d4a58c818280dc8c4c7c0378c8679e661fef813f0b6608583ea4b186b09c063ab1b8f7200179fae59214f78106ea93995fd8595d6","ssdeep":"192:lJtXatX8sEXZ7D8WQQtir56Y9tozbPlnNmfdIe9MsQxW87GnArHcfE0qp97AETQs:BS87DFi7tE4fdI8MT5AcPXUETNh7KW","tlshash":"1372e91d36b420b542a37219abefd70d3131422b2845dc157b8d83a80fa5ead46b7edb","size":16887,"data":"","first_seen":"2026-01-21T19:51:56.02324Z","last_seen":"2026-07-04T16:20:31.860539Z","times_seen":1343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35b1d82e5ee89cc581e98f4618de7a15","sha1":"c06bd8849516b62c229a39c1d928e4fc5fa70d02","sha256":"d3adb810c5abb24f5fb5f0397d7206658aca0b3177448f7484619ddc3473526e","sha512":"a5c4c1c07aa5993f9b2758e5e91e024b2feb19aaa197678151b71c120bc18e5950005c5f9706cb777bb925385a5b8f83a304c17aa1976cae3ba5c955b5738244","ssdeep":"1536:T/a82omubKJDEzxv/0iKNLVensyQTXeegsiHVj:Zup4yVenZ+eU+j","tlshash":"92534d987156787316d980f0a17b670373267d3aa94cc890e817d8653a7cdca9233fbe","size":64227,"data":"","first_seen":"2026-05-12T09:01:59.601109Z","last_seen":"2026-05-18T09:32:57.236378Z","times_seen":8564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/versionControl/webPushSdk.produce.min.2.1.6.js?v=v223","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"252eff85e75f98cab2ed0affd0f24ed1","sha1":"e1a739fa70c57e9ef90f33fc4ab52fcf387ad13f","sha256":"1ee4947bae28f87f22e0f400ac7ae540d0162c4102402eaafe7d3aa6a3420c7e","sha512":"55efba3ebdc87dfeb1933208acd1f727b126433e26a1b747eff534620804979acaf50139674e7d5ebab2baa3bc962b9495224f15f461a01e56b76ad269060d12","ssdeep":"1536:7ROuwOy/RQEO6odontXPi2kJP33+NR5qlr:dGBSEOLdyXPeF3+N+Z","tlshash":"92534d9ef589753503ebb054c53f0402b6332c15a64282a8f6acd5d6fc795cea063fba","size":61393,"data":"","first_seen":"2024-07-30T04:40:36Z","last_seen":"2026-07-04T16:20:31.857178Z","times_seen":3504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8a44c43cf9498a92725092f8f97f042","sha1":"c9d75fef106c54d6c6b9fe4013848ffc8b39ade3","sha256":"75e90aa9e81941c5c5fefb51a4e6557841730a270b3bd7b4d3c2bbbfd566b4b5","sha512":"60e7ceda33f5ba0d259aeb3c374119bafaf8e23d49e7ea3bf76d88361fdbf59090a64782032279a3a1f87dbe6c03799a6e081b3b70a8964c9a9b66112f78c94e","ssdeep":"","tlshash":"bc31be8f94ba69260763257c1bc7525133b7a403621cda063b6e93506fa107e4ba3aca","size":1514,"data":"","first_seen":"2025-09-16T05:17:26.584889Z","last_seen":"2026-08-08T16:59:07.199299Z","times_seen":3779,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35b1d82e5ee89cc581e98f4618de7a15","sha1":"c06bd8849516b62c229a39c1d928e4fc5fa70d02","sha256":"d3adb810c5abb24f5fb5f0397d7206658aca0b3177448f7484619ddc3473526e","sha512":"a5c4c1c07aa5993f9b2758e5e91e024b2feb19aaa197678151b71c120bc18e5950005c5f9706cb777bb925385a5b8f83a304c17aa1976cae3ba5c955b5738244","ssdeep":"1536:T/a82omubKJDEzxv/0iKNLVensyQTXeegsiHVj:Zup4yVenZ+eU+j","tlshash":"92534d987156787316d980f0a17b670373267d3aa94cc890e817d8653a7cdca9233fbe","size":64227,"data":"","first_seen":"2026-05-12T09:01:59.601109Z","last_seen":"2026-05-18T09:32:57.236378Z","times_seen":8564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-09T08:15:16.965593Z","times_seen":41248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/vendor_modules-Digde8N2.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"86544d19a4ab55684bf6875e8573c59e","sha1":"768c68b2563017be810eb61acb6885137d257b16","sha256":"a0a4f135f97d6190e08d3020a1af12f160c98b058f9e18ca589d7cae4f564a67","sha512":"2fb648859866e7b80d7798a1dbad00f31f151f97fee2d933dab9f7b7277e260b91b87116b658aaac28f87b6b10d48e9ee83db0daa6ab8b940825ca1ed93d7225","ssdeep":"49152:HSdOSNjEUCF2FFBYmlrkTcS1XuOm+93KTwcavodXGRFLpceeYc3Dyim7eWvPC22N:HPWTwDpcj+iR","tlshash":"e8c54cd5b25c733543f756a440af7245b2387882f40984ecb5aad8cb1b7edc5227ab38","size":2563907,"data":"","first_seen":"2026-05-08T00:52:51.790035Z","last_seen":"2026-05-14T07:40:33.110589Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/locale-pt_BR-BmfMtpuX.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08addc2913384c41dc7221462d62bd61","sha1":"660b4f3d7ab004243cd2af8c58325c1dab9c4650","sha256":"ed1f03dbced00922311b825d4d7c19994d1d94462bf52e96156d3df5914a0be5","sha512":"3c8984fde9a3b28ec61d42f5bbc8ae0bc16b40cc39ff172f9d2db3ea3c6d9edd796f6ba75fcda3af3c1de4d58a58c2617f901e1defe008d7ab932bcb10e95144","ssdeep":"1536:J8dw39hEoI1jIRbADxxlhTaiW3zze4thOVF4fGdeFt5ms48pvDmC6LD:CM9algiZaiWYbMYsQD","tlshash":"5983093e2ecd023596a353417f4fbe0366c87187e8c5c86b8aeb476961d9ec0e45e325","size":85188,"data":"","first_seen":"2026-05-05T10:57:25.843054Z","last_seen":"2026-05-17T14:27:51.916917Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js?58","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-08-09T00:56:52.467342Z","times_seen":2799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/locale-pt_BR-BmfMtpuX.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08addc2913384c41dc7221462d62bd61","sha1":"660b4f3d7ab004243cd2af8c58325c1dab9c4650","sha256":"ed1f03dbced00922311b825d4d7c19994d1d94462bf52e96156d3df5914a0be5","sha512":"3c8984fde9a3b28ec61d42f5bbc8ae0bc16b40cc39ff172f9d2db3ea3c6d9edd796f6ba75fcda3af3c1de4d58a58c2617f901e1defe008d7ab932bcb10e95144","ssdeep":"1536:J8dw39hEoI1jIRbADxxlhTaiW3zze4thOVF4fGdeFt5ms48pvDmC6LD:CM9algiZaiWYbMYsQD","tlshash":"5983093e2ecd023596a353417f4fbe0366c87187e8c5c86b8aeb476961d9ec0e45e325","size":85188,"data":"","first_seen":"2026-05-05T10:57:25.843054Z","last_seen":"2026-05-17T14:27:51.916917Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/versionControl/webPushSdk.produce.min.2.1.6.js?v=v223","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"252eff85e75f98cab2ed0affd0f24ed1","sha1":"e1a739fa70c57e9ef90f33fc4ab52fcf387ad13f","sha256":"1ee4947bae28f87f22e0f400ac7ae540d0162c4102402eaafe7d3aa6a3420c7e","sha512":"55efba3ebdc87dfeb1933208acd1f727b126433e26a1b747eff534620804979acaf50139674e7d5ebab2baa3bc962b9495224f15f461a01e56b76ad269060d12","ssdeep":"1536:7ROuwOy/RQEO6odontXPi2kJP33+NR5qlr:dGBSEOLdyXPeF3+N+Z","tlshash":"92534d9ef589753503ebb054c53f0402b6332c15a64282a8f6acd5d6fc795cea063fba","size":61393,"data":"","first_seen":"2024-07-30T04:40:36Z","last_seen":"2026-07-04T16:20:31.857178Z","times_seen":3504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8a44c43cf9498a92725092f8f97f042","sha1":"c9d75fef106c54d6c6b9fe4013848ffc8b39ade3","sha256":"75e90aa9e81941c5c5fefb51a4e6557841730a270b3bd7b4d3c2bbbfd566b4b5","sha512":"60e7ceda33f5ba0d259aeb3c374119bafaf8e23d49e7ea3bf76d88361fdbf59090a64782032279a3a1f87dbe6c03799a6e081b3b70a8964c9a9b66112f78c94e","ssdeep":"","tlshash":"bc31be8f94ba69260763257c1bc7525133b7a403621cda063b6e93506fa107e4ba3aca","size":1514,"data":"","first_seen":"2025-09-16T05:17:26.584889Z","last_seen":"2026-08-08T16:59:07.199299Z","times_seen":3779,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-09T08:53:07.699339Z","times_seen":42727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/launch","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-09T08:15:16.965593Z","times_seen":41248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js?58","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-08-09T00:56:52.467342Z","times_seen":2799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-09T08:53:07.699339Z","times_seen":42727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/index-CbJgn0zJ.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"196243eafbc485e6df573ac9054c27ef","sha1":"a59fbce6e514b7f9bf5e038155cb569f4956c09c","sha256":"3e5c461f4940c4b666d6662639ef79b0c8f02d780d52a220f4ffc2a9db522941","sha512":"a4c30b32e4b89865bff29ab0090dbeba50ec12854ee3f3e1737e35b61ff8f19e5309f24ba112bdf0a8df510484c75ba42f3cce07936bd618755d99493dc449fc","ssdeep":"49152:cxJy/C74y+cGKpnIzn6+LjvqNXBN4+pXQ/UE1bN4QkHSDvKi3HdfdTcuGDeKARHY:6yT5DGtMTPry4cGt3Wsm","tlshash":"d4e56b04b02dd47aa6b72498e46e6401714d1fdec204d8a5f6ff8e25374bdb4632ab3e","size":3096952,"data":"","first_seen":"2026-05-08T00:52:51.793855Z","last_seen":"2026-05-14T07:40:33.11304Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o.alicdn.com/captcha-frontend/aliyunCaptcha/AliyunCaptcha.js","fqdn":"o.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"43.109.53.2","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b837847c9d7e8b6547d892bb54bc4a2a","sha1":"cfa19575397c1b3bf860e8c5aefc708be7a60ce1","sha256":"af451826b15f27d89c5f1ecab63a6afdb773088b3311bcca38fee16b4ba219c8","sha512":"60fa12ae9494fb75dea69235d420e686100e19723b0114e1c18cb2f5d7e1711725f425b54da8a13857285b26248167910492af194c76d3cad7a9c3cb43ea49e3","ssdeep":"1536:3Gf29cUZy1JOjKMhSf/B8MU5+qaWRo8Z0m9o9SuOCZi7Fjxpk26vg5AIunTKx8Z+:3NknY+qaWRo8BZX7Fbkvg5AITa7q","tlshash":"7524f98db1c1b0d90be364e4012f640bf0bb6a64745e99d1fbb1d4c5ac79a9ea033e5c","size":224118,"data":"","first_seen":"2026-04-15T09:49:29.999907Z","last_seen":"2026-06-06T23:28:28.068198Z","times_seen":1027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/index-CbJgn0zJ.