{"report_id":"9950276d-5e67-486a-8d8e-2836d51867fc","version":0,"status":"done","tags":[],"date":"2026-07-22T10:31:18Z","url":{"schema":"http","addr":"visacssd.cfd/cr","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"visacssd.cfd/cr/","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"title":"Visa, un líder confiable en pagos digitales | Visa","dom":{"size":384000,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25834)","md5":"d5cae6d17bfbad597264e13c4dea01af","sha1":"e1baf96012e7f26139358d59500a7cf060a91ce9","sha256":"154d95a849e4f84603e3a3eb86f1931fbe8a4c1d8679521f35a3c7069304b64e","sha512":"76a9f1eb2a0f6aea089724ba02a3acb848e81ed211aabc65006288f558262fa56f03479a8487c2897014576a5aa83a20a6a0c9edc430da25a5e3c3b2ff45015c","ssdeep":"1536:xRnYWPB5GAid5Gg6eetkyN6JNTaun6gz5g1mMsIMMBCAOleacvBAttcVZSA5wGBi:/YWnJet0PZSA5wyz6ZlOAsUm+KG","tlshash":"4084e760e06510ad0b33dacee386f709f1509a13d98159a7fabe13544bc7de72263f29","dom_hash":"domhash53fee334e7d72684f5411fe8ca84a9f7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"visacssd.cfd/cr","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:31:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"visacssd.cfd","ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-19","domain_rank":0,"first_seen":"2026-07-22T09:03:10.359154Z","last_seen":"2026-07-22T09:03:10.359154Z","alert_count":184,"request_count":46,"received_data":1774087,"sent_data":25495,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/js/publicJs/detection.js","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d057a3e97cc7b43d2dbabdd36d6a6e7a","sha1":"9d68aee219efb423810eacc4b3533b1c1ed31261","sha256":"84aee750443f5539e3a03100b2b8426be674da86bb39205d10371b5cfcf66eb5","sha512":"18471b1d7ad786528589146112eb6df0292ef4d4be1d89683abfdd40763e93b4b1b1dcce75ed417660c4c7f876f0bdaf88ba67f08a214afc1f7925304e5a7b8f","ssdeep":"384:aKxMcc58oMk/oB11O8ovIStjC2/RmRAIqlILPqtoCWgIFBbnmqAxpmfTEf1e6EWc:pxiJ/+O8ovxtTpmD7qFTcBbnYxp4ec","tlshash":"c9d2f8d95062a1238e7263b86b524249f722b8137106c1d4fafec7583f79651c2a3edf","size":28484,"data":"","first_seen":"2026-07-22T09:03:17.514427Z","last_seen":"2026-07-22T12:22:26.636032Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/js/publicJs/visitor-track.js?v=ae28934432d1","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05948dd6a59e8355ab339c264d5c954d","sha1":"ae28934432d14d0892eed2757969bb986076ea03","sha256":"2ca9f00f158249e02b20b7b667d0f2da41d205341e4a1e0b634b1bbfefbdc8db","sha512":"92a05b3d57b05537b273fbbe2b366a1dbd760ce781ccab3bb8df354d8bcfad7e7dceda3456dae735ec65bb715039f197c569d410bb29fd41ef292099a8babc53","ssdeep":"768:5UmlQf3+F6C28P1sSoY5f9Le8g2mQHCmmgat/1qzZ8poQx5cPSstfmQ/QTUWnPHN:5UmlQf3+F6nYm8Xxmgk/uMx5c6sXE","tlshash":"5893629a75f32131826320ad0b9b5055b239a153344adde5be5d87003fd9a28e7f3bdc","size":95231,"data":"","first_seen":"2026-07-22T09:03:17.531599Z","last_seen":"2026-07-22T12:22:26.659185Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fef8d5feaf45a9cbf72490a0e3b7fd7b","sha1":"94e996ad7b30be910cac613eae1fada56f945548","sha256":"c840bed7a9bffd0fff30e0650c6f62b7dae7085b8db6e3ca7e9eaeb348f4c8e9","sha512":"9412f580f2763f48477841367fddfea6dc7f5d4403b82d7d7f4cb7d6960f9d84f6c7159e8e972a2ea761cab398ff538866296e87806e13628746daffbf1f20da","ssdeep":"","tlshash":"3c51f15b25b731308523217e9b4fd585ba26e053224bddc9bd6c83006fc0975c2bab8a","size":2693,"data":"","first_seen":"2026-03-25T18:48:01.962579Z","last_seen":"2026-07-22T12:22:26.666841Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc4ad5cdbb7729212025356ddddc291a","sha1":"7d9951682faea51eb8c4d9d1ab2b886a6184b98c","sha256":"49fc0dff8777b0d6a80b2749bd4f6cbb5ca72a055affd973e451461e06d7f495","sha512":"fe26a39a0735d9682250e6de57fd157d53154f8c73e139d4f676da2e4d891fcff650bb9cb0c22dde0f294204d7b364c1077b69f69d21b31a8f5ef460cc3167a5","ssdeep":"","tlshash":"56018c52c4b84cba559550bcfcfd8043522284134e0d7c25b84e611e2f8e77ee2b2be5","size":706,"data":"","first_seen":"2026-07-22T09:03:17.58474Z","last_seen":"2026-07-22T12:22:26.668244Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d479eb8b29bf04d1672f3c5f9ebc35e","sha1":"86436bf2a90aaab45cf068487c432ab639ce145b","sha256":"81fcfa24d2974121e5458e1f0505299ad6bed3a827b2178bb6aa4783b25bebc3","sha512":"0d2b5dbd76d941d10c8427d3714ed2b48f82f6f2baa2c7858e1960ff5fb308bec444dfdeedc65105bc25ba6533b6770db11d51165cfecc7441697f7c7d968743","ssdeep":"","tlshash":"7bc08ca1049a46b032f2a60c6c78500227310e30414d26688a662c0c032e36602b3999","size":152,"data":"","first_seen":"2026-03-25T18:48:01.96659Z","last_seen":"2026-07-22T12:22:26.668959Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f298143d2bcaf1cee98c13551f8789c","sha1":"b095836487ffa24c32e1c966adcd4e40a3f1a915","sha256":"f4180f18a16b3150164d68c95a47e52049853d424b1e487b18afbf77a4f647d0","sha512":"ebf92ef5ecc5787196e796242691d6f543bd35d3280648fd6b64f4eb32e1bdebdfeb5be32fdb4dea63594c1d3f71de08afe5ec26babc4cb375df733b41811597","ssdeep":"192:ZLBSXHF75nDpG1HBX4DSZ1g6PQR4lsyCUbpu2FfPemPf6vPrQpAJg/Che5tf:BCd5wBXbILURUXJg","tlshash":"fe22108402331ab412731afa57879085fb03269371e2d8c87a9dc7550f81dd6cabdbed","size":10604,"data":"","first_seen":"2026-07-22T09:03:17.587423Z","last_seen":"2026-07-22T12:22:26.669615Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d55d5237e421cbeb05d3922765b12ca","sha1":"d1787ac727cd3f1f5ccaa3ddbc990098622cbacc","sha256":"81aacd19686d0b9a6a45a8d6294818c47f97ad74de6508c88f51dd69c9a7be20","sha512":"368c0983c1b8ee23f071cbc6e5685d9a61379851d0550f803815c27988cac7d10109872a9edc61e001b74a729c7b1661e18cd62aa73b5150dfaa8e3e614dd75d","ssdeep":"","tlshash":"1141159077c122b91bd027d59278b540f03a8fc1f42ac1e5e57f8d582d2ab02616b94f","size":2269,"data":"","first_seen":"2026-04-29T14:02:19.320679Z","last_seen":"2026-07-22T12:22:26.670274Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/js/publicJs/flow-nav.js","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94898d4bc1b7a1b23f845e022068b940","sha1":"b308fffe2cd640e69abc66bdec2844e1103f5634","sha256":"13d9a3d0c59cec7f1c656107bf3fe5074129c0030d709ce6add3da4c1ae76f8d","sha512":"752a3ed634ff876a7ed3705d71a5b161c5479b0f68f04148880882418e696c4ef7e98a51cdf93475badea72c9904d7d46b9bea38a3d325e4cb0a6bcf1379cb8b","ssdeep":"192:9T+E3K4wgQpzCqckQTSp/Z6qwVpj2i/i83qL/:h53K4VQpzUt32i/i7L/","tlshash":"d602656972e310716627515c0fb782093f326123600ae591bf6d86882fade6d95f2fcd","size":8278,"data":"","first_seen":"2026-03-25T18:48:01.861371Z","last_seen":"2026-07-22T12:22:26.644559Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/js/publicJs/disable-links.js","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3d88ccd7ca3e3ee5b0d0d7171d98588","sha1":"691d07d57689cd81cd69133bcf9f8f8868eacd98","sha256":"67e89e995c49e0211facb48d3bf2895e993d2af845f69a5ccb14d0b4ff7cd5a0","sha512":"4ee16b1461174289e51480794c9cf07dc42d95c9b1c0da964761b371e6f4efbc18da6e505736af62157f17a9d89fe7b6db205567761334ef54db838cecf1f870","ssdeep":"","tlshash":"c841231625933176bb33506e976fab44fa7045133105ec12b58ce7990fc5b2000fdee8","size":2227,"data":"","first_seen":"2026-07-22T09:03:17.570096Z","last_seen":"2026-07-22T12:22:26.61177Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:31:11.194Z","timestamp":1784716271194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:31:11 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QNcB6nl%2Fft16vcdItA6HGsCcpCEmNmmaKVBGyx3KU6FsWs9kal6HqU4TbtuxO4QKlmR6dYeSI5b6OhG2eSKx28e9Dt20XgjtE4KeVsrCmJxqKsx679mggaL2YLAoayA%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c636f80e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":763,"mime_type":"application/json","magic":"JSON