{"report_id":"9718a36c-bb59-4639-8da1-267f8f3e1b2b","version":0,"status":"done","tags":[],"date":"2026-08-01T18:12:07Z","url":{"schema":"https","addr":"lymazii.digital/","fqdn":"lymazii.digital","domain":"lymazii.digital","tld":"digital"},"ip":{"addr":"172.67.220.37","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lymazii.digital/","fqdn":"lymazii.digital","domain":"lymazii.digital","tld":"digital"},"title":"Trust Card — Spend Crypto Like Cash. Everywhere.","dom":{"size":9960,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (329)","md5":"08cc475c1a799111d98b10fdfc9a008b","sha1":"fc04b75ed2955c20468742a67381d1dc64fa6970","sha256":"71a8748d966d0cf853544aa2796829ec1984a122be94c43a7c9ec81a1ddf9869","sha512":"bd63d2f521241e09d083e57d6b73cfc25024e26fd5f70698e42a2482c87d5d16ad04c13cf08441ad8b996613b7fa7d59e766280e60eba0773c5879a49f78e29b","ssdeep":"192:TxQJQ0hOhq4/6En2YyARvNEb1P7QC5NrbJEzD9LVW+j6GxQFu4:TxQJbrN4QM4","tlshash":"8d2295a366a3261df11384695be72b0a2275d017f207cd693fcd129ccfc91e896a3358","dom_hash":"domhash2f51e92b5e976408404f851f265400dc","first_seen":"2026-08-01T18:12:10.9424Z","last_seen":"2026-08-01T18:20:35.331901Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"lymazii.digital/","fqdn":"lymazii.digital","domain":"lymazii.digital","tld":"digital"},"ip":{"addr":"172.67.220.37","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-05T18:12:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"lymazii.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"lymazii.digital","ip":{"addr":"172.67.220.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-01T18:12:07.126083Z","last_seen":"2026-08-01T18:12:07.126083Z","alert_count":2,"request_count":2,"received_data":26458,"sent_data":988,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"trustwallet.com","ip":{"addr":"104.16.218.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-10-14","domain_rank":18447,"first_seen":"2018-11-01T00:59:02Z","last_seen":"2026-07-26T12:43:16.895233Z","alert_count":0,"request_count":1,"received_data":187744,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pixel-manager-umber.vercel.app","ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-01T17:58:00.755232Z","last_seen":"2026-08-01T17:58:00.755232Z","alert_count":0,"request_count":2,"received_data":2515,"sent_data":1040,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pixel-manager-umber.vercel.app/loader.js","fqdn":"pixel-manager-umber.vercel.app","domain":"pixel-manager-umber.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cf86fe0b92c1d1f134a9c90e70741ee","sha1":"a4ef6bb62c650ecb9869e7d9d44388b94fc5cc45","sha256":"fe7eb0a5aebbdb81ea24c0a16d5eab3e2e177bac277e824698ca7871ab30dc86","sha512":"edf113ae5cf11b1e3a8d337a16f8be91ee38f4a5b663e4b67ac6a2f6532c3481f7c06cd62d3efb96d1151caa06560a5203757ccbacd49079aef8434d57263ba4","ssdeep":"","tlshash":"c22186ac32f6b97243d618da6176ee46f5704214344ec4a0f2dc44552ce5d564f33e9e","size":1413,"data":"","first_seen":"2026-08-01T17:58:05.140344Z","last_seen":"2026-08-07T08:21:18.87935Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"[Pixel Manager] pixel configuration could not be loaded","filename":"https://pixel-manager-umber.vercel.app/loader.js","line_number":1,"column_number":525}]},"http":[{"url":{"schema":"https","addr":"lymazii.digital/bg.jpg","fqdn":"lymazii.digital","domain":"lymazii.digital","tld":"digital"},"ip":{"addr":"172.67.220.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lymazii.digital/","date":"2026-08-01T18:11:40.587Z","timestamp":1785607900587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lymazii.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 05:52:30 GMT","end":"Sat, 24 Oct 2026 05:52:29 GMT"},"fingerprint":{"sha1":"89:C0:CD:97:A3:D6:81:7D:5E:7C:13:2E:97:F8:92:89:85:C8:2B:C5","sha256":"8B:28:CD:72:7F:CD:BB:10:F6:11:58:21:2E:F4:8F:F7:21:A1:AE:E3:B8:50:89:C8:55:C5:F8:61:91:07:07:2C"}}},"request":{"raw":"GET /bg.jpg HTTP/1.1\r\nHost: lymazii.