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"550d67dd9187bb58598bfa1f5aa62b15","sha1":"762489a8d0ab92e18badae6b13b6ef5afda9cca5","sha256":"12468db189061d7fe0270f69445e53a79bb02303a20332fd7b8956ffa7f4eff2","sha512":"518c12472f045362ff80d810921e12dd9f173e523c1b81cc712e96b347a675cfde149f72b11900d5f45492c510436cb48033991d072970dfe4bb022c870d5001","ssdeep":"","tlshash":"dd11909c2811e7b78868686cbf15c050672157d251e6d6e4e10f1e7127e118dd1ceca6","size":1000,"data":"","first_seen":"2026-05-10T16:37:34.353613Z","last_seen":"2026-05-14T04:28:41.720536Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o.alicdn.com/captcha-frontend/aliyunCaptcha/AliyunCaptcha.js","fqdn":"o.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"43.109.53.2","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b837847c9d7e8b6547d892bb54bc4a2a","sha1":"cfa19575397c1b3bf860e8c5aefc708be7a60ce1","sha256":"af451826b15f27d89c5f1ecab63a6afdb773088b3311bcca38fee16b4ba219c8","sha512":"60fa12ae9494fb75dea69235d420e686100e19723b0114e1c18cb2f5d7e1711725f425b54da8a13857285b26248167910492af194c76d3cad7a9c3cb43ea49e3","ssdeep":"1536:3Gf29cUZy1JOjKMhSf/B8MU5+qaWRo8Z0m9o9SuOCZi7Fjxpk26vg5AIunTKx8Z+:3NknY+qaWRo8BZX7Fbkvg5AITa7q","tlshash":"7524f98db1c1b0d90be364e4012f640bf0bb6a64745e99d1fbb1d4c5ac79a9ea033e5c","size":224118,"data":"","first_seen":"2026-04-15T09:49:29.999907Z","last_seen":"2026-06-06T23:28:28.068198Z","times_seen":1027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-09T08:47:14.380517Z","times_seen":740539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-09T08:14:55.638931Z","times_seen":91514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:04.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:04 GMT\r\ndate: Thu, 14 May 2026 04:28:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32402,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f56f25fe74b525652cef3b25ad44adad","sha1":"853baf42fe3870c440e75943df69e1a84ec86bc4","sha256":"66b0fc3a90229a3f56d0df87208c6d7dcca4e5bca850029a64528d06d57b5de0","sha512":"cb5c524b2fc5702e5e4bc81b0a09374775b88b19c431cacd5c7a6f850d8f1506966cf2c349726690d132be9afce67aacd4ddec432cbd8c0116c9ab7fbdec9188","ssdeep":"384:vtfcHjg8ciIg3is3X3D35CsAfXosWBZTsmNUUsKVdqso3/5srQICsAfX4sGRcnZD:83HDaZzcC","tlshash":"f9e2b8b1042bd500ea871dc627cf7e369e8eb1667490c579affd1888eceac22532475d","first_seen":"2025-09-14T10:40:02.408446Z","last_seen":"2026-07-19T03:48:46.058734Z","times_seen":3666,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27925,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b3aa47c04f634f874e9fe24da03e44c2","sha1":"d6233fb889991ce8ab543cf6a3dedfa597e8c8bd","sha256":"1c87a812c578a613533eee262e5564ff39d369f62a5d9d8f0cda4daf92755241","sha512":"930654c03131317f868a8b908537b51f208c654d835caa93d129f0371820222f21a88cca41646271d967b881c7b44a65f8b0b699555d51b43cb8e2f93b831b18","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVKj:Xxyll3","tlshash":"2ec210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T05:06:38.045053Z","last_seen":"2026-08-09T08:41:13.671389Z","times_seen":3879,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons+Extended","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /icon?family=Material+Icons+Extended HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":612,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7018b90a0b4af059254573bfaad0b3c0","sha1":"21005aad8ea9cc2218265105d4bca7bede012990","sha256":"939d23fa38a234e289a02eba362cb98351b28de6868212a1f0450bcdc4cb1e39","sha512":"de7cf24c3c9d55aa7955662c930cc8c20abe2d4e7e036af63eca0115bcd9ab943ff228815088d1d228087ac0f525b0603269ed6ce4fa227ec4cf6cda5f597b90","ssdeep":"","tlshash":"90f04c556e57698665a14c57334f3f124d1d401ba90accfd8bc10d0c5cfe9bb538ab0e","first_seen":"2025-09-18T01:33:29.712118Z","last_seen":"2026-08-08T19:37:27.859117Z","times_seen":6565,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-08-09T07:39:46.081518Z","times_seen":60791,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Smooch+Sans:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Smooch+Sans:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1281,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6bc9cecd1b7fa846febdcf65dc5df15e","sha1":"d95bb74efb0feedc043beb2b8fcca2242a0b257c","sha256":"11df099f5c41493ca5be2126517978eb204707e7222a9b6f2ca5f2a9a9c4be00","sha512":"0c88fff713c785573abe70dfdbac1574c48c9fdf29b456a3f9eeef9664da5c804c9ed0c0d41579298ce5fdcba6e2417892630609423cc5fbc9fbc609e3fb6a58","ssdeep":"","tlshash":"dc210f93046b9104e6870ec622ce7d35ae8fe1213041e579fffd1889adbad296371b0c","first_seen":"2025-09-14T10:40:02.437373Z","last_seen":"2026-07-12T06:12:08.269515Z","times_seen":3381,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Google+Sans:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Google+Sans:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21906,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e5fb4b90572c7a887b03c11dbbbc8926","sha1":"0d878190795b61bd8ab29b2a38a04582b5c4440a","sha256":"81e589c0597887264a5c4a78f13cfd2ba16b1f7195ddc60fd62d4a072589dcba","sha512":"c1253542a9cb558886ffefd3ad0ef2a0664a2a578a4168443eb7ac8b080b5a11e3323a4d7d995256c18ab4d495101eebe9304f7a7a982a25800cb54f8d152126","ssdeep":"192:BHdNwwF4SQgNy8G8w55Oe5IXkbqGIwVhVP4lYloPcgeNXwm/B3gOh8GDXKKNdKPG:fhlOqYopBZHqYD8","tlshash":"91a2ffa11047a028be67bcdb33ce2d146e5e11791501d63e9bfe1ac5dcc786603b1bae","first_seen":"2025-12-10T22:39:20.596071Z","last_seen":"2026-05-20T18:13:26.055302Z","times_seen":1355,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:03.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 19:45:24 GMT","end":"Fri, 17 Jul 2026 20:45:20 GMT"},"fingerprint":{"sha1":"55:E2:30:E2:B9:65:08:8A:5E:4A:A1:AC:70:12:E1:69:10:5B:88:0F","sha256":"34:8B:B6:28:AC:C0:28:44:34:51:7E:85:03:E3:50:1E:04:E7:48:B4:99:11:CB:23:AF:24:CF:9F:63:C2:C6:1E"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 14 May 2026 04:28:03 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/b/883a1f27d85f/api.js\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9fb7276c2a0a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64227,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/index-C5MGe0Vx.css","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:03.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /assets/index-C5MGe0Vx.css HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/download\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9fb7276c2d52568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 3\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 04:28:00 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 8ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/index-C5MGe0Vx.css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SLg8A8zJwvjHJoKiewcDDORNyT9VKVkEdDA1dlnnwbUDADHHZV5XhdqiOXYIydmAuq9%2FCo%2BhyGJoCCqVCINM9Lr%2BKAoDo0MDXHo3OlFbPf6DCwwdLYoP1RM6CO59wh0Q%2BMRy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e2964f3571527b1fd621aa1f94d13928\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10030904,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a87334976130a66379096691d25bf9f6","sha1":"9dccb7199c4ffa85c1c97f6327c3ab41874ca289","sha256":"f595344428b35d28f562c6d8f8560b9d8040af5681dbd59ef57b327993f2e7db","sha512":"7c706f6b17b819fcd2076bc3a20b3dd0e639431d6095e5e03075c3c545cb7b1f61db13f2563c535577902a18a54d9ba9a7f2ce6e2916a82d8b1b32203d6f6c1a","ssdeep":"3072:+xbT2ZBdN1tG6LFiSUOkgMwL2s0QXGuwo8013roUUZo1eDmjOD0YwEIHeyRmTQZ8:oHMwLT5JRuykk0+","tlshash":"39254368f25ee67e7837d8be1a6cd28c1015b942c9024badfa53f55088c3bf73265349","first_seen":"2026-05-05T10:57:25.838313Z","last_seen":"2026-05-17T14:27:51.911869Z","times_seen":105,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Archivo+Black\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Archivo+Black\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":876,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e3007649be8351211d8ef1ee97c5f5dd","sha1":"e07bd87458426358f8de2e93e5db225e3c83f95b","sha256":"1dd05599139cbe08c0d38d033560be7dc858b5563485992a1e679492101bad92","sha512":"ff102ba72ea7a2b9ae2bebf0706b1c74f567fc8b1c78839d86107d7dbd2de88279bac24f3a0b9fae1fde54d9dc6406f9b87b05de931f9fe75d334cc4a877c30a","ssdeep":"","tlshash":"8f11cc82086b9400a7c30cc126de7d36af1f228068469974affe14d8bc5ac56431270d","first_seen":"2025-09-14T05:46:36.210113Z","last_seen":"2026-08-08T13:18:37.014097Z","times_seen":2876,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o.alicdn.com/captcha-frontend/aliyunCaptcha/AliyunCaptcha.js","fqdn":"o.