text data","md5":"0306f682168ba33398bed61a9e45e96a","sha1":"5e74258d9242b7e64a36ae573456eec13f546638","sha256":"8357beebe99152dc2e0ac63ff22fa1b1c7a20aa072a7fb1d39d004ab973c7347","sha512":"91e96cd7bfe6323c4a25ce475f39c7c0da85fdd88b5f7172c9c2b5baec3cb7c9d2649dd344dfd8abd0ba1ab33210daca632359866e6601abe2425f852da2bb88","ssdeep":"","tlshash":"87a01128a080080b0022b8288a0882a2822aa00b0f83c80802822a00a28a8888a20222","first_seen":"2026-07-22T10:31:20.45412Z","last_seen":"2026-07-22T10:31:20.45412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:31:15.727Z","timestamp":1784716275727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:31:15 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSGj%2B0%2BEKdgzSu5VWPCMgUzGBmkvKtIeLoM6XDN1pKorKK5N%2B7hy3iC6ezk2rrfhYJo7VmAxMeMYPWHOp9Fos%2BAdkv0EiwMifGHxmaz4Ib1RdRbngGpBDC%2FEjIv0E%2F8%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c6534c4835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":773,"mime_type":"application/json","magic":"JSON text data","md5":"f90c5ee900e48b739ff65689de0094db","sha1":"22c9b3c68dfe07497728b2baef382e01feb9437c","sha256":"870ef938a1562a61a29c74b73eea5b7d46bf7a5fe1c5151c823f5d32f8ce3c52","sha512":"6eb9138ff8a5cd8f8967ff52476abd1005d47e58793a91f4afd5a85d6671c3e1d7b6257e4e2d385954b8fbba5fc33193b51a3caa1f21089e87401ad1b6c3cef7","ssdeep":"","tlshash":"99a0223ca080080f0032f80c820882e2822ea00f0fc3cc0800832b00b28f8ccce20323","first_seen":"2026-07-22T10:31:20.455512Z","last_seen":"2026-07-22T10:31:20.455512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/b6f17f646eec1bd91d062685b0c32876b4326eb3f061335bf0061661c6d95e3b.woff2","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:50.154Z","timestamp":1784716250154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/b6f17f646eec1bd91d062685b0c32876b4326eb3f061335bf0061661c6d95e3b.woff2 HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=74705dde-d198-4ada-a81b-f16a6de93506\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:50 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-6a54\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z548SWXJivz%2F0eM37WmS6H0jCU3fdJsZO3aE01oXhe6oQJ%2BL2hssErPOzk6iR%2Bze5aXlk6aU8FSJ07zrGqfSvD%2BYy1Bv0jAbRENcmVQOIyP%2BbK3jJmVeSMpGW4AGR6A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5b37f1b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27220\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27220,"size_decoded":28090,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 27220, version 1.0","md5":"c119a30b9a76bbf95a30e9fbaa82c977","sha1":"a87201cf8caeb3ad4be3e4f914f2f97def0777c9","sha256":"b6f17f646eec1bd91d062685b0c32876b4326eb3f061335bf0061661c6d95e3b","sha512":"879df8b1d1731dd845954df4235ea0ba7d20ef94e0f25e261e41a0240fc0d99f91ac370af39f66d44f17a8a5b40b18abe9618d107ec58c6ebaf330d9371c6e16","ssdeep":"768:jJXVSe9hSkEbgrD/uUlI0wyydXSF552zlb:jJXVsbw/uUlI0wyylSXU5b","tlshash":"f4c2f160b51d3eec64622c7cf7570fda2d89f64c8b42c8d80c9fd8fc208ab62945a538","first_seen":"2023-09-29T12:53:42Z","last_seen":"2026-07-22T12:23:28.818248Z","times_seen":242,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/08b8fe24a3787b89f5737269eab4549898ad8120460ec25719bde3bfe063a0a1.woff","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:50.158Z","timestamp":1784716250158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/08b8fe24a3787b89f5737269eab4549898ad8120460ec25719bde3bfe063a0a1.woff HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=74705dde-d198-4ada-a81b-f16a6de93506\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:50 GMT\r\ncontent-type: application/font-woff\r\netag: W/\"6a3f891c-27998\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xDpNck5RlZnP0VqkLf4L8WWgjP0lFoiCkssvz7Jg4IxZd42m6W73PHQiDWjHOs%2B88%2BoxPlOfnGKVu7tsIVaQE1%2FhxYZXkxEInHA%2FzazU9kDaWLvMeueZs7uUwCgDyNQ%3D\"}]}\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5b37f1e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162200,"size_decoded":81176,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 162200, version 1.0","md5":"ac02c95fbb086175c6cd17bf66ac288b","sha1":"0d9f74b8560030d83d6d6588596f033a7df890f3","sha256":"08b8fe24a3787b89f5737269eab4549898ad8120460ec25719bde3bfe063a0a1","sha512":"c68d151c41ae022c64c0cc6cf2f25f295331a851ce892c2c9dbe35659a480067f09ba2efe751346f136c709fba74321e2c96cd1d5bc06e691d0eac0075b19be5","ssdeep":"3072:gibpD5sEMEOxa0sxqgNQ9hzPZVrgkupwh8FwRRxxkkec17zglx0yanAOeTc+7FR:rbR5i1xaVxqzrPZVrgkgw+Fw9xkkeY7l","tlshash":"55f35c43e762eacec81396b94d5771648dfaad12823df746b9466e02f4188f8483ce4d","first_seen":"2026-01-29T18:28:34.656524Z","last_seen":"2026-07-22T12:22:26.634536Z","times_seen":25,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":548,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/c96e7c089ddd50f440a16825d8e12ac1fc967c9de2773fc52b44ee8aaca996fe.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:50.211Z","timestamp":1784716250211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/c96e7c089ddd50f440a16825d8e12ac1fc967c9de2773fc52b44ee8aaca996fe.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=74705dde-d198-4ada-a81b-f16a6de93506\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:50 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-579d\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4g0%2BLSJP5%2FIN6cqFjyDrjDz9f0VVPTrXbdceUttp0G4WRsBJ1ioEt8wHmyWCnh1ATVEcdAHfd4f4NcgoEOaGsajtNVG0TzKN5WTiH8bayAodxqdn3mMcDEX74v7kGw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5b3cf5e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22429\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22429,"size_decoded":23276,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x225, components 3","md5":"99c2b758e6ac098b7ff0f1a9a92a8181","sha1":"48977e8bf05a590a8c180020b86bc68b6d7f78ca","sha256":"c96e7c089ddd50f440a16825d8e12ac1fc967c9de2773fc52b44ee8aaca996fe","sha512":"a6678af35673607722a9a8b3f5b9f6b0cdaddb9a1ead0b4ac48b84d9e834805b5fb8d90cf452f055731627142182651078ea60019a08b102f83203c05268bf87","ssdeep":"384:FpSsNubyxNrzTOFUTwj1UdyJt+QkF97qV7GklMQJSP7e1X:FpSs/fzTOF3jzDm7qNvnJv","tlshash":"6fa2d1cda76b1d173cae883e1df46f0922415648148e81ecf15266c78a3407c877bbda","first_seen":"2026-07-22T09:03:17.513294Z","last_seen":"2026-07-22T12:22:26.650028Z","times_seen":9,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:30:48.164Z","timestamp":1784716248164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nlocation: /cr/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWVeNbq1Ygon8yLn2HnfYz7IJcRIwxPULCfLZsE1XpYerTZtnPYj42K9fPz8Vy5ydbljKlurEJFgtpKkVsnmsdWEbBfFZ%2FWOESbvfQ4SAen3ArV4ZVKpZo78Y2rYXpc%3D\"}]}\r\ncf-ray: a1f1c5a75d9835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":0,"dns":35,"connect":16,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:30:48.610Z","timestamp":1784716248610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/ HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:48 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RqaUvHFAn21VRB4PNQnO8yw7WjdM%2FNxmIvzedY%2Bu5UICotvzm3rYIn8bDYp4BbODIZj48DuQTdvsvWrgWs%2BhrE6iKJHCbwkQdfsZMbadXb4bTtwOHjbX9QSSiKRT920%3D\"}]}\r\npriority: u=0,i\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: 0\r\nlast-modified: Tue, 21 Jul 2026 16:16:45 GMT\r\npragma: no-cache\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5a9cdce35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376908,"size_decoded":55644,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26066)","md5":"1e9ec04c4370c5fca24ad226660688e2","sha1":"2bbbdff59913b4fc04136645407a66116163d876","sha256":"6e06f98a8869f8e0f70a3681c5c4b4a266596a8ecc2f9eb04651fb26ab2140d7","sha512":"91a47be68a9fa90e47a2ea02e509bd6f569a40b93ac7d8bcd37074ebf8e2c1f8a21c1845718832ea641750b661ed03175c33ef424791ff2d688e6279ed6515c6","ssdeep":"1536:9RnYWPB5GAid5Gg6aetkyN6JNTaun6gz5g1mMsIMMBCAOleacvBAttcVZSA5wGBv:LYWnJat0PZSA5wybOZlW+UcmcKR","tlshash":"1d84d7a0e06510ad0b3396cee395f709f1605a03d98159a7fabe13544bc7ee72363f29","first_seen":"2026-07-22T09:03:17.542842Z","last_seen":"2026-07-22T12:22:26.61031Z","times_seen":9,"resource_available":true,"data":null}},"time_used":667,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":373,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/css/publicPageCss/cta-button-override.css","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.151Z","timestamp":1784716249151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/css/publicPageCss/cta-button-override.css HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: text/css\r\netag: W/\"6a3f891c-1ac3\"\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJykll1dRoI6w%2FopdIz6b5nPO%2B3jWo%2F01Su%2BgWJifYVzYSIJZa%2F%2FRXiSJW%2BM0XmtOGWX7K54NKF449LXk%2BJRWpw70eXRmJHtS462ztekYL3b4ZIM5ULsqF67bFKftvo%3D\"}]}\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5ad2e1c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6851,"size_decoded":1698,"mime_type":"text/css","magic":"ASCII text","md5":"e18058a6e149088414de60e97d225827","sha1":"034726020e92696112e74efcfb2e2e2de62971f0","sha256":"32aa2f48bf4ece071198c5ab9aa5649c0aab12bcab03bdc94827c59820b95857","sha512":"6970789ee9831c10d8661c88a3af93bd5664c874f1c3714ae43180f2ce86ad9706443c4bcd7507dfa2641683d7207a61f98c4125efb2e3c46df201a6782fbfa0","ssdeep":"48:yAkGlBGlGKhJKnAIGlUgCMbIvP9TjSmGkglBgluKhJKnGIglUCC8XRNYkYkelBeM:YiCCWIvP9q0i58oiOiRiRiA","tlshash":"e3e15921f32b66ac2e0f0456564b2d746fe2b7311010e79779f015ee1f96ed92e0c91e","first_seen":"2026-07-22T09:03:17.532463Z","last_seen":"2026-07-22T12:22:26.659907Z","times_seen":9,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/12716558bdfca987bbfbc3449e1d2109443c5c350480e665d02d6446400468f2.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.292Z","timestamp":1784716249292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/12716558bdfca987bbfbc3449e1d2109443c5c350480e665d02d6446400468f2.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-8b2b\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MdEScXGp%2F9g77NbmPyn%2BIf5AKITrgMHfLPFRVzDk5k%2FOSNnHt5Y7rNroCQQ5ztSqIwffN2A7k9SwI59K%2F0bxvsz%2BlIY9BMJYtqlrNqyGipI459Gonv1c98kEeuZveLU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5ae0e3335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35627\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35627,"size_decoded":36480,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x900, components 3","md5":"01c13ef6403f003eb923264736dd243f","sha1":"18ba3b68da1eb9804309665fdeba4fbc73ae5325","sha256":"12716558bdfca987bbfbc3449e1d2109443c5c350480e665d02d6446400468f2","sha512":"ccc0ad043676c27b43ea1bf6316caa4a08e72c139318eafa0da3522ee5baab73dfbd258c9e2ef075020d924fb4430e1f1744b57a76886bead9a32fb77898b075","ssdeep":"768:xeCBk/Jfvn7a2gSdCSV7yEHMj8wzYolVN89gYRbK9Bxp:xiJX7a2pCSAE1791NsJ","tlshash":"8ef2e11f97ba6d1fea58093586cfd1ccb542c2d6811bd8a3cb7c2829cf6a5c14628dcd","first_seen":"2025-09-17T17:28:07.976607Z","last_seen":"2026-07-22T12:22:26.65856Z","times_seen":12,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/643b19de2d756e7e55bda1d91e446817afc6826d80087e8724a9dca5f3b9bcdc.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.294Z","timestamp":1784716249294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/643b19de2d756e7e55bda1d91e446817afc6826d80087e8724a9dca5f3b9bcdc.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-17360\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ahp8TdIcEVHYTly9nEujDsrzf5DDpsCSfferMs%2BtbdKlooSW8WcyPHnvJC2cgAP9B1KDu74Mvw2%2FfwvztjN3eKNxZawutYX5DW3tFMx2JXaiD75oiGijv68O7EGJIKg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5ae1e3435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 95072\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95072,"size_decoded":95920,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x900, components 3","md5":"4b12ca8a65289eb912936bb0a9bdc301","sha1":"a5fbc37b4759ca7452e9314d04c0ca20654e0213","sha256":"643b19de2d756e7e55bda1d91e446817afc6826d80087e8724a9dca5f3b9bcdc","sha512":"3106c46799696aac169c878a3869f47f530be85ecd348e0a411a8a1e061b2a7702955bc92720f4d453b83d1e6e6a1d688d0815a144508a4d5643cba3e753b305","ssdeep":"1536:9yjv6ytFQsQlEAhA/DK8k3QkzXeDsHCDyWOLz6fuBCrA7Bms2fr+2AcQQxwk9PO5:9JyTQfbOAHkkFLmsQ3AFk9POrTONmiTC","tlshash":"65931233a3c60e22da55530db1223fbd2816adb5ea3d571011b12d2af3b43735f9629b","first_seen":"2026-07-22T09:03:17.522709Z","last_seen":"2026-07-22T12:22:26.626903Z","times_seen":9,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":393,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/js/publicJs/detection.js","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.145Z","timestamp":1784716249145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/js/publicJs/detection.js HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a3f891c-71d4\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fcg79hG%2BcvbkT4CvCiewfNlwiIAib1hXUD7c64f8crWSUS8dDOkRvCkPfUtCs8%2BT7KdeAlaRTXevs3%2B5tFNeAhwbVASJoVNDyiZ5FVLJPdx9kTRnlkYUb75VUSrmtmk%3D\"}]}\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5ad2e1935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29140,"size_decoded":10843,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d057a3e97cc7b43d2dbabdd36d6a6e7a","sha1":"9d68aee219efb423810eacc4b3533b1c1ed31261","sha256":"84aee750443f5539e3a03100b2b8426be674da86bb39205d10371b5cfcf66eb5","sha512":"18471b1d7ad786528589146112eb6df0292ef4d4be1d89683abfdd40763e93b4b1b1dcce75ed417660c4c7f876f0bdaf88ba67f08a214afc1f7925304e5a7b8f","ssdeep":"384:aKxMcc58oMk/oB11O8ovIStjC2/RmRAIqlILPqtoCWgIFBbnmqAxpmfTEf1e6EWc:pxiJ/+O8ovxtTpmD7qFTcBbnYxp4ec","tlshash":"c9d2f8d95062a1238e7263b86b524249f722b8137106c1d4fafec7583f79651c2a3edf","first_seen":"2026-07-22T09:03:17.514427Z","last_seen":"2026-07-22T12:22:26.636032Z","times_seen":9,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/js/publicJs/flow-nav.js","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.147Z","timestamp":1784716249147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/js/publicJs/flow-nav.js HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a3f891c-2056\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHsi5nxxzpKEbMqPqwFKMw1FVPS5sSvEfwZKwo0PqdV9ZZzygD1zM4Tr%2FZM%2F3xcsq4OutK0YDnYAfJqTLE1EYcTdGvm4X8XOAsb8iW%2FpKQa4Kk9dOpaNRo6wnSwaEno%3D\"}]}\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5ad2e1a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8278,"size_decoded":3435,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"94898d4bc1b7a1b23f845e022068b940","sha1":"b308fffe2cd640e69abc66bdec2844e1103f5634","sha256":"13d9a3d0c59cec7f1c656107bf3fe5074129c0030d709ce6add3da4c1ae76f8d","sha512":"752a3ed634ff876a7ed3705d71a5b161c5479b0f68f04148880882418e696c4ef7e98a51cdf93475badea72c9904d7d46b9bea38a3d325e4cb0a6bcf1379cb8b","ssdeep":"192:9T+E3K4wgQpzCqckQTSp/Z6qwVpj2i/i83qL/:h53K4VQpzUt32i/i7L/","tlshash":"d602656972e310716627515c0fb782093f326123600ae591bf6d86882fade6d95f2fcd","first_seen":"2026-03-25T18:48:01.861371Z","last_seen":"2026-07-22T12:22:26.644559Z","times_seen":10,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/fa5d3046fac8df1b2850c4e37310dfb7c0811440110eff01c1bef2606663beb2.