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lymazii.digital/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 01 Aug 2026 18:11:40 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Jul 2026 16:17:15 GMT\r\npriority: u=4,i\r\netag: \"6a6cca8b-3b62\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06NtaMjMOq6UvX%2BpLasxN%2FhCZRIy7ZrOWSnxBF9xmfaG1Ru2sjgFeLwEB3UcmDVNz1nS9Eb5OmmbqNZsoLrOP76DLE6yI5Nd13Zq1qZElKjptrU4E99aZHSG%2B2NWxb5fJLQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246ce82acdcb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15202\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15202,"size_decoded":15891,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 592x1280, components 3","md5":"d3cc6a19b7d2af59708a0105ba592fc4","sha1":"8339d97d17902ae25987003bb9f1fde0337355bf","sha256":"c4501603d152b0affb7fcf58040b7d6a228b76d790459c33c7b44e91aca8078d","sha512":"7855c49acbfeb2e5f2b2c78536ce8e142a6264baa81f04772ec8d4790abacf7bf0de1633e83271605e5d5e97cbc1076987b6897a134072b046fc88bb080fee58","ssdeep":"192:OoFY+uyLnGxQdNA4eKiSWTjYApitR42Qwby5ybEC84PRE3wPV7Lx01:OALnGxmSJItRf3hPegPFxa","tlshash":"6062c019af0a93b4d980a7b00db407d3ba47dd1065ba1616c7928cfe8ee7db88cc57c5","first_seen":"2026-08-01T17:58:05.141401Z","last_seen":"2026-08-07T08:21:18.879814Z","times_seen":8,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"lymazii.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet.com/favicon.ico","fqdn":"trustwallet.com","domain":"trustwallet.com","tld":"com"},"ip":{"addr":"104.16.218.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lymazii.digital/","date":"2026-08-01T18:11:40.662Z","timestamp":1785607900662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 03:28:35 GMT","end":"Sun, 11 Oct 2026 04:28:07 GMT"},"fingerprint":{"sha1":"D6:CE:00:38:9F:C1:86:4E:94:9C:46:FC:70:61:30:1D:43:45:9C:F9","sha256":"B4:6E:FB:12:5B:78:24:D2:A0:AA:31:F0:E9:36:2A:D0:17:CC:DA:FC:75:61:9D:34:8B:EF:C8:13:F3:33:2B:BA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lymazii.digital/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:11:40 GMT\r\ncontent-type: image/x-icon\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none'\r\nserver: cloudflare\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url\r\nx-envoy-upstream-service-time: 5\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\nset-cookie: __cf_bm=XxM3zJ1.7r6W5JLj4fQu6dpI6omMQqvAfIrK.4S5fUw-1785607900.6802518-1.0.1.1-PARSqYwh73.aBnyAXZ2RSD9N_7AnoconPSz4e37s7fJRd6xus1TkZRNsx.k3SbCW7CcUGrjLdxI_boF6LppztkH5W33WU2TMAf4ULlbbjS9.WiGavIGs2rvPnGArPHWF; HttpOnly; SameSite=None; Secure; Path=/; Domain=trustwallet.com; Expires=Sat, 01 Aug 2026 18:41:40 GMT\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncf-ray: a246ce833e0cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186813,"size_decoded":63479,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"f31065f3cd27ee747f132dfb9f3004ca","sha1":"b1f3cc4a67b0b7c4cc1c8aaa594f4b141e574794","sha256":"aad2a3e5c939abd19c4960dbf40300fcfbf4b1a97b23aa08877f9ca689e20b38","sha512":"e6505d407245ec6a74b73604035572c9ffe3cbb314318e30e0c2aac3a355983d4c250066e25fafbf438fd6989ba70285e30572e7eda117a47e09dae7c40f81bb","ssdeep":"3072:jUcVblV61/KfYGyjVoEovkLYqFYUU9PoPZXLNnYfKDKwM0w+W3:jHVblV61/iYGyjVrovkLYmYN9PoPZXLe","tlshash":"dc04f44aba56d92be01137bcc9b3d1f0e49a6d40fa13b48366f47d87f8318a9cc095d6","first_seen":"2023-12-20T05:41:30Z","last_seen":"2026-08-07T08:21:18.880321Z","times_seen":312,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":4,"connect":15,"send":0,"wait":120,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-manager-umber.vercel.app/api/public/pixels/pk_live_24b3c2c48e24dc52e2e53cd91086f8cdde0cc5ac3a576bd3271c211ae78ea08e/config","fqdn":"pixel-manager-umber.vercel.app","domain":"pixel-manager-umber.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lymazii.digital/","date":"2026-08-01T18:11:40.668Z","timestamp":1785607900668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /api/public/pixels/pk_live_24b3c2c48e24dc52e2e53cd91086f8cdde0cc5ac3a576bd3271c211ae78ea08e/config HTTP/1.1\r\nHost: pixel-manager-umber.