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"43.109.53.2","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:00.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /captcha-frontend/aliyunCaptcha/AliyunCaptcha.js HTTP/1.1\r\nHost: o.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding\r\ndate: Wed, 13 May 2026 09:37:59 GMT\r\nx-oss-request-id: 6A04467705903074CC381144\r\nx-oss-cdn-auth: success\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=604800,s-maxage=86400\r\ncontent-md5: uDeEfJ1+i2VH2JK7VLxKKg==\r\nx-oss-server-time: 1\r\nvia: ens-cache16.l2de4[188,176,304-0,C], ens-cache31.l2de4[179,0], ens-cache4.ru10[0,0,200-0,H], ens-cache4.ru10[1,0], ens-cache5.ru10[8,0]\r\netag: W/\"B837847C9D7E8B6547D892BB54BC4A2A\"\r\nlast-modified: Wed, 15 Apr 2026 09:37:50 GMT\r\nx-oss-hash-crc64ecma: 11321288618651780509\r\nage: 67802\r\nali-swift-global-savetime: 1778665079\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Wed, 13 May 2026 09:37:59 GMT\r\nx-swift-cachetime: 86400\r\nx-assets-grey: false\r\nx-assets-path: /captcha-frontend/aliyunCaptcha/AliyunCaptcha.js\r\naccess-control-allow-origin: *\r\nx-er-version: 0.0.6\r\nx-assets-pt: pt0\r\ntiming-allow-origin: *\r\neagleid: a3b5009917787328810286636e\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":224118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b837847c9d7e8b6547d892bb54bc4a2a","sha1":"cfa19575397c1b3bf860e8c5aefc708be7a60ce1","sha256":"af451826b15f27d89c5f1ecab63a6afdb773088b3311bcca38fee16b4ba219c8","sha512":"60fa12ae9494fb75dea69235d420e686100e19723b0114e1c18cb2f5d7e1711725f425b54da8a13857285b26248167910492af194c76d3cad7a9c3cb43ea49e3","ssdeep":"1536:3Gf29cUZy1JOjKMhSf/B8MU5+qaWRo8Z0m9o9SuOCZi7Fjxpk26vg5AIunTKx8Z+:3NknY+qaWRo8BZX7Fbkvg5AITa7q","tlshash":"7524f98db1c1b0d90be364e4012f640bf0bb6a64745e99d1fbb1d4c5ac79a9ea033e5c","first_seen":"2026-04-15T09:49:29.999907Z","last_seen":"2026-06-06T23:28:28.068198Z","times_seen":1027,"resource_available":true,"data":null}},"time_used":1327,"timings":{"blocked":626,"dns":437,"connect":58,"send":0,"wait":66,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/index-CbJgn0zJ.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:00.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /assets/index-CbJgn0zJ.js HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fb727566d9c568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 4556\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 03:12:03 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: STALE\r\nx-data-time: 6ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/index-CbJgn0zJ.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPv%2FtZn9czqTwwWISXghpJ9RnBjd%2B0HblXWckpC3KjKXyS0YA088v4aB743Ok4n1JQn8Eq7Nu7NGJLuoOSUWm3IiB9Mhm%2BUWqAhyx%2Fq25QZUqWSfMzo2obV53Q9PqJc4EDyM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"196243eafbc485e6df573ac9054c27ef\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3096952,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63694)","md5":"8f64caed9774bade8b5cf652cb845f69","sha1":"8c2a3a9d9fc538f524a4d15b7732034088569dbc","sha256":"f617dc24b2e85229c2d44ec73fa3b96361b715b039f8a360cc5608d0a959597e","sha512":"5fe3ba7a3fed7bef2a903da9354a9b0cb1699f2486a41141bb1ce4ab617eb4b88b9647595f1d259d8690edda8b7cc1b826d1b88a5550b4eb8cb8f26acf87bc7c","ssdeep":"24576:cxJy/nC74y+Lw2oYsclpnIzn6UX7vpsG9jvqNXBN4+pXQ/UE1bN+NQkHSDvKFlMC:cxJy/C74y+cWlpnIzn6gLjvqNXBN4+pJ","tlshash":"b6352a24929823329cf234e8f8f63be2214d0e08d745d9bff27654953187d94a53ab7e","first_seen":"2026-05-08T00:52:51.765798Z","last_seen":"2026-05-14T04:28:41.69422Z","times_seen":5,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/locale-pt_BR-BmfMtpuX.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:06.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /assets/locale-pt_BR-BmfMtpuX.js HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/assets/index-CbJgn0zJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fb72779a8b7568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 2\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 04:28:03 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 5ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/locale-pt_BR-BmfMtpuX.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2BtUDE%2BiUK2XgNWYT1InQ0%2FX9FieavdljmdWzXogP71DroztUZkIPFqFbPwnMTLzO2HG3ACVEaTA%2BQnuAgqchZKe0DVZ%2BiOxUKbBQb44W3PyOZNi0jO14dUUjw6frb0NXEAa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a4391863add192265ff199c7aeb951c2\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85202,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (64061), with no line terminators","md5":"08addc2913384c41dc7221462d62bd61","sha1":"660b4f3d7ab004243cd2af8c58325c1dab9c4650","sha256":"ed1f03dbced00922311b825d4d7c19994d1d94462bf52e96156d3df5914a0be5","sha512":"3c8984fde9a3b28ec61d42f5bbc8ae0bc16b40cc39ff172f9d2db3ea3c6d9edd796f6ba75fcda3af3c1de4d58a58c2617f901e1defe008d7ab932bcb10e95144","ssdeep":"1536:J8dw39hEoI1jIRbADxxlhTaiW3zze4thOVF4fGdeFt5ms48pvDmC6LD:CM9algiZaiWYbMYsQD","tlshash":"5983093e2ecd023596a353417f4fbe0366c87187e8c5c86b8aeb476961d9ec0e45e325","first_seen":"2026-05-05T10:57:25.843054Z","last_seen":"2026-05-17T14:27:51.916917Z","times_seen":95,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:00.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 19:45:24 GMT","end":"Fri, 17 Jul 2026 20:45:20 GMT"},"fingerprint":{"sha1":"55:E2:30:E2:B9:65:08:8A:5E:4A:A1:AC:70:12:E1:69:10:5B:88:0F","sha256":"34:8B:B6:28:AC:C0:28:44:34:51:7E:85:03:E3:50:1E:04:E7:48:B4:99:11:CB:23:AF:24:CF:9F:63:C2:C6:1E"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 14 May 2026 04:28:00 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/b/883a1f27d85f/api.js\r\nserver: cloudflare\r\ncf-ray: 9fb727568ddb5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64227,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":15,"dns":1,"connect":4,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/883a1f27d85f/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:00.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 19:45:24 GMT","end":"Fri, 17 Jul 2026 20:45:20 GMT"},"fingerprint":{"sha1":"55:E2:30:E2:B9:65:08:8A:5E:4A:A1:AC:70:12:E1:69:10:5B:88:0F","sha256":"34:8B:B6:28:AC:C0:28:44:34:51:7E:85:03:E3:50:1E:04:E7:48:B4:99:11:CB:23:AF:24:CF:9F:63:C2:C6:1E"}}},"request":{"raw":"GET /turnstile/v0/b/883a1f27d85f/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.av7yd3eu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 04:28:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 11 May 2026 16:45:17 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fb72756ade85690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64227,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64226)","md5":"35b1d82e5ee89cc581e98f4618de7a15","sha1":"c06bd8849516b62c229a39c1d928e4fc5fa70d02","sha256":"d3adb810c5abb24f5fb5f0397d7206658aca0b3177448f7484619ddc3473526e","sha512":"a5c4c1c07aa5993f9b2758e5e91e024b2feb19aaa197678151b71c120bc18e5950005c5f9706cb777bb925385a5b8f83a304c17aa1976cae3ba5c955b5738244","ssdeep":"1536:T/a82omubKJDEzxv/0iKNLVensyQTXeegsiHVj:Zup4yVenZ+eU+j","tlshash":"92534d987156787316d980f0a17b670373267d3aa94cc890e817d8653a7cdca9233fbe","first_seen":"2026-05-12T09:01:59.601109Z","last_seen":"2026-05-18T09:32:57.236378Z","times_seen":8564,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload-us.f-1-g-h.com/s4/app-icon/1102210/512512512.png","fqdn":"upload-us.f-1-g-h.com","domain":"f-1-g-h.com","tld":"com"},"ip":{"addr":"104.18.12.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:01.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a5b48714.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 14:37:21 GMT","end":"Tue, 23 Jun 2026 15:37:14 GMT"},"fingerprint":{"sha1":"E6:01:1A:53:3A:6B:2B:99:74:E3:5A:80:07:6D:25:C7:A0:4B:4A:51","sha256":"90:06:1E:F8:FB:FA:EB:57:BF:CB:6C:05:1C:CA:3A:2E:3D:D4:FA:F7:BA:A5:CE:21:95:92:C5:0D:19:23:FE:0E"}}},"request":{"raw":"GET /s4/app-icon/1102210/512512512.png HTTP/1.1\r\nHost: upload-us.f-1-g-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 04:28:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 26364\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\netag: \"486563a79b71ed34da992cae220d6025\"\r\nlast-modified: Sun, 26 Oct 2025 15:46:30 GMT\r\naccess-control-max-age: 86400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 325\r\nexpires: Thu, 14 May 2026 04:38:02 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\ncf-ray: 9fb727601e30b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"486563a79b71ed34da992cae220d6025","sha1":"0ae780fa57b523efa9e53bafcbde51a27ea27f24","sha256":"1fdefa561814f464f7486d036872c74104c4858ebe8ce615c165dfd8a4d29ac9","sha512":"bd644071a89baf43f42785c36346e6948b75b784d98a25cfe8cec8b3bdbab197de6924b440de4c3693dd694f876bb8a31b58e462eea29a0ab6f98615a7d00cc5","ssdeep":"768:iqoirao0PcFxPCBmPpeRbRDei+/7xkZ/pPPs:ibyKcF5CBYWRDei+/dk1hk","tlshash":"a2c2f2544180e09df8202870f4b81417041f1ff7a4ae70da096fa5fe7a1f95ee5a63ce","first_seen":"2025-11-24T07:47:33.633748Z","last_seen":"2026-05-14T04:28:41.696325Z","times_seen":4,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":33,"connect":3,"send":0,"wait":118,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,500;0,700;0,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:02.