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.285Z","timestamp":1784716249285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/fa5d3046fac8df1b2850c4e37310dfb7c0811440110eff01c1bef2606663beb2.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-48d6c\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qG0EzeIP3WJZ3uRt6FmRDVAmOq13r%2BL%2B7aPY91R09uCFub%2FusEwovd4QYPqq3Fx%2BwVZzCCxRQYvWc6Qr4AZmMPOmt5HI7EtP9kfrGGLqMGW27oBKrLYpOt3rmEHfXgg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5ae0e2e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 298348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298348,"size_decoded":299201,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"dca7f952bcc00629abf3225f0b7b229f","sha1":"bb7efb609c1d8f396b5f74a5abd318e430f081e5","sha256":"fa5d3046fac8df1b2850c4e37310dfb7c0811440110eff01c1bef2606663beb2","sha512":"a81477a8744e7cefcc84fdbf625ef1ce4f1612ebb020c86e1e184a2f2196e4a62b5b7801e2eefaecad4ce5d3b9fffdcb57ded4accf7c628bf80f100f19291159","ssdeep":"6144:MyiDSglderCfNVZQ6A4HrT6tBrMC9SyANlCWzl7GUzS2yvA9:YSederCfJHvCH3UlCKl7GKS2B9","tlshash":"475423075f10dd53a12425bc3cc963bf1e89be7feae581231535ba86b4096e198c2cad","first_seen":"2026-07-22T09:03:17.515361Z","last_seen":"2026-07-22T12:22:26.645547Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":751,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/b1f0a12eaf7432e2a7efc3fb5f5be09a5a4b80aab40d2a44534b7b684e4c8096.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:50.207Z","timestamp":1784716250207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/b1f0a12eaf7432e2a7efc3fb5f5be09a5a4b80aab40d2a44534b7b684e4c8096.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=74705dde-d198-4ada-a81b-f16a6de93506\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:50 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-5850\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5EEmAqsvpMFweItatenpnC%2BKs%2FN23wWJZvSKw6C%2FfQdhCcUc0TlFuxPrOV8MXuPDhs7Rel7BGWLFCqWgOibJv67FpLKPBm1oL1CijAwodLoSictxz3ZUOG3TIHwwOs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5b3cf5635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22608,"size_decoded":23457,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x225, components 3","md5":"c3d4a45d682527e85b68ebd31e1d1b6e","sha1":"ce3a1cbfa7c3e0da216e998bf06e648d99ca9930","sha256":"b1f0a12eaf7432e2a7efc3fb5f5be09a5a4b80aab40d2a44534b7b684e4c8096","sha512":"514655ad8a1fda75d50f9071889b0bae2bdde253afa1056db16c3640bbd66d2a045cbf65fd1b232986db847ba99bf23cff88eb7e58c8e4eafc735aa7826065d7","ssdeep":"384:UCmrqZhw3KCB23bm+pdj1tyERi1BiA0pRkVY4ha83jdQDCd96C7tDGhED7zbSH2z:kkC6zrm+phpo1Bcd4hnTdUsRGhgfbSMB","tlshash":"5da2f14e057f48b4cc218cea409ab9b7772698b90b19befa23d13cf6820706f5104e0e","first_seen":"2024-05-24T18:23:00Z","last_seen":"2026-07-22T12:22:26.635322Z","times_seen":35,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:56.091Z","timestamp":1784716256091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:56 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4aGJsMPb4Pf2POa40Zh0JIaALOZPaXkbgC3T%2BnKGtUPhspGbfFHfKh3EyN8F5gWHyAptFBCIiHS0qde2zU65p849yyh%2BYe1G9nivFZ7EbkPPSMTkzKC613O1qkhYHpY%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5d88b3a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":765,"mime_type":"application/json","magic":"JSON text data","md5":"34ed3828dc35d778317e2dc207e49438","sha1":"9d549ef23fcf0f1c711a6093b8fb1bcc1aa58697","sha256":"00d44b731e0cd53a7f20be7395d3f8f7fd3b12580938dbbc92e7594ca64d9a6a","sha512":"1d713ff73f01addb9e7faaddb0f5dd2fc3ad3ad22ed53878cd7ab59eea8771e4d5adaa659daab84abb7fdd89333a0e430cb4fceeb877311471715dfc4f03f54b","ssdeep":"","tlshash":"faa022bca080280f0032f80ca0080ae2832ea00f0fc3cc8800832e00b2ef8ccce20323","first_seen":"2026-07-22T10:31:20.463492Z","last_seen":"2026-07-22T10:31:20.463492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:31:03.642Z","timestamp":1784716263642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:31:03 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DP0720jHKtNMpi1TgFS6Ifo8ZUUjBSR0D7BcxNN9pDaZmM4AxeJeiF1aRGPyOFam9dgfpoChXsEMx%2FN91Tb6%2FFJvwLThzBOnro5vBc22kZYHdTP1KSzJ1wX8gxlLGK0%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c607b8b035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":765,"mime_type":"application/json","magic":"JSON text data","md5":"9d363e809cbdd4c700a94e6d7a6f0c17","sha1":"42462801f6259d06606185de7af50b48fd5a9179","sha256":"f89e2c40fc6c39eab4faf47cb7a5a5feb752b384a027eaa5e5f40535d1a47866","sha512":"7b7e7454bc537655957f7cc6a386baf274f43e6b2c5071933a592c4925ed2daeff7e44663a0c6d5d779de2c2c94abe864ab91e03fe2f88940c1949375f202470","ssdeep":"","tlshash":"58a0223ca080080f0032f80c800822e2822ea00f0fc3ce0800c32a00b3af8ccce20323","first_seen":"2026-07-22T10:31:20.464503Z","last_seen":"2026-07-22T10:31:20.464503Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/05f122249fe386ec94f9dc8931b0896d16ef120c943909e3f1f6e0735f74cf5b.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.297Z","timestamp":1784716249297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/05f122249fe386ec94f9dc8931b0896d16ef120c943909e3f1f6e0735f74cf5b.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-19504\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YqgY7XvtwjLek0%2BKyEqgVjtdplxrCGbImW%2BORkzZgrd8BuoGq9xWVHpuvmcCPHIQO6oo9xAUHrhmzSyxx0kmJV2XhtPjT8sLa7pQtFXaJfOOTsmlf1ZzatcfTdVtKPA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5ae1e3735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 103684\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103684,"size_decoded":104533,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x900, components 3","md5":"c36effe523ca9306080c68af8a0c050c","sha1":"d4456f45c188f3fdb5d4cad2bb8be653cf86b668","sha256":"05f122249fe386ec94f9dc8931b0896d16ef120c943909e3f1f6e0735f74cf5b","sha512":"72d72fb2a0f190cb2055a8fc81652a2746a60c5eade1ba04d9fa51e1ac47ea5c9c7153f3877c1b8b55be868d2a62bc91a32b0370353272cecfc85e29a4bcf77a","ssdeep":"1536:HcSF+OajY5ob8zuI3n3FqA1ToB0lz4TuApP2YYtHEW7xXxh1F+QX3wI+u+PMi1W8:hFFuQuInI0lz4p4EWFX//+Q/vi13","tlshash":"5ca3126a25c574ee44c64d8d57d92ba0f9ac6be11b8d09dc283c374048e5f786ff20e6","first_seen":"2026-07-22T09:03:17.517276Z","last_seen":"2026-07-22T12:22:26.638919Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1007,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":599,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/images/publicImg/favicon.ico","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:50.963Z","timestamp":1784716250963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/images/publicImg/favicon.ico HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:51 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a3f891c-3c2e\"\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j9tXRa%2FTiHYQwB0vk0HUnVMX3CxFIL9iNFfrHfkNt%2BzHmkfLm1qdXeJNkWuEOdziqC7fhon8vjMVn4MVmz8Ublkkd5jv4BOz%2FI9z8ZbbSAMH5Y8elqM17HUasE1qq6s%3D\"}]}\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5b88fe735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":1328,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"84cf5c9481517216aebbdeef45bbc579","sha1":"eccf5493218059e75d373193286eae6383b4e78d","sha256":"3d7dd058cf1ba56277b3e62c0b520398aeecd1e49e1e2cacb74779f75f475bec","sha512":"3c5c0bfb8dabd6b28e855155f5a271175083402c561c0550677aa22e57dc46d406ff95f7f7ae2ea2765616c68bb452b134f7cafa02d95b91f53612e84bc24cfe","ssdeep":"48:cPPPPPPPPuPPPPPPPPZFnPPPPPPPPPPPPPPPPPPPPDPPPPPPPPPPPPPPPPPPPPDl:PjjjjjjjjjjjjjjjjjjjjTuuuuuuuNk","tlshash":"9162d787b117ffcaf0e70fbc63d589a23ec058ea1698781120d702671839efa8757562","first_seen":"2023-05-31T04:00:37Z","last_seen":"2026-07-22T12:23:28.850915Z","times_seen":326,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":404,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:31:02.142Z","timestamp":1784716262142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:31:02 