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lymazii.digital/\r\nOrigin: https://lymazii.digital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sat, 01 Aug 2026 18:11:40 GMT\r\netag: W/\"45-wIfXFjn5wA6O34T+XSXN/wf5Xjk\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-powered-by: Express\r\nx-request-id: bf43c91e-eec5-43f6-bf10-549eb8eb0ba8\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::vsdwt-1785607900701-d71c0e88ca79\r\ncontent-length: 69\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69,"size_decoded":554,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8f378e5cca9775df013eae030dbde95c","sha1":"c087d71639f9c00e8edf84fe5d25cdff07f95e39","sha256":"542c5cbde90af4b85cd19285209b554d5ec984366a670bf6e3a3dd3b8c12109e","sha512":"b9800e911d35c2190b9b8fd81213cb7a7567fd556a62d73c84ff74dbae3d2034f4aa2acab3ba4b86a03948c9d14751d92aa424b86f594523f8cdc9ecb61ac2d5","ssdeep":"","tlshash":"f4a0220c038c283c0fe38b003c0ace28b08322f0b0032b802e0a82380380200c00f00c","first_seen":"2026-08-01T18:12:10.956344Z","last_seen":"2026-08-07T08:21:18.880856Z","times_seen":5,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":194,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lymazii.digital/","fqdn":"lymazii.digital","domain":"lymazii.digital","tld":"digital"},"ip":{"addr":"172.67.220.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-01T18:11:39.926Z","timestamp":1785607899926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lymazii.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 05:52:30 GMT","end":"Sat, 24 Oct 2026 05:52:29 GMT"},"fingerprint":{"sha1":"89:C0:CD:97:A3:D6:81:7D:5E:7C:13:2E:97:F8:92:89:85:C8:2B:C5","sha256":"8B:28:CD:72:7F:CD:BB:10:F6:11:58:21:2E:F4:8F:F7:21:A1:AE:E3:B8:50:89:C8:55:C5:F8:61:91:07:07:2C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lymazii.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 01 Aug 2026 18:11:40 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 31 Jul 2026 16:17:15 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qyugHG8ajQffgWOmXjclPFpj%2FHW4f7lfhyA1uOZXeBo3BzB9Rz6wh841M1vVIauimDQ43QApRj2lTxHMnEp8pteFZQcz9yexIfW6Q8CEThuiDic0ztGNfdfJ2n%2BNlIaGs%2Fo%3D\"}]}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a246ce7f2cacb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9926,"size_decoded":4388,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (329)","md5":"a0d23656ae56102368b53a9cc87b54a5","sha1":"e2f83ce09ec3824f86db7562e51b1fd629e42411","sha256":"80f24d62ee6754e50ca5d4c31ccc41df3292f727964be7b6534d5c589c5c1e56","sha512":"c7f630561aed5f2d749a538894e50f4e88ec07aae9b065e841b7406745f6065845afd14641cc28c2d1078eb0127cb44a113ad0c0978cbc65932860979bbc88a6","ssdeep":"192:RxQJP0hOhq4/6En2YyARvNEb1P7QC5NrbJEzD9LVW+j6yxQFuZ:RxQJmrNcQMZ","tlshash":"2322856356a32619f11394699fe7270a3275d017a207ce693fcd129ccfc91e8d6a3398","first_seen":"2026-08-01T17:58:05.139325Z","last_seen":"2026-08-01T18:20:35.340702Z","times_seen":7,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":77,"connect":18,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"lymazii.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel-manager-umber.vercel.app/loader.js","fqdn":"pixel-manager-umber.vercel.app","domain":"pixel-manager-umber.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lymazii.digital/","date":"2026-08-01T18:11:40.579Z","timestamp":1785607900579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /loader.js HTTP/1.1\r\nHost: pixel-manager-umber.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lymazii.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 209008\r\ncache-control: public, max-age=300, s-maxage=86400\r\ncontent-disposition: inline; filename=\"loader.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 01 Aug 2026 18:11:40 GMT\r\netag: W/\"5cf86fe0b92c1d1f134a9c90e70741ee\"\r\nlast-modified: Thu, 30 Jul 2026 08:08:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ttjll-1785607900627-ae6fd82c2f3a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1413,"size_decoded":1276,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1412)","md5":"5cf86fe0b92c1d1f134a9c90e70741ee","sha1":"a4ef6bb62c650ecb9869e7d9d44388b94fc5cc45","sha256":"fe7eb0a5aebbdb81ea24c0a16d5eab3e2e177bac277e824698ca7871ab30dc86","sha512":"edf113ae5cf11b1e3a8d337a16f8be91ee38f4a5b663e4b67ac6a2f6532c3481f7c06cd62d3efb96d1151caa06560a5203757ccbacd49079aef8434d57263ba4","ssdeep":"","tlshash":"c22186ac32f6b97243d618da6176ee46f5704214344ec4a0f2dc44552ce5d564f33e9e","first_seen":"2026-08-01T17:58:05.140344Z","last_seen":"2026-08-07T08:21:18.87935Z","times_seen":8,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":13,"connect":1,"send":0,"wait":21,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}