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,500;0,700;0,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:02 GMT\r\ndate: Thu, 14 May 2026 04:28:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"8fde1366ef7b5fbd87212493c7710f10","sha1":"de3c7deb47cdb042fd5640edf4df660425a7e166","sha256":"6a256702c691c606c6126cc73c01a1515977a15f64e2a96ae2635ab0b3a64d12","sha512":"339f787611f6a8349aa8099420bccbe4dcc121f63c5928a6e5a64996b7c13e0fa801f10be065c1f7044c1f431347f686fab2892f22a8f7f8ae4452192b7c8e7f","ssdeep":"384:z9fD9O9d9B9ya9/qY4Q9G9m949fd9k9D939yQ9/qY4a989c9+9fn9y9x9t9yG9/4:z5svvYaR7AIWP2ZZYQRVKyg1A77YGRvc","tlshash":"5b721fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T05:06:38.041248Z","last_seen":"2026-07-16T20:02:53.256584Z","times_seen":1362,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload-us.f-1-g-h.com/s4/app-icon/1102210/512512512.png","fqdn":"upload-us.f-1-g-h.com","domain":"f-1-g-h.com","tld":"com"},"ip":{"addr":"104.18.12.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a5b48714.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 14:37:21 GMT","end":"Tue, 23 Jun 2026 15:37:14 GMT"},"fingerprint":{"sha1":"E6:01:1A:53:3A:6B:2B:99:74:E3:5A:80:07:6D:25:C7:A0:4B:4A:51","sha256":"90:06:1E:F8:FB:FA:EB:57:BF:CB:6C:05:1C:CA:3A:2E:3D:D4:FA:F7:BA:A5:CE:21:95:92:C5:0D:19:23:FE:0E"}}},"request":{"raw":"GET /s4/app-icon/1102210/512512512.png HTTP/1.1\r\nHost: upload-us.f-1-g-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 26364\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\netag: \"486563a79b71ed34da992cae220d6025\"\r\nlast-modified: Sun, 26 Oct 2025 15:46:30 GMT\r\naccess-control-max-age: 86400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 329\r\nexpires: Thu, 14 May 2026 04:38:05 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\ncf-ray: 9fb72774880bb4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"486563a79b71ed34da992cae220d6025","sha1":"0ae780fa57b523efa9e53bafcbde51a27ea27f24","sha256":"1fdefa561814f464f7486d036872c74104c4858ebe8ce615c165dfd8a4d29ac9","sha512":"bd644071a89baf43f42785c36346e6948b75b784d98a25cfe8cec8b3bdbab197de6924b440de4c3693dd694f876bb8a31b58e462eea29a0ab6f98615a7d00cc5","ssdeep":"768:iqoirao0PcFxPCBmPpeRbRDei+/7xkZ/pPPs:ibyKcF5CBYWRDei+/dk1hk","tlshash":"a2c2f2544180e09df8202870f4b81417041f1ff7a4ae70da096fa5fe7a1f95ee5a63ce","first_seen":"2025-11-24T07:47:33.633748Z","last_seen":"2026-05-14T04:28:41.696325Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Prompt:ital,wght@0,400;0,600;0,700;0,900;1,400;1,600;1,700;1,900\u0026display=swap%22","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Prompt:ital,wght@0,400;0,600;0,700;0,900;1,400;1,600;1,700;1,900\u0026display=swap%22 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11512,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a0c1c6b3c2cf85e6844b3b880cc2ce3e","sha1":"814890f8d7b34836c16f0c8c98233efcfec0290f","sha256":"dc959e820ef9dbb831620e21e8c056e0de93d09a5e465f12377b8f7af6149e8d","sha512":"4a4c8d18bcf2358e40f90260f62d57b8b0f7ff1c8389546facd1a24fe97f75d9070a0a82c203630686cc83d97d6f7d8a991eeaf9adbb53864c4fbf290eaddd59","ssdeep":"192:GkkskZkyLkX2ns2h2OL2ip1spfpsLpsTWsTcT3LTTfGefrLH0/4lBnf0Yi7tdkG4:GFs03KAsupRLs9+eas4nX5F2w","tlshash":"a332abb1052ad540a7831ec663df7d36cf8eb165b0908436affe1d88fda6c22526075d","first_seen":"2025-09-03T04:41:06.141904Z","last_seen":"2026-07-12T06:12:08.29919Z","times_seen":3383,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,500;0,700;0,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,500;0,700;0,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"8fde1366ef7b5fbd87212493c7710f10","sha1":"de3c7deb47cdb042fd5640edf4df660425a7e166","sha256":"6a256702c691c606c6126cc73c01a1515977a15f64e2a96ae2635ab0b3a64d12","sha512":"339f787611f6a8349aa8099420bccbe4dcc121f63c5928a6e5a64996b7c13e0fa801f10be065c1f7044c1f431347f686fab2892f22a8f7f8ae4452192b7c8e7f","ssdeep":"384:z9fD9O9d9B9ya9/qY4Q9G9m949fd9k9D939yQ9/qY4a989c9+9fn9y9x9t9yG9/4:z5svvYaR7AIWP2ZZYQRVKyg1A77YGRvc","tlshash":"5b721fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T05:06:38.041248Z","last_seen":"2026-07-16T20:02:53.256584Z","times_seen":1362,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/index-C5MGe0Vx.css","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:00.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /assets/index-C5MGe0Vx.css HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9fb727567d9e568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 4556\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 03:12:03 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: STALE\r\nx-data-time: 6ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/index-C5MGe0Vx.css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbQyrlUOUNvCxH1KIUUviwvRBeLefFdjSttIIAjvOrInOwRnX76AZaZ2LbWlr8uDJC4WIkBWhxmUCQDVaqfdHgqwdgCUSB%2F%2Bk8wG4j8BVZLPEHv2ZlvprDhZ73KgLvCvqW6g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e2964f3571527b1fd621aa1f94d13928\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10030904,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a87334976130a66379096691d25bf9f6","sha1":"9dccb7199c4ffa85c1c97f6327c3ab41874ca289","sha256":"f595344428b35d28f562c6d8f8560b9d8040af5681dbd59ef57b327993f2e7db","sha512":"7c706f6b17b819fcd2076bc3a20b3dd0e639431d6095e5e03075c3c545cb7b1f61db13f2563c535577902a18a54d9ba9a7f2ce6e2916a82d8b1b32203d6f6c1a","ssdeep":"3072:+xbT2ZBdN1tG6LFiSUOkgMwL2s0QXGuwo8013roUUZo1eDmjOD0YwEIHeyRmTQZ8:oHMwLT5JRuykk0+","tlshash":"39254368f25ee67e7837d8be1a6cd28c1015b942c9024badfa53f55088c3bf73265349","first_seen":"2026-05-05T10:57:25.838313Z","last_seen":"2026-05-17T14:27:51.911869Z","times_seen":105,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload-us.f-1-g-h.com/s4/app-icon/1102210/512512512.png","fqdn":"upload-us.f-1-g-h.com","domain":"f-1-g-h.com","tld":"com"},"ip":{"addr":"104.18.12.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:01.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a5b48714.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 14:37:21 GMT","end":"Tue, 23 Jun 2026 15:37:14 GMT"},"fingerprint":{"sha1":"E6:01:1A:53:3A:6B:2B:99:74:E3:5A:80:07:6D:25:C7:A0:4B:4A:51","sha256":"90:06:1E:F8:FB:FA:EB:57:BF:CB:6C:05:1C:CA:3A:2E:3D:D4:FA:F7:BA:A5:CE:21:95:92:C5:0D:19:23:FE:0E"}}},"request":{"raw":"GET /s4/app-icon/1102210/512512512.png HTTP/1.1\r\nHost: upload-us.f-1-g-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 04:28:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 26364\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\netag: \"486563a79b71ed34da992cae220d6025\"\r\nlast-modified: Sun, 26 Oct 2025 15:46:30 GMT\r\naccess-control-max-age: 86400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nexpires: Thu, 14 May 2026 04:38:02 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\ncf-ray: 9fb727600e2eb4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"486563a79b71ed34da992cae220d6025","sha1":"0ae780fa57b523efa9e53bafcbde51a27ea27f24","sha256":"1fdefa561814f464f7486d036872c74104c4858ebe8ce615c165dfd8a4d29ac9","sha512":"bd644071a89baf43f42785c36346e6948b75b784d98a25cfe8cec8b3bdbab197de6924b440de4c3693dd694f876bb8a31b58e462eea29a0ab6f98615a7d00cc5","ssdeep":"768:iqoirao0PcFxPCBmPpeRbRDei+/7xkZ/pPPs:ibyKcF5CBYWRDei+/dk1hk","tlshash":"a2c2f2544180e09df8202870f4b81417041f1ff7a4ae70da096fa5fe7a1f95ee5a63ce","first_seen":"2025-11-24T07:47:33.633748Z","last_seen":"2026-05-14T04:28:41.696325Z","times_seen":4,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":34,"connect":1,"send":0,"wait":119,"receive":2,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js?58","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:03.