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YnK0QBWu%2FfGkAps0adpFWl9O4ANWR8R2z%2FtIBgkIiuCUz5sqKESS07sA39i9fvh4VwLqIai4FhN4ACOgE4fvrKdj6JcoaKUUCtSotWJA7ayFqo6IhCaNjbDu7mV73pU%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5fe6f6a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":765,"mime_type":"application/json","magic":"JSON text data","md5":"95d1934c09c6670b8f45d27c3667a78e","sha1":"00cceaf1f57b2338a9fbeaa4cb14eb6cfbac0cb3","sha256":"b0d80b9f58f4ac492e19ed70cd1f3158f2fc0157952cc543a16176b4609c82d2","sha512":"322172829dceb8fc6fd1336ea2990af3e1487f81acae82805ddf50edc0b8738d5a7128f59c5496494dce88fe487726b72f82763e8eb9c8b5e982ff32998ecedb","ssdeep":"","tlshash":"5ca0223ca0a0080f0032f80c800822e2822ea02f0fc3cc0880c32a00b38f8ccce20323","first_seen":"2026-07-22T10:31:20.466604Z","last_seen":"2026-07-22T10:31:20.466604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:31:06.686Z","timestamp":1784716266686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:31:06 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMRfS%2Bvqg3h%2FpnLywPE6kEV3PveT%2BQHbHF75Mq4MuyxqTwU3XW8ofhCy0FAkcDHojXFeiBCeNPRFrMZ6ioXGju7t2Bf2vGQRwGs8CrJqJQ4A%2FnD7Qcb4LxWOWTV3%2FvE%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c61acb0f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":771,"mime_type":"application/json","magic":"JSON text data","md5":"dbd54f69c6459fe65420fcadb105fba7","sha1":"38d702511bdcba1b7cf5558d90bb2592c1795edf","sha256":"dbf3abc0ba07753b856f74394eb8e5a0b537a9fa47da83ea4313225465bc8072","sha512":"e07fe25ca25e620c8660277e303d30dbc767b7536ab360fd837422489b8ff8371057001366764450f18c9456939039f060650fcaee2e97b2f73c54e317562317","ssdeep":"","tlshash":"42a022bca080280f0032fc0c800822e2822ea00f0fcbcc8800c32a00b38f8ccce20323","first_seen":"2026-07-22T10:31:20.467558Z","last_seen":"2026-07-22T10:31:20.467558Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/d6e4265fc94429e9f45add487f1cb929b0171f0fdfdfecfceab290753a765063.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.295Z","timestamp":1784716249295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/d6e4265fc94429e9f45add487f1cb929b0171f0fdfdfecfceab290753a765063.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-13a40\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eofbxciMz1NtKs%2BJ5euhQgC93ei2OUYKHBst%2F9e3bYDWarXznRMzVSDCebSclkTUzs1D3DQIs6PcmhB1tzMAUSXrrBv7t%2Bsa4AEfgs%2BP71crKG%2F%2FLJjjJvb2X5WO2cc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5ae1e3635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 80448\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80448,"size_decoded":81304,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x900, components 3","md5":"99b10a5271b2da84f879f90c0e29d4d7","sha1":"e35005947848d0f169629adfcbc1795df7bdd989","sha256":"d6e4265fc94429e9f45add487f1cb929b0171f0fdfdfecfceab290753a765063","sha512":"5aa62cd4c0c070cdb4b47b86e87b8a58a4353e92c19bd97f8332b721ffb7b350dc36e02e1bf64e39e9401d82b461d87f3897b075ef61f89e8c650231e9e9ea30","ssdeep":"1536:HwKIwLD4IT4TipV1byNtQPhQy0H6Mjefj0Kluv96F3otKu49ljvWEund+eQ:QKDLD7EZN65OHUPru43TxS+eQ","tlshash":"837302eeb52c12f8d65d5b70f6902f3053e26742302fa32a8d2cf65d5791ce45b80aac","first_seen":"2026-07-22T09:03:17.516382Z","last_seen":"2026-07-22T12:22:26.627721Z","times_seen":9,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":384,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/4e5653ec74e07b816fe38240145e0e737e01eb62af6561ac110dfaf6da023b9f.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:50.215Z","timestamp":1784716250215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/4e5653ec74e07b816fe38240145e0e737e01eb62af6561ac110dfaf6da023b9f.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=74705dde-d198-4ada-a81b-f16a6de93506\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:50 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-5af0\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wgMiWMquwqWV3L09xLMcUZpjaACqzRt9bbmG3PAs0CUbBE2Wq7r4%2BHNNI2a6BD3Ug4cLh6aZ3zy4TTGggSrchfiv5ECTswRyrCCwypZzAM%2B2y77JG7E5CnaW2AJ8EBI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5b3df6a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23280\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23280,"size_decoded":24127,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x225, components 3","md5":"5c5a950efbcf45ba9feaa0cff3d035f1","sha1":"7aa856cc82ac5083223102ddac8e766b937b90a3","sha256":"4e5653ec74e07b816fe38240145e0e737e01eb62af6561ac110dfaf6da023b9f","sha512":"8cf107180f967cbbd238df0b5aaa3493affef977547a97186134ce782e6f71688db7bbd5f4d9aa349eda64495e54abdd7a23b9177ce962741b9c4fbef4f15093","ssdeep":"384:NwobrUcCPrqmmGGtHLwR5hxyG7R9K6P1gnWWX/sUsqUuigTz7WbB8yHQa6:xUczXLa5TvTZP1gnfvtz3OyyH76","tlshash":"baa2e1872f1e9de6ae973a3e12f0435a316b14e779adbe7f0d532500c45a80d9a4c78c","first_seen":"2026-07-22T09:03:17.564497Z","last_seen":"2026-07-22T12:22:26.664448Z","times_seen":9,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:31:00.617Z","timestamp":1784716260617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:31:00 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E9m9g6vOSZlQbF7DgaB98lbRK7CRIm3eZCcRyDSeMKEXwxiZkmPYmZ9YlLD17j3wFcPdeVX66TWDRseOdRBPYH%2BG0c8WL2%2Fw6ojpyWapoRr5jEoUeHhby9lH4C4eTFU%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5f4de5b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":765,"mime_type":"application/json","magic":"JSON text data","md5":"b27a4833a4e9c5dd2a1d240db9835917","sha1":"e757e23fa10166d255b91e37ac00dede35d8ce28","sha256":"e39b9a8c81a9495c33dcc6a617f732bc167f23872d863e6a8163eeb37977c508","sha512":"4b3995bfb4433d606a1393057ea298921c14b73c9341d815e8f418ff0ae84fda0730618828b314b295f828ffdbe75df826918925082f1ee93d41bb61c8b4600f","ssdeep":"","tlshash":"60a0223ca080080f0032f80c820822e2832ea00f0fc3cc0800c32a00b38f8ccce20323","first_seen":"2026-07-22T10:31:20.469678Z","last_seen":"2026-07-22T10:31:20.469678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:31:08.193Z","timestamp":1784716268193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:31:08 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2Brbuu6FKX2RSwviqjedTXxlnLiPHAlDgdNKtb%2BT9xQ0YyHhRGvjOhuUQ0s78EZ5DdlVZ9tyAW7scyKB%2FYdUNcxwFGCXSrQcLEvMq6QHpVD4ldM64V43Rq4JRYTjwgo%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c6243d8635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":767,"mime_type":"application/json","magic":"JSON text data","md5":"cd2a41d58714430b08a34cb89d59f2e1","sha1":"9db81d46a04f7ee190c5aaea525773f232dd9bca","sha256":"e6c41dcbf16ef5566a83b041ced925d6f0c045edacf261ff11be572d7ad34c0c","sha512":"5aac8a73a16f4607eec0754ec31101f2aad5d1cd4f0f42f173bc1db52f44952a247dbb37555a5748f1ff3eaab7ec71fbc51e1afeae96bce675b046e26d64bff0","ssdeep":"","tlshash":"b2a011a8a080080b0022b808800822a2822aa00b0e82a80800822a00a28a8c88a20322","first_seen":"2026-07-22T10:31:20.471064Z","last_seen":"2026-07-22T10:31:20.471064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:31:12.692Z","timestamp":1784716272692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:31:12 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FNzvpRlFrXvUWMDtSC5lJ%2FF1BQ8N3w7N4k1%2F6K%2BD6g4u8Ie4R509qFqIhZKJPWh05%2BDlAKcW4NaC8EzqmWIiz4dj32sEYCpylOJeJv7L5c6wFi7PUAQV8UYMSlLVE9o%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c64058f435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":771,"mime_type":"application/json","magic":"JSON text data","md5":"2a3d645a5b10df470ee75c0873b58334","sha1":"a4fc96ac08bc26de819129fbc5272d5555788100","sha256":"e62c8bd9ccf38b04c681792a57b5434e461c477a96187d568f94ee136d4c4511","sha512":"137f1589716705b20ed93ba8e54a5740808738d490bfc9d23ec1044e91cfc8a473c98f0f6bfa5c487946b144d11a8303cfea7f2ee492f6e7c551a3ad997eb983","ssdeep":"","tlshash":"d9a0223ca0a0080f0032f80c820882e2822ea02f0fc3cc0888832a00b28f8ccce20323","first_seen":"2026-07-22T10:31:20.472018Z","last_seen":"2026-07-22T10:31:20.472018Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/8a7c5a21a93343a2c10b716dc161729d9599b6653c5bacebf20dbac9691b5d44.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.289Z","timestamp":1784716249289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/8a7c5a21a93343a2c10b716dc161729d9599b6653c5bacebf20dbac9691b5d44.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-770e\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cxWTKSR3Zgl4k3PjJ9bDZa4Frju3jJ2NtLCggYnlUOc2Ej5SWHqQApRgSZznafOOxaavjUPO%2BqWAVcCuRQHPikNkf7ZwhxV7kM%2BqQfyngbZrW57SejkFPdPEjFl4KU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5ae0e3035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30478\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30478,"size_decoded":31325,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x450, components 3","md5":"51794447c77def8cbf4e38ecfeec8a13","sha1":"affa0a23c0baac686d5b272edded409326508262","sha256":"8a7c5a21a93343a2c10b716dc161729d9599b6653c5bacebf20dbac9691b5d44","sha512":"d94c9af32056691ab9d7a12cf5432b153220c256d1b055f65b73bd7372f50b2853166a00a9de34ededc20a2321783dcf56fd5f6288d8624b71c0302fa681251c","ssdeep":"768:/mo13ER+GhrirhqnWZ9qjOAlgoaiPa1m1Y:uvjINc29qiAPQm1Y","tlshash":"c3d2e11682569292d7712b303ade9acc374ba05f592ddb448182b1e094c2edf7a3cdfd","first_seen":"2026-07-22T09:03:17.568872Z","last_seen":"2026-07-22T12:22:26.657888Z","times_seen":9,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957.gif","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.291Z","timestamp":1784716249291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957.gif HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\npriority: u=3,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-2b\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E7gvnQE%2FjMRVAg2aNAjDldhAzkqwW9dY9dLt7fRgW0k49W78j1njsrNUGzTvIBsxwPBrxk60J9eNaaJWAEFx13Wc%2F2Fna10PCjWkW6pqPwS9aLoK5A9SPfMcLCiAVkE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5ae0e3135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":884,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-22T12:22:26.663706Z","times_seen":1359,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/fff7d604628c9c3cc8f9b63fb52e24e077d36f9a19face7ef473a1cd4b8292ce.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:50.213Z","timestamp":1784716250213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/fff7d604628c9c3cc8f9b63fb52e24e077d36f9a19face7ef473a1cd4b8292ce.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=74705dde-d198-4ada-a81b-f16a6de93506\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:50 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-5062\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pc5Wk6pXue5kEVmssRpR8Zgvi9vIapSevC1e71AySJKIOL6Y4qCUlO2r97MEOWEngMqQ%2BretOGaIJIE639rCtkcgH5fY%2F5Cg5BA%2Bv5xG0CSnNvvXSj%2FO1lr2sYcsKEk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5b3df6735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20578,"size_decoded":21429,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x225, components 3","md5":"582bffab983ef4e1b0784a78bf9f138f","sha1":"f717a6564012cf7246aae9fd02bb64d3aea73b23","sha256":"fff7d604628c9c3cc8f9b63fb52e24e077d36f9a19face7ef473a1cd4b8292ce","sha512":"4e9f61d2a368cac256ddd0e522329ddcb8701e12d23852ab3b0c2013285410098954fbb543f466dd78bcce703cc72c76855dc9e21bdb3630f071f5b796751df8","ssdeep":"384:7rJD0uPoKZfF+ceNQuQd3uvdB1zMhsLQ6ly8oXk1YRrCe6y/:7NBoO+cT+l1Qki0oCjy/","tlshash":"7b92e0143e72b0834e409571e295812e0f81ce66cf99677191fa3db258bd026b2b71db","first_seen":"2026-07-22T09:03:17.545696Z","last_seen":"2026-07-22T12:22:26.612783Z","times_seen":9,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/cab2e68f9c26236b217a060a3efd20783e706ea94ba77d6c8e40289ada0402ac.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:50.217Z","timestamp":1784716250217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/cab2e68f9c26236b217a060a3efd20783e706ea94ba77d6c8e40289ada0402ac.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=74705dde-d198-4ada-a81b-f16a6de93506\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:50 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-7034\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BP69nv7iIGSolo06o6DHqvH87CZVOci0CcdgtwnpmwvulKLKAtIFeiAJJBwuHZ0wfTtOINV80DwVkz63AnmkSnfkaCuRVf7WoR3ElGxeEX8tA0XORrlLzT0PQ43DAlM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5b3df6b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28724\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28724,"size_decoded":29569,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x225, components 3","md5":"735b1ab7143aac947ab76bd4d57f5cfb","sha1":"97c4734b401803f681d45f642a74e40c03fe7a78","sha256":"cab2e68f9c26236b217a060a3efd20783e706ea94ba77d6c8e40289ada0402ac","sha512":"4ef2e166d2009b00587e286568c9b3070680904ae72733bc6ce1aa48bf3887d80f64c6a897af5ff96d8674a3bf5438d6e18620952abd61014c4a28d879bc553a","ssdeep":"768:yE3lwkIGa4DNcbsTOJHPQnct1zxh/hgR3i9XC2X:yE1wia4DNcATSHPlzje36","tlshash":"08d2f1b0b3adfbdb93f293b4c05e94119520e8df4529f4d62862d15ed2ce0ab8c71395","first_seen":"2026-07-22T09:03:17.546591Z","last_seen":"2026-07-22T12:22:26.650713Z","times_seen":9,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:51.534Z","timestamp":1784716251534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qgh%2BOjMsDqdwBpy4%2BELoGRS5peNZEe1m8bWLwlOBj6tqABYwQgRo4JfwGx2tBNaTU1SfiFuSqYF7jUceGBCzI4Dok2umpDMTgmvp8%2BRLVCap6%2BMQp3mOThf62Z9wQYs%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5bc182f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":769,"mime_type":"application/json","magic":"JSON text data","md5":"81e152fdc56342d7e467923d7916203d","sha1":"598e61f51a837ee6444789d35c7f64ab4e883ab0","sha256":"da9a9cb08e7d28e654037d70b2ff4f7c0b1c6316f29469136f96773cba6a0da1","sha512":"82e221d55d9eba6dd2915029f670590b55e4cb1ca8a1ec832b134fd2a2aa75d83d80b213703de2c4e3b16e5dfad767fdf9c6121d2b6cf353e03686e0991e2e24","ssdeep":"","tlshash":"a3a0223ca080080f0032f82cc00c8ae2832ea00f0fc3cc0802832e00b28f8ccce20323","first_seen":"2026-07-22T10:31:20.475119Z","last_seen":"2026-07-22T10:31:20.475119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/js/publicJs/visitor-track.js?v=ae28934432d1","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.144Z","timestamp":1784716249144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/js/publicJs/visitor-track.js?v=ae28934432d1 HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visacssd.cfd/cr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a5032fb-173ff\"\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cOYpcoPq4LWJyPajdaKe8u5SQhg85ESTXwv3A6TK7b0D3lR%2B%2FpZ9vgxRmiQ0WpBeI%2FhVYAs5N1y5q4Bj24hLUExnISRVVNd6G%2FdXhZR%2BTN1tuSMjeWCkcn7i0Gz3zBo%3D\"}]}\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: 