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js?58 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 14 May 2026 04:28:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Mon, 18 May 2026 04:28:03 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-08-09T00:56:52.467342Z","times_seen":2799,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Sansita+One\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Sansita+One\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":416,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fecf66b7b23765635baaf020b4a98434","sha1":"48d186372cc1e7d96248dabed84c7e4ca5a5549b","sha256":"5e3839d6e6f07c5de66e46f8be579a54fea03645933b9da2161a29bbc79370d7","sha512":"657de93f1249baa44ffb225eea9ccd6de3874812ef31bfe6cd3ebc3c36bac617be2cd1db7902c3d87744ffcf466331f34f4d2ae723a445d3ae7244375fec1fe6","ssdeep":"","tlshash":"bde02b80193aa510e6930cc551cf7a31af0ea0506845d5389afa18d8bd52d277356b5d","first_seen":"2025-09-18T03:39:33.985882Z","last_seen":"2026-07-04T16:20:31.856696Z","times_seen":1806,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Changa+One\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Changa+One\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":413,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"da29d046a89c0fcfcc2de48141a6ca93","sha1":"b6ab7fcef662aad45a021c400f392a4441801b5e","sha256":"60a9d949bac28abe465541ba186b8222851b9bc7228e56dd289b49342f59926e","sha512":"6e544379a4a6e24bbee787349b5888e6043bc575a3ce99a2436b716ec8d2202d5923619ed1dce51d702ef8a5963933e248ed09f6ade28639d8c5dcdc0f96cde4","ssdeep":"","tlshash":"5fe0ab400836a600e6935cc011cd3a32ef0ea050184498349bfe08c8fc82c162352b0d","first_seen":"2025-09-18T03:39:34.019395Z","last_seen":"2026-07-23T13:25:53.507058Z","times_seen":1852,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/index-CbJgn0zJ.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:02.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /assets/index-CbJgn0zJ.js HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.av7yd3eu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fb72762099a568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nage: 1\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 04:28:00 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 5ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/index-CbJgn0zJ.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1g3GEPzc8H%2FDBs7rrZy5JUsLY2Gva3HrOVIa9QB8M3FotTndJotDTrqMffIYkqvqYBkCKKy6KuA636lK9DMncPK7zavochxyEgNeZ6MYbFnaYZk44BWdnbnsX%2F2y2XGJFG%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"196243eafbc485e6df573ac9054c27ef\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3096952,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63694)","md5":"3c266e2fb88b7449ac6f413119baf8c8","sha1":"40838a9170232ef11bcf89743970489f4042dcc2","sha256":"ff36e23c2141fe42ef8364da9ddd6e68974a132c6f2459dd9a7d68cab1fb2796","sha512":"6ee8b40a2d089ec1461e03c32d5039861a251e952c3df7d113e3ee6bab4f09210ae897f93346efc103690832fbf8f6fee41101a46677b83a852da776c803af0b","ssdeep":"24576:cxJy/nC74y+Lw2oYsYKpnIzn6+X7vpsG9jvqNXBN4+pXQ/UE1bN+NQkHSDvKFlM+:cxJy/C74y+c+KpnIzn6+LjvqNXBN4+pj","tlshash":"cb355b1462683132aca638ecf4fb7a7211491e08d746c4bdf57b4895328bdb4613bb7e","first_seen":"2026-05-14T04:28:41.701196Z","last_seen":"2026-05-14T04:28:41.701196Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Share+Tech\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:02.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Share+Tech\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":413,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e445997a42031fd5f59241d9e90a2488","sha1":"1c85d73b72928eba91ee394d01138ed57e6d234e","sha256":"f2061f59c6fa22d7e1f7e8089baddd9500d980f6ca7062687aa53b4f079d2612","sha512":"ba6cb5cf8c7a66c0aa5736bd831ff470db2388d5ec56ff4bbfa5830199ab1e06dd04f905b433ec0d4687d59b36e8551c6893f8a391204ec2974f15ff6af91f41","ssdeep":"","tlshash":"b7e02b4118276514e6931dc1129e7a31ef0fa0946444d9659afa14d8bc4ac565357b1c","first_seen":"2025-09-14T10:40:02.434998Z","last_seen":"2026-07-17T07:55:10.11439Z","times_seen":3239,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/vendor_modules-Digde8N2.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:04.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /assets/vendor_modules-Digde8N2.js HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/assets/index-CbJgn0zJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fb727700e4d568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 3\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 04:28:01 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 5ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/vendor_modules-Digde8N2.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MOJDoo4zI5snk5w8uay3ghov6vWBLhfgE0hd97C%2Bt01D3alFc549%2FqRuUSlW5A2XPjNfw%2BQR1WoUJ3kby78nQYLqUqZwZB0wTHv1MXrip2uzZgS9oYB8KwNU1ejSC0f06S%2BG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"86544d19a4ab55684bf6875e8573c59e\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2563907,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41635)","md5":"c32581987a8df2862b2dded574cfa4ff","sha1":"3a85af1449d22d389631295ec70eedbd945ad48a","sha256":"788a990e40282f2874d5657413b73b56bc52ee84b336a4a9ff6c5b7ffa26f345","sha512":"3d24de2532fb8a892185ceb3a5ce25af057c453aa75f4622e7fa8d56191f1f53d87be22ce685ab595952f02e60abf6c56e9fb938b8e3c341a61b1438ad6270d4","ssdeep":"24576:Hutd6JSNj7AUCn0ryEOwFrnc9L6zJXBYBkPZBkCXm:HSdOSNjEUCF2FFBYmlm","tlshash":"77255c94b14035398bbb8ae581aa6100b3359482f80648ddf56ad8c74fdffc9137bb79","first_seen":"2026-05-08T00:52:51.774239Z","last_seen":"2026-05-14T07:40:33.088594Z","times_seen":15,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload-us.f-1-g-h.com/s4/app-icon/1102210/512512512.png","fqdn":"upload-us.f-1-g-h.com","domain":"f-1-g-h.com","tld":"com"},"ip":{"addr":"104.18.12.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a5b48714.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 14:37:21 GMT","end":"Tue, 23 Jun 2026 15:37:14 GMT"},"fingerprint":{"sha1":"E6:01:1A:53:3A:6B:2B:99:74:E3:5A:80:07:6D:25:C7:A0:4B:4A:51","sha256":"90:06:1E:F8:FB:FA:EB:57:BF:CB:6C:05:1C:CA:3A:2E:3D:D4:FA:F7:BA:A5:CE:21:95:92:C5:0D:19:23:FE:0E"}}},"request":{"raw":"GET /s4/app-icon/1102210/512512512.png HTTP/1.1\r\nHost: upload-us.f-1-g-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 26364\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\netag: \"486563a79b71ed34da992cae220d6025\"\r\nlast-modified: Sun, 26 Oct 2025 15:46:30 GMT\r\naccess-control-max-age: 86400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 329\r\nexpires: Thu, 14 May 2026 04:38:05 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\ncf-ray: 9fb727748808b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"486563a79b71ed34da992cae220d6025","sha1":"0ae780fa57b523efa9e53bafcbde51a27ea27f24","sha256":"1fdefa561814f464f7486d036872c74104c4858ebe8ce615c165dfd8a4d29ac9","sha512":"bd644071a89baf43f42785c36346e6948b75b784d98a25cfe8cec8b3bdbab197de6924b440de4c3693dd694f876bb8a31b58e462eea29a0ab6f98615a7d00cc5","ssdeep":"768:iqoirao0PcFxPCBmPpeRbRDei+/7xkZ/pPPs:ibyKcF5CBYWRDei+/dk1hk","tlshash":"a2c2f2544180e09df8202870f4b81417041f1ff7a4ae70da096fa5fe7a1f95ee5a63ce","first_seen":"2025-11-24T07:47:33.633748Z","last_seen":"2026-05-14T04:28:41.696325Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/versionControl/combined.js?v=v223","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:06.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /versionControl/combined.js?v=v223 HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/download\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fb72779d8c5568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 2\r\ncache-control: public, s-maxage=600, max-age=432001, must-revalidate\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 04:28:03 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 5ms\r\nx-from: R2\r\nx-original-cache-control: public, s-maxage=600, max-age=432001, must-revalidate\r\nx-r2-path: v223/versionControl/combined.js\r\nx-version: v223\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9JF%2B9uO3hljtdCKMT3%2BiRu7G3zCKRCP12CJhBuMWgO%2BWEJkxG4c7UzF1T%2BVrakTZHKdrHEVvFIxiI9Xw7mHh1PFKBieUoD63kItE0McSO7dfz2zuZRCMoXVFRJykHxk9%2FT7l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f6553a65108617ab0f1436b9833bbe45\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16887,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3127)","md5":"f6553a65108617ab0f1436b9833bbe45","sha1":"12575f47719b7204e859e8b949a85c138c5e9820","sha256":"e16f8e8822b8be6b8a671b05ebfc2a1b6036b450a89f25519c54c1c0f303f34e","sha512":"870ed4f6ce8c48543e28048d4a58c818280dc8c4c7c0378c8679e661fef813f0b6608583ea4b186b09c063ab1b8f7200179fae59214f78106ea93995fd8595d6","ssdeep":"192:lJtXatX8sEXZ7D8WQQtir56Y9tozbPlnNmfdIe9MsQxW87GnArHcfE0qp97AETQs:BS87DFi7tE4fdI8MT5AcPXUETNh7KW","tlshash":"1372e91d36b420b542a37219abefd70d3131422b2845dc157b8d83a80fa5ead46b7edb","first_seen":"2026-01-21T19:51:56.02324Z","last_seen":"2026-07-04T16:20:31.860539Z","times_seen":1343,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Product+Sans\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Product+Sans\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f6061bf85f699a6cefef6f02117f7567","sha1":"8c80d2379ded2b1d1a2a9565fd13f9a4db16f957","sha256":"1be04160f39c4941fd6dd1efb4d3af1f67b3094969eeb4340285f06e8a4e4d02","sha512":"d93e11f3d62b35cc8df538bc1b0414b4e402feadade5f7285a16648fa4ca9724ce5f7d1510b65b1b8eaf2ac1536377eaa35c2dc4d80314c61c0868aca8f9d226","ssdeep":"","tlshash":"aa3115e1013ba084ab831cd523df7e26ad1f6221a485d47e4efd289cfc95d564330b5d","first_seen":"2025-09-03T04:41:06.145005Z","last_seen":"2026-07-04T16:20:31.819158Z","times_seen":3211,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Saira:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Saira:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3987,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"246b884243ad78331c25bee413c87635","sha1":"27b39458c291175631348fe91d4bcb11fbcbadda","sha256":"2daa0b75af27e4c6459213fd9b27b7bf8005f8d787fc3c2dcc419cac3328277a","sha512":"4e4a380b4f060edff0e33d92a2a4234b3d2efc897bdc741e4d10a503124f52d729b5631194a5b5685caf2f3dbbf362bf7fc575ffe98dab89df827c0306ab4aa9","ssdeep":"","tlshash":"b581bb90442a9044ea574cc523df7e72af8eb0257054d5797ffd28989ceec32532570d","first_seen":"2025-11-19T03:47:26.841816Z","last_seen":"2026-07-12T06:12:08.207519Z","times_seen":1942,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-14T04:27:59.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 04:28:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: 9fb727531d2db500-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNcZ4PrqnmsmvZcs6a1DEK24csBIgesBOXyIT6RMjuEGBKBfzO1oGoSBdw2byu%2Fi0i8AtQgeDT7cBQt3KDTdj2dU2yJ0nNgMDdJG6HkfmMWmfVdMbo459aX6AyhIPRO880gb\"}]}\r\nage: 0\r\ncache-control: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 04:27:59 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 297ms\r\nx-from: R2\r\nx-original-cache-control: no-cache\r\nx-r2-path: v223/index.html\r\nx-version: v223\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud CDN","description":"Alibaba Cloud CDN is a global network of servers designed to deliver high-performance, low-latency content to users around the world. It is a cloud-based service provided by Alibaba Cloud, a subsidiary of the Alibaba Group, that enables businesses to accelerate the delivery of their web content, including images, videos, and static files, to end-users.","website":"https://www.alibabacloud.com/product/content-delivery-network","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31402,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27447)","md5":"0e45c7560c95af9a36637dfabe5d87c8","sha1":"0668d06b0751ed007ad4af12ed5cc64064b3af70","sha256":"bf868b5193e09df1a3db0f17a3bf326ea1ac9b54d77e94d202e4af046009635d","sha512":"1062645faef935a4548222ed2b84e374cdcd25f70710c6a694382aa59ea8f5abd1cf52b46d1b85abd4d72770de7624805e1092a87ac4ecdb86b3918c32169ac5","ssdeep":"768:hESIX2OA3OGOdQsGosXsAvJDRDl28hixCvZA5L8ADvWInbdAI6D9P9QV2QxOkdnw:uSiIbOlw5//1x","tlshash":"05e2dad786df58082bca3212c685a8a50b6a664f5c84b704b3cf6e326f95fc4374b17d","first_seen":"2026-05-14T04:28:41.705768Z","last_seen":"2026-05-14T04:28:41.705768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":46,"dns":28,"connect":1,"send":0,"wait":336,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/vendor_modules-9b7WOkhW.css","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:00.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /assets/vendor_modules-9b7WOkhW.css HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9fb727567d9f568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 4556\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 03:12:03 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: STALE\r\nx-data-time: 9ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/vendor_modules-9b7WOkhW.css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZF4OBRPem6TH2P6EjZcmvXd82CHromNFhx4Ie7Ssv9AB3hhcbkGaHZPHcXBi1FHoGviS31%2FULcBb6thx6cgj0AOt0WX4ao%2Fz%2FhInGDkuy5jGseuqWcv3wD3FQ2iO7I86PFhQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f4368789de81fbaab97e1a5baa502a74\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23223,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23222)","md5":"f4368789de81fbaab97e1a5baa502a74","sha1":"e59868ea619fdbf9f91b6cba557cd55a256ecaf8","sha256":"dfea356615307ae05cd31120263fe556b65b19a1e030f991d0b0fd6ab398aae5","sha512":"ef5df72676ac899f15f560096b8bf60ab65e248f9577c6931bf3e4f1ebbcd41c11d10dc425fa34de8b6ced93e1e36831f9fd6959c9a58b10311b2234f1393975","ssdeep":"384:nPp2CsOG40aC4q7ECCACqLJCpJi7WaAyzVOn4D9fCNSf7UNGKwZtLCheVa7GC874:nPpZsOG40l4q7XCrqLMpJi7WaAyzVOnn","tlshash":"e3a21042f58015aaafb700b5998db73cbb7aa4c0fa076ed62140f3651bcf6f70597128","first_seen":"2025-04-19T03:35:33.17216Z","last_seen":"2026-08-09T03:34:12.225931Z","times_seen":4407,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/vendor_modules-Digde8N2.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:01.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /assets/vendor_modules-Digde8N2.js HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/assets/index-CbJgn0zJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fb7275b3f72568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 4557\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 03:12:03 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: STALE\r\nx-data-time: 6ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/vendor_modules-Digde8N2.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6r2AztvOA47Dd7Km4s9ayjQng1dHxLXD5w0K6Z%2BFDXPwJ267arLa6fbpp34Vx0G5oXz4abfCyd6GXhQdOhVIkFRrOwcam4Cvz6FnSAwV4YdggWFmrBk%2BHaBvr1TonjiFEDY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"86544d19a4ab55684bf6875e8573c59e\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2563907,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41635)","md5":"c32581987a8df2862b2dded574cfa4ff","sha1":"3a85af1449d22d389631295ec70eedbd945ad48a","sha256":"788a990e40282f2874d5657413b73b56bc52ee84b336a4a9ff6c5b7ffa26f345","sha512":"3d24de2532fb8a892185ceb3a5ce25af057c453aa75f4622e7fa8d56191f1f53d87be22ce685ab595952f02e60abf6c56e9fb938b8e3c341a61b1438ad6270d4","ssdeep":"24576:Hutd6JSNj7AUCn0ryEOwFrnc9L6zJXBYBkPZBkCXm:HSdOSNjEUCF2FFBYmlm","tlshash":"77255c94b14035398bbb8ae581aa6100b3359482f80648ddf56ad8c74fdffc9137bb79","first_seen":"2026-05-08T00:52:51.774239Z","last_seen":"2026-05-14T07:40:33.088594Z","times_seen":15,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js?58","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:00.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js?58 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 14 May 2026 04:28:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Mon, 18 May 2026 04:28:00 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-08-09T00:56:52.467342Z","times_seen":2799,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":246,"dns":0,"connect":24,"send":0,"wait":43,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:00.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:00 GMT\r\ndate: Thu, 14 May 2026 04:28:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32402,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f56f25fe74b525652cef3b25ad44adad","sha1":"853baf42fe3870c440e75943df69e1a84ec86bc4","sha256":"66b0fc3a90229a3f56d0df87208c6d7dcca4e5bca850029a64528d06d57b5de0","sha512":"cb5c524b2fc5702e5e4bc81b0a09374775b88b19c431cacd5c7a6f850d8f1506966cf2c349726690d132be9afce67aacd4ddec432cbd8c0116c9ab7fbdec9188","ssdeep":"384:vtfcHjg8ciIg3is3X3D35CsAfXosWBZTsmNUUsKVdqso3/5srQICsAfX4sGRcnZD:83HDaZzcC","tlshash":"f9e2b8b1042bd500ea871dc627cf7e369e8eb1667490c579affd1888eceac22532475d","first_seen":"2025-09-14T10:40:02.408446Z","last_seen":"2026-07-19T03:48:46.058734Z","times_seen":3666,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":132,"dns":1,"connect":21,"send":0,"wait":31,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o.alicdn.com/captcha-frontend/aliyunCaptcha/AliyunCaptcha.js","fqdn":"o.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"43.109.53.2","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:03.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /captcha-frontend/aliyunCaptcha/AliyunCaptcha.js HTTP/1.1\r\nHost: o.