0\r\nlast-modified: Thu, 09 Jul 2026 23:47:07 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5ad2e1835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95231,"size_decoded":24361,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"05948dd6a59e8355ab339c264d5c954d","sha1":"ae28934432d14d0892eed2757969bb986076ea03","sha256":"2ca9f00f158249e02b20b7b667d0f2da41d205341e4a1e0b634b1bbfefbdc8db","sha512":"92a05b3d57b05537b273fbbe2b366a1dbd760ce781ccab3bb8df354d8bcfad7e7dceda3456dae735ec65bb715039f197c569d410bb29fd41ef292099a8babc53","ssdeep":"768:5UmlQf3+F6C28P1sSoY5f9Le8g2mQHCmmgat/1qzZ8poQx5cPSstfmQ/QTUWnPHN:5UmlQf3+F6nYm8Xxmgk/uMx5c6sXE","tlshash":"5893629a75f32131826320ad0b9b5055b239a153344adde5be5d87003fd9a28e7f3bdc","first_seen":"2026-07-22T09:03:17.531599Z","last_seen":"2026-07-22T12:22:26.659185Z","times_seen":9,"resource_available":true,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":381,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/js/publicJs/disable-links.js","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.149Z","timestamp":1784716249149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/js/publicJs/disable-links.js HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a3f891c-8b3\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YYlfcLm6dgMJKxe9Eb%2F17BNJoXGR4YEf%2F7sZISAiETOGtv4gdy8cvbteGLJdr6RirQzyfsSBcs38TpaOdqtO%2FN8jLE2s0Mo6%2F%2FaYhpe47ERDgzal8twW93BdE10COS8%3D\"}]}\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5ad2e1b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2227,"size_decoded":1796,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d3d88ccd7ca3e3ee5b0d0d7171d98588","sha1":"691d07d57689cd81cd69133bcf9f8f8868eacd98","sha256":"67e89e995c49e0211facb48d3bf2895e993d2af845f69a5ccb14d0b4ff7cd5a0","sha512":"4ee16b1461174289e51480794c9cf07dc42d95c9b1c0da964761b371e6f4efbc18da6e505736af62157f17a9d89fe7b6db205567761334ef54db838cecf1f870","ssdeep":"","tlshash":"c841231625933176bb33506e976fab44fa7045133105ec12b58ce7990fc5b2000fdee8","first_seen":"2026-07-22T09:03:17.570096Z","last_seen":"2026-07-22T12:22:26.61177Z","times_seen":9,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/0ebb1697ec9ed895955069d5aca347918d92cd59da740f98f772f468707e2361.png","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.158Z","timestamp":1784716249158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/0ebb1697ec9ed895955069d5aca347918d92cd59da740f98f772f468707e2361.png HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-1bf4\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zL82Yv6UOVONkPsBrpKHvodX8q2widobJstn3zEGL47e8pXzWKzwbG60bMPIufeT%2FT4M7t2PXkeL8FQRG2ysR%2BH2SSyLcftHSrMiY6gLHbuGI%2FBTkcwk%2F0AHDWY9Y7Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5ad3e1d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7156\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7156,"size_decoded":8005,"mime_type":"image/png","magic":"PNG image data, 208 x 68, 8-bit/color RGBA, non-interlaced","md5":"169c076d971a655f2cfd96ec33530f40","sha1":"718f8db27385e029f6b2a7425910f99042124d6f","sha256":"0ebb1697ec9ed895955069d5aca347918d92cd59da740f98f772f468707e2361","sha512":"06bc9ce60ec954f6bb4c1dc88f3604a518d8259ce02b6eb4fe568099b804a8a3c3c69df3025a0d63228f87e7def8e276cad2465cd1ffcde8d5738daf3bacecf3","ssdeep":"96:allcHitlIxv9vk7C1+I4wWHLihk/x2h4UHcdjB3bWTwG9UVSJlmPr7oMDgytJQ7z:hIIHUCD4wa8nHQgL9RJlYHDgEJQ7cG","tlshash":"9ae19f49f5940a06124c46ae30f5ed178d2f9588a56cae5ccdeed24e8a30471392fedf","first_seen":"2023-05-02T09:02:03Z","last_seen":"2026-07-22T12:22:26.626029Z","times_seen":335,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/b945784356e955594370f33d0c26d712bb56c992ecc19dbe9220d717845cbe68.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:49.287Z","timestamp":1784716249287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/b945784356e955594370f33d0c26d712bb56c992ecc19dbe9220d717845cbe68.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:49 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-20ade\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2Bh4pDftkPupH7GpyPG5afalNxw7d4%2BP10SSahJ%2B4DVs4QQVzyapeK3ift9ajBLoSLDF%2F%2BoGx3zbGIEes9NpIE7vXlY31gUzvI9Bt%2BBHIdSN1Eh%2BgIjmDTPaSn4YUxc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5ae0e2f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 133854\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133854,"size_decoded":134713,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"f38be36a5020e402599e5616b136dacf","sha1":"8743beb9c693e6963a45743fef36cd4e18804d1b","sha256":"b945784356e955594370f33d0c26d712bb56c992ecc19dbe9220d717845cbe68","sha512":"ec2f88948c5de01ff9bd1dc7634e1342ddef776df5b39ea5902ed5eb29788d0b744fcb5275e86bb700707cf20634d65adce249f0f15878b6570048f7f856f0ce","ssdeep":"3072:j+W+ixVYbrqYwK/v/Deo5g6XOIJHkP3hRFf91feo9kSISn:j+WBxVMYzT6X5ell1feo9kS/n","tlshash":"0ad31254b0bb3009d96c4ff00de412a0de918f35b414844fd66d4666ab3d2f8eadbbd5","first_seen":"2026-07-22T09:03:17.5676Z","last_seen":"2026-07-22T12:22:26.606875Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":595,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:53.034Z","timestamp":1784716253034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:53 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9oLvT311Tr%2Fh9r3qfB44uYEjp3t6aE4QAq6INKFkx6AZkUt%2BYURktgVMjENDlnYw7RL8iFreNgtpXxxNn0%2Fczk4coPLxbfCCGZ2zfHZur%2Fr7XRAybfe4yq0q44lQLiw%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5c5790a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":769,"mime_type":"application/json","magic":"JSON text data","md5":"9777ae1342ede6d14c26ccb70248d3d2","sha1":"478632700412ed8a4592b83f6de29f17c9021d52","sha256":"30f3b9ee75513c4d2b0cd063f4bee851744f4df1e3280ab4ac62d7f8c8b1d2e4","sha512":"da18ae608403d73fa9369f1983683eac5b8a23e5f23cab99808d57a657fb95765635341d183dbe5b6552173a025605f5cf50b73c4d926a170dbd7e8cf6eb5d98","ssdeep":"","tlshash":"c1a0223ca080080f0032f80c80080ae2832ea00f0fc3ce0800832e00b2bf8ccce20323","first_seen":"2026-07-22T10:31:20.47803Z","last_seen":"2026-07-22T10:31:20.47803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:57.595Z","timestamp":1784716257595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:57 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkD8pgaB9OtDrrvynbTTsWOlb%2BRAPXQXB4HWpRBOVhqV1zALzm1%2FFhpviR2tfJ7kxt5plYUri1ejHSngMiGPul%2Fh3rmA2vyBUDIWB8j%2BV0LmXp5aWq0YDTuF%2BCW%2BhRU%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5e1fc5e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":773,"mime_type":"application/json","magic":"JSON text data","md5":"fc636ad58101293f08f873b50b6e761c","sha1":"2090a48f68d44f072866f88a521148bc6b17ff3a","sha256":"ed10021f4961a3c62fd2d716a33b61c6a2938c5e4bb649521e82bd437c534a65","sha512":"a1529a9a00a3cc9d6236000835e9b8c7d7f4ef3dbe6f5a6e040d76d9ee5c95bf24fa7b7513cbdc7ecbb93341556e77d24861950576d4eda78e71a6b952b02414","ssdeep":"","tlshash":"96a0223ca080080f0032f80c80080be2832ea00f0fe3cc0800832e00f28f8ccce20323","first_seen":"2026-07-22T10:31:20.47886Z","last_seen":"2026-07-22T10:31:20.47886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:59.118Z","timestamp":1784716259118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:59 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2DWKzRyDp4TiO%2FbFJHCPlmW31XUA40dh8ZR3Orb%2BTfoRAkHxQmFLPaSoR%2BEkkfJywt78tlTdtdRHklmAt8Id8lR6IaOILcgf3WkuqDpRLCYm%2F9s8Xy%2Bcfgce5XIP2Y%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5eb7d4135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":771,"mime_type":"application/json","magic":"JSON