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding\r\ndate: Wed, 13 May 2026 09:37:59 GMT\r\nx-oss-request-id: 6A04467705903074CC381144\r\nx-oss-cdn-auth: success\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=604800,s-maxage=86400\r\ncontent-md5: uDeEfJ1+i2VH2JK7VLxKKg==\r\nx-oss-server-time: 1\r\nvia: ens-cache16.l2de4[188,176,304-0,C], ens-cache31.l2de4[179,0], ens-cache4.ru10[0,0,200-0,H], ens-cache13.ru10[2,0], ens-cache5.ru10[7,0]\r\netag: W/\"B837847C9D7E8B6547D892BB54BC4A2A\"\r\nlast-modified: Wed, 15 Apr 2026 09:37:50 GMT\r\nx-oss-hash-crc64ecma: 11321288618651780509\r\nage: 67804\r\nali-swift-global-savetime: 1778665079\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Wed, 13 May 2026 09:37:59 GMT\r\nx-swift-cachetime: 86400\r\nx-assets-grey: false\r\nx-assets-path: /captcha-frontend/aliyunCaptcha/AliyunCaptcha.js\r\naccess-control-allow-origin: *\r\nx-er-version: 0.0.6\r\nx-assets-pt: pt0\r\ntiming-allow-origin: *\r\neagleid: a3b5009917787328838784856e\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":224118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b837847c9d7e8b6547d892bb54bc4a2a","sha1":"cfa19575397c1b3bf860e8c5aefc708be7a60ce1","sha256":"af451826b15f27d89c5f1ecab63a6afdb773088b3311bcca38fee16b4ba219c8","sha512":"60fa12ae9494fb75dea69235d420e686100e19723b0114e1c18cb2f5d7e1711725f425b54da8a13857285b26248167910492af194c76d3cad7a9c3cb43ea49e3","ssdeep":"1536:3Gf29cUZy1JOjKMhSf/B8MU5+qaWRo8Z0m9o9SuOCZi7Fjxpk26vg5AIunTKx8Z+:3NknY+qaWRo8BZX7Fbkvg5AITa7q","tlshash":"7524f98db1c1b0d90be364e4012f640bf0bb6a64745e99d1fbb1d4c5ac79a9ea033e5c","first_seen":"2026-04-15T09:49:29.999907Z","last_seen":"2026-06-06T23:28:28.068198Z","times_seen":1027,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/vendor_modules-Digde8N2.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /assets/vendor_modules-Digde8N2.js HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.av7yd3eu.com/download\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fb727752f97568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nage: 3\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 04:28:01 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 5ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/vendor_modules-Digde8N2.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IX49jEcvqb4m1RdzoxyW90MSQXMV06et4VgQRursfd13B4nta2rwYb2NF5ATpZm%2FiaeUZAdGhNlxDT1%2FFkIriHDPyhIn0TxqkvlMrE4%2BrynVHjl3mmlthoPrcyXpIO6%2FxXSH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"86544d19a4ab55684bf6875e8573c59e\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2563907,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41635)","md5":"c32581987a8df2862b2dded574cfa4ff","sha1":"3a85af1449d22d389631295ec70eedbd945ad48a","sha256":"788a990e40282f2874d5657413b73b56bc52ee84b336a4a9ff6c5b7ffa26f345","sha512":"3d24de2532fb8a892185ceb3a5ce25af057c453aa75f4622e7fa8d56191f1f53d87be22ce685ab595952f02e60abf6c56e9fb938b8e3c341a61b1438ad6270d4","ssdeep":"24576:Hutd6JSNj7AUCn0ryEOwFrnc9L6zJXBYBkPZBkCXm:HSdOSNjEUCF2FFBYmlm","tlshash":"77255c94b14035398bbb8ae581aa6100b3359482f80648ddf56ad8c74fdffc9137bb79","first_seen":"2026-05-08T00:52:51.774239Z","last_seen":"2026-05-14T07:40:33.088594Z","times_seen":15,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/index-CbJgn0zJ.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:03.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /assets/index-CbJgn0zJ.js HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/download\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fb7276c2d51568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 3\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 04:28:00 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 6ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/index-CbJgn0zJ.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zxHMJ2AJuw5SW1OgQTCt6gPhRLuCl3CuAOtbTZA8BEancyRa95hPAww0V2SXTZeHI5DNPW64ypwQntK4eCdRY6%2FbIurgI%2FWMq1iTUY0L0tFizYrvH1Yga4ojq3tQQUL3GcLy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"196243eafbc485e6df573ac9054c27ef\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3096952,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63694)","md5":"8f64caed9774bade8b5cf652cb845f69","sha1":"8c2a3a9d9fc538f524a4d15b7732034088569dbc","sha256":"f617dc24b2e85229c2d44ec73fa3b96361b715b039f8a360cc5608d0a959597e","sha512":"5fe3ba7a3fed7bef2a903da9354a9b0cb1699f2486a41141bb1ce4ab617eb4b88b9647595f1d259d8690edda8b7cc1b826d1b88a5550b4eb8cb8f26acf87bc7c","ssdeep":"24576:cxJy/nC74y+Lw2oYsclpnIzn6UX7vpsG9jvqNXBN4+pXQ/UE1bN+NQkHSDvKFlMC:cxJy/C74y+cWlpnIzn6gLjvqNXBN4+pJ","tlshash":"b6352a24929823329cf234e8f8f63be2214d0e08d745d9bff27654953187d94a53ab7e","first_seen":"2026-05-08T00:52:51.765798Z","last_seen":"2026-05-14T04:28:41.69422Z","times_seen":5,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/vendor_modules-9b7WOkhW.css","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:03.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /assets/vendor_modules-9b7WOkhW.css HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/download\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9fb7276c2d53568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 3\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 04:28:00 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 6ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/vendor_modules-9b7WOkhW.css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWx26tvEStCpX75FUYZMdjjYGpR9zKcyQ3zPhNr4qxC5ZErt4yhignoI2icxY6pLLiQlFYQM9nwdblpiH5IegcahWOzK2eZ2s7Espnu%2FpWCaevUu2YB%2FBmcMda3Xj1zuQN2V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f4368789de81fbaab97e1a5baa502a74\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23223,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23222)","md5":"f4368789de81fbaab97e1a5baa502a74","sha1":"e59868ea619fdbf9f91b6cba557cd55a256ecaf8","sha256":"dfea356615307ae05cd31120263fe556b65b19a1e030f991d0b0fd6ab398aae5","sha512":"ef5df72676ac899f15f560096b8bf60ab65e248f9577c6931bf3e4f1ebbcd41c11d10dc425fa34de8b6ced93e1e36831f9fd6959c9a58b10311b2234f1393975","ssdeep":"384:nPp2CsOG40aC4q7ECCACqLJCpJi7WaAyzVOn4D9fCNSf7UNGKwZtLCheVa7GC874:nPpZsOG40l4q7XCrqLMpJi7WaAyzVOnn","tlshash":"e3a21042f58015aaafb700b5998db73cbb7aa4c0fa076ed62140f3651bcf6f70597128","first_seen":"2025-04-19T03:35:33.17216Z","last_seen":"2026-08-09T03:34:12.225931Z","times_seen":4407,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/vendor_modules-Digde8N2.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:02.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /assets/vendor_modules-Digde8N2.js HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.av7yd3eu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fb72762099b568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 04:28:01 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 5ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/vendor_modules-Digde8N2.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C9b8cKppregmP5zWFYkTzfgLqAaGwmit%2BTv%2BP%2BT1uZMpUqRb2BXYX8uUI3gzoABNjTyp8oznE17ZC%2BnU6z0hM42cHzaqMtNHayyxP4LU3Rc89mzv0oE6BMjHNql6S1xg00cc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"86544d19a4ab55684bf6875e8573c59e\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2563907,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41635)","md5":"c32581987a8df2862b2dded574cfa4ff","sha1":"3a85af1449d22d389631295ec70eedbd945ad48a","sha256":"788a990e40282f2874d5657413b73b56bc52ee84b336a4a9ff6c5b7ffa26f345","sha512":"3d24de2532fb8a892185ceb3a5ce25af057c453aa75f4622e7fa8d56191f1f53d87be22ce685ab595952f02e60abf6c56e9fb938b8e3c341a61b1438ad6270d4","ssdeep":"24576:Hutd6JSNj7AUCn0ryEOwFrnc9L6zJXBYBkPZBkCXm:HSdOSNjEUCF2FFBYmlm","tlshash":"77255c94b14035398bbb8ae581aa6100b3359482f80648ddf56ad8c74fdffc9137bb79","first_seen":"2026-05-08T00:52:51.774239Z","last_seen":"2026-05-14T07:40:33.088594Z","times_seen":15,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/assets/index-CbJgn0zJ.js","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /assets/index-CbJgn0zJ.js HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.av7yd3eu.com/download\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fb727752f96568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nage: 4\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 04:28:00 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 5ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/index-CbJgn0zJ.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtO9jiFaVXUhYPloqzPhoSRXopycqBYdxh5IR8r9D6OqiYtbcns7SEZbeT2rFngt7XYU13GkxmTj%2FA4l8yyEAHfG6bTPGPCi6cj86TKBkaNi7bumNi9lN5VFAF0qWrfzJ%2B4p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"196243eafbc485e6df573ac9054c27ef\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3096952,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63694)","md5":"301872e4f341390c1598c7d97faa08ff","sha1":"3a698bb23211c12d8e577a00df0222e8773b1758","sha256":"313d3f3090d4515ce7990db1998de16ce0ea4c95a80f3820d180da1a1c48afec","sha512":"3a80b10fd7161fc44bb920e23ab252a3e1c85b00768921ab1ba3a3799342a575d7b08dad820a67fd75b32e3560b5ec7acfd3ae5930f16b3d76715a8d5824c36d","ssdeep":"24576:cxJy/nC74y+Lw2oYsIKpnIzn6EX7vpsG9jvqNXBN4+pXQ/UE1bN+NQkHSDvKFlM5:cxJy/C74y+cGKpnIzn6QLjvqNXBN4+pg","tlshash":"fb355b14626830329ca639ecf4fb7a7211491e08d746c8bdf57b4895328bdb4613bb7e","first_seen":"2026-05-14T04:28:41.707619Z","last_seen":"2026-05-14T04:28:41.707619Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Inter:wght@700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9a832bded51393dffc57f9770a8605c5","sha1":"e4a6087bfb38c7e60c01e1a3a2d82dadca43e9fe","sha256":"94c297f7502cfdd4c4f6b16db772cd92b5db5122215252c6aa2291075be54b59","sha512":"7efaeba451046c2b619be80d24f0dac02d8ba67ed994658795ec426f26ee52989f705fd7845467e4020173495b145aba8900e10a34eac5c7c19c24eebe74bf54","ssdeep":"96:aOpaNqOpaXFZHOpamOpaO3vOpaBOpaBJc+uTOpaNcNDObaNqObaXFZHObamObaOa:0NEhYO3RrxGYNCbOO3Lxxgx","tlshash":"afa18b92002ba400ab971dc233cf7f3aaece10896085d2b95ffd0dc55cead66436875d","first_seen":"2025-09-18T03:39:34.005529Z","last_seen":"2026-08-05T03:18:06.181073Z","times_seen":1817,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/versionControl/webPushSdk.produce.min.2.1.6.js?v=v223","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:06.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /versionControl/webPushSdk.produce.min.2.1.6.js?v=v223 HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/download\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9fb72779d8c8568e-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 2\r\ncache-control: public, s-maxage=600, max-age=432001, must-revalidate\r\nserver: cloudflare\r\nx-cache-date: Thu, 14 May 2026 04:28:03 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 5ms\r\nx-from: R2\r\nx-original-cache-control: public, s-maxage=600, max-age=432001, must-revalidate\r\nx-r2-path: v223/versionControl/webPushSdk.produce.min.2.1.6.js\r\nx-version: v223\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKqN4W9NPPC%2B7l%2F4DcLxdpWA50Nzk6awvBYIMNNJ0a5zWwCpzA0dMXPIZMtOFnGNpcHQsWbwMZAowcDV3febHS5N%2B43jNlmBqAIZog1BoWxaQf8MalLT7hJ3NAEaQDgjcfDX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"252eff85e75f98cab2ed0affd0f24ed1\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61393,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61099), with no line terminators","md5":"252eff85e75f98cab2ed0affd0f24ed1","sha1":"e1a739fa70c57e9ef90f33fc4ab52fcf387ad13f","sha256":"1ee4947bae28f87f22e0f400ac7ae540d0162c4102402eaafe7d3aa6a3420c7e","sha512":"55efba3ebdc87dfeb1933208acd1f727b126433e26a1b747eff534620804979acaf50139674e7d5ebab2baa3bc962b9495224f15f461a01e56b76ad269060d12","ssdeep":"1536:7ROuwOy/RQEO6odontXPi2kJP33+NR5qlr:dGBSEOLdyXPeF3+N+Z","tlshash":"92534d9ef589753503ebb054c53f0402b6332c15a64282a8f6acd5d6fc795cea063fba","first_seen":"2024-07-30T04:40:36Z","last_seen":"2026-07-04T16:20:31.857178Z","times_seen":3504,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Share+Tech\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:05.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Share+Tech\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 04:28:05 GMT\r\ndate: Thu, 14 May 2026 04:28:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":413,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e445997a42031fd5f59241d9e90a2488","sha1":"1c85d73b72928eba91ee394d01138ed57e6d234e","sha256":"f2061f59c6fa22d7e1f7e8089baddd9500d980f6ca7062687aa53b4f079d2612","sha512":"ba6cb5cf8c7a66c0aa5736bd831ff470db2388d5ec56ff4bbfa5830199ab1e06dd04f905b433ec0d4687d59b36e8551c6893f8a391204ec2974f15ff6af91f41","ssdeep":"","tlshash":"b7e02b4118276514e6931dc1129e7a31ef0fa0946444d9659afa14d8bc4ac565357b1c","first_seen":"2025-09-14T10:40:02.434998Z","last_seen":"2026-07-17T07:55:10.11439Z","times_seen":3239,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/download","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-14T04:28:03.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /download HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/launch\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache\r\npriority: u=1,i=?0\r\nx-cache-date: Thu, 14 May 2026 04:28:03 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: MISS\r\nx-data-time: 265ms\r\nx-from: R2\r\nx-original-cache-control: no-cache\r\nx-r2-path: v223/index.html\r\nx-version: v223\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9wjYcPEHvFWs3WiSK8kL%2FHphCPfIpdErg3ynWwhZdk3sQ99AAPmLVwEV9qUDniwmNenqe0WKflQdSSd4nCAadsW1DO8dlT1KKwFXtAqV0iyMPcjEiRVG75KIHKL6Dvx8LPk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fb7276a1c88568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud CDN","description":"Alibaba Cloud CDN is a global network of servers designed to deliver high-performance, low-latency content to users around the world. It is a cloud-based service provided by Alibaba Cloud, a subsidiary of the Alibaba Group, that enables businesses to accelerate the delivery of their web content, including images, videos, and static files, to end-users.","website":"https://www.alibabacloud.com/product/content-delivery-network","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["CDN"]}],"data":{"size":31401,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27446)","md5":"c58e53a2ca50d2f5dcca8f0dcedcbc5e","sha1":"42075aa706fdfad1945aa007a2950b46943aba74","sha256":"6fdb6df0fc0ebe4b13a0c8a7425d376b0c33b191f9a6cebf1fc922ec2a82d19f","sha512":"356b506bfe49665f02d7c7d87324b1d084fa9830f61bdc1991e49b8d22910acd3ebc2bf62f24af4356c53abea19faf3fbf585c0899f56a5ec7a98b8aba7d260d","ssdeep":"768:hESIX2OA3OGOdQsGosXsAvJDRDl28hixCvZA5L8ADvWInbdAIc9P9QV2QxOkdnw:uSiIbOlw5/p1x","tlshash":"6ae2dad786df58082bca3212c685a8a50b6a664f5c84b704b3cf6e326f95fc4374b17d","first_seen":"2026-05-14T04:28:41.709913Z","last_seen":"2026-05-14T04:28:41.709913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:06.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.av7yd3eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 18:22:32 GMT\r\nexpires: Wed, 12 May 2027 18:22:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 122734\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-09T08:49:14.359892Z","times_seen":257963,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av7yd3eu.com/versionControl/webPushSdk.produce.min.2.1.6.js?v=v223","fqdn":"www.av7yd3eu.com","domain":"av7yd3eu.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/","date":"2026-05-14T04:28:03.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.av7yd3eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 13:22:10 GMT","end":"Sun, 26 Jul 2026 14:21:56 GMT"},"fingerprint":{"sha1":"3A:0D:F4:EA:DD:38:1B:07:75:B4:BF:58:54:2B:97:3D:CE:59:06:3F","sha256":"E8:E0:A0:F7:0B:36:F2:F6:83:78:6D:0D:5E:1E:C8:F4:1A:86:19:BC:CF:E2:D4:3A:79:20:FD:C2:75:CD:7B:50"}}},"request":{"raw":"GET /versionControl/webPushSdk.produce.min.2.1.6.js?v=v223 HTTP/1.1\r\nHost: www.av7yd3eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av7yd3eu.com/launch\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"www.av7yd3eu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"www.av7yd3eu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/883a1f27d85f/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av7yd3eu.com/download","date":"2026-05-14T04:28:03.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 19:45:24 GMT","end":"Fri, 17 Jul 2026 20:45:20 GMT"},"fingerprint":{"sha1":"55:E2:30:E2:B9:65:08:8A:5E:4A:A1:AC:70:12:E1:69:10:5B:88:0F","sha256":"34:8B:B6:28:AC:C0:28:44:34:51:7E:85:03:E3:50:1E:04:E7:48:B4:99:11:CB:23:AF:24:CF:9F:63:C2:C6:1E"}}},"request":{"raw":"GET /turnstile/v0/b/883a1f27d85f/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.av7yd3eu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 04:28:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 11 May 2026 16:45:17 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fb7276c4a1b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64227,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64226)","md5":"35b1d82e5ee89cc581e98f4618de7a15","sha1":"c06bd8849516b62c229a39c1d928e4fc5fa70d02","sha256":"d3adb810c5abb24f5fb5f0397d7206658aca0b3177448f7484619ddc3473526e","sha512":"a5c4c1c07aa5993f9b2758e5e91e024b2feb19aaa197678151b71c120bc18e5950005c5f9706cb777bb925385a5b8f83a304c17aa1976cae3ba5c955b5738244","ssdeep":"1536:T/a82omubKJDEzxv/0iKNLVensyQTXeegsiHVj:Zup4yVenZ+eU+j","tlshash":"92534d987156787316d980f0a17b670373267d3aa94cc890e817d8653a7cdca9233fbe","first_seen":"2026-05-12T09:01:59.601109Z","last_seen":"2026-05-18T09:32:57.236378Z","times_seen":8564,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}