text data","md5":"e4ca5531a9729a57c99295ca87cc1a7e","sha1":"4aed0d725391d8dea3dad329e8e2853d57d9ffbc","sha256":"ccfa9ac892a76d220a3e090786e5eb13a6ffa78875dbc8accf280ccf8747675e","sha512":"f8a253536f0e74908dc7ad7cdaee56ba2eb14f1c1fc52029177fa9e1afb88affcd93bd9e89306ccdcf3565f506de0671c0707d267e8bffc242d8231252aad006","ssdeep":"","tlshash":"1ea01128a080080b0032b80880080aa2822ea02b0e82880800822a00a28a8888a20222","first_seen":"2026-07-22T10:31:20.479775Z","last_seen":"2026-07-22T10:31:20.479775Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:31:05.190Z","timestamp":1784716265190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:31:05 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zAiZEvOgEtoFTlqqijbZBCl08ubwWcMjeY5fv14yvDmnJabWwEBee5vluVGNGOXDgjuSiYbsoXapyEBkxWnTkhnE26TeSaeu8cpotH7FhPnGU6diikS9plGo93LXhX8%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c61169e635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":761,"mime_type":"application/json","magic":"JSON text data","md5":"f2a4d508d2ecbd25b58a7c05222c0a88","sha1":"d6b3394abe4c295495153a88a8bafe791aac8c09","sha256":"2c9d2299ce180555c0b2d4e3a84de8b46ccdccbcbe44192c532732380e724bac","sha512":"607becc1e481cfbfa9563594fcd04d9518a562adb9048ff0d4b50ee65e2305e4ee1d3bbe779ab4cc254c1ea075a27cc590d156a80e04539792d1e653c8c70684","ssdeep":"","tlshash":"eda0223ca080080f0032f80c800822e2822ea00f0fc3ec0800c32b00b3cf8ccce20323","first_seen":"2026-07-22T10:31:20.480691Z","last_seen":"2026-07-22T10:31:20.480691Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:50.033Z","timestamp":1784716250033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://visacssd.cfd/cr/\r\nContent-Type: application/json\r\nContent-Length: 219\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=74705dde-d198-4ada-a81b-f16a6de93506\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":219,"data":"{\"visitorId\":\"74705dde-d198-4ada-a81b-f16a6de93506\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"view\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":true}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1n82X0cxaFyylDN3u0ClhukQc%2FDzUQZkiwBm%2FOYXyjyVxLXcX00w%2FGT6fEZJnZ5gSWCIt3GHHkYCb5fyDUHDBD8ns5sS5Vbvg9VQ03V9%2Fz1gAQwpHlfDFntToXNctK8%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5b2bef635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":769,"mime_type":"application/json","magic":"JSON text data","md5":"60ae0fdb3507e4edbf4dd32a4554e3ce","sha1":"bcb063f1326e9ac9516b72fcf9f76f01e22af18c","sha256":"35c19043ea93c889553fef84bedfbbe52da0c6009825a669a2bd21107e9f7695","sha512":"30245e408a489f093dba735b38d3ae70763423e6b53e7c209a7f86b4c3d181f1556f634d652b60af288b45490bc058aae57b055e8bd72143156aada1c88d5527","ssdeep":"","tlshash":"07a0223ca080080f0032f80c88080ae2832ea00f0fc3cc0800832e00b28f8ccce20323","first_seen":"2026-07-22T10:31:20.481423Z","last_seen":"2026-07-22T10:31:20.481423Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/e6c760fd61ce63072e8ff4be360f191d22a8a643663a983a468dac9ff7c8c0bb.woff2","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:50.155Z","timestamp":1784716250155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/e6c760fd61ce63072e8ff4be360f191d22a8a643663a983a468dac9ff7c8c0bb.woff2 HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=74705dde-d198-4ada-a81b-f16a6de93506\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:50 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-6994\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vKhiu%2Fi0St77NloM7niveQSyShpz5Kd664HS4m84muJZMVKv6%2FgKaxVL6RmTAK5D59%2BO2%2BC%2BXJIZlDQDwyG21e%2BvgZRV9dPAyXaz0ouypAl%2FJ5PwTikOJMJmh59g7Ps%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5b37f1c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27028\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27028,"size_decoded":27902,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 27028, version 1.0","md5":"b70bf3e77a27ce02473b9ea8a37e3061","sha1":"1cde71a5e02a06e505a2fde42f0a7534ffe16739","sha256":"e6c760fd61ce63072e8ff4be360f191d22a8a643663a983a468dac9ff7c8c0bb","sha512":"b02e019d9675ca56b72f7d4744f6673229da972f1e01321ae0e4be82b51a5498a58d8f279af0cfeca5970a4a96d195610949897a10ac8495c67d212242493d21","ssdeep":"384:x0VnYHIf1pkAniowxppByyQTv5JEnHAOPdpaBr3pRkY+2dL21wjSD0St1Mex4xMH:xCnYapk8A/o5JEnjdpE7s2dq1HMex4x4","tlshash":"93c2e18a25bad133bdd4f3b8a08949160fe47a03cbe9ac64b36f50628d50bc674cf594","first_seen":"2023-05-31T04:00:37Z","last_seen":"2026-07-22T12:23:28.847158Z","times_seen":277,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/6f8db6a52f8d0fee1bc73533948ed0a50178035df1db6339437c13d5ca379f4d.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:50.222Z","timestamp":1784716250222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/6f8db6a52f8d0fee1bc73533948ed0a50178035df1db6339437c13d5ca379f4d.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=74705dde-d198-4ada-a81b-f16a6de93506\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:50 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-7bc7\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dF%2Filz%2F9XeiK6vp1BL9mWCwkpsBZppAA1hnyAAsrb%2FU9jNUGN49xMYw3EkIDts4HIGJjO5h1RgwJvgwer9kYD3YJqYtxo5DX6fdH5eNJdpZw9TMzYM1YLU%2F2NAJIJA4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5b3df6e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31687\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31687,"size_decoded":32538,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x225, components 3","md5":"5e002c7c27dfe83377fc6faa1648bf2f","sha1":"5698c25f065e9dcceb9ca139f2a3530686386741","sha256":"6f8db6a52f8d0fee1bc73533948ed0a50178035df1db6339437c13d5ca379f4d","sha512":"0faed440fcd461b9156440ae0616c349217171853ddddc8402036db054a88e3acb37559181d37e421ef5e2c636cfbb14bbd44c4cf0432f0ef5ea06e6e538fd72","ssdeep":"768:bBKrraZr10fr0eHVd4P+ZAuHk/+RMgvANpjbP+juZ9bZr5jF:tuqYrZHVd4GZnLRFvUpL+jufbx55","tlshash":"87e2f11a5dadceb3da09a023e04b06e441212e82628d25ff77d210b1376dddee5ac2f4","first_seen":"2023-10-12T03:24:01Z","last_seen":"2026-07-22T12:22:26.628524Z","times_seen":82,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:31:09.691Z","timestamp":1784716269691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:31:09 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0NKyDpKyaf6pCA%2FI5tSWgGKiL6sTpkEsE57L%2BAxr%2FAceyfnyXf4o87Kk2jP51L5DdYI8u0Bvs48NW4NsEYKu8gmAL5kOoUHIG%2B5fLcNcGrefuLCOzEXJLH5SRUmCmxY%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c62d8ecb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":769,"mime_type":"application/json","magic":"JSON text data","md5":"7f3114fd37c8792b4ebe4dbf7dc292a5","sha1":"0ff79445acbff7134bd6fdf59090369abe22b447","sha256":"8654faab990a1642cabbd387e81bf10256f15388f839e88b9ac617d19cfeb4cb","sha512":"aad2f99c2a3fbbe8d74abe0a2ba0ec34aafb9f97b0d5ad4a25a0b7253a23d62a9f13b930ede60834eba6f968fb9d35815272f66ad958cc6285003f4ac64d11b0","ssdeep":"","tlshash":"f9a01128a080080b0022b80880082aa2822ea00b0e82880800822a00a28e8888a20322","first_seen":"2026-07-22T10:31:20.483517Z","last_seen":"2026-07-22T10:31:20.483517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:31:14.225Z","timestamp":1784716274225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:31:14 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0Do%2B2LMXVVC3NWWvrn5KLHqDEBRpiCyRTD2x9NLVeNPJv12WKEjFexBcaaDirgFSmOPr%2FZ3vIrgiCVJCe6qqRV%2BgSBHFm%2FmmyDObZxZ8sqqdXVPuFIbA%2BRY%2FQEwk1o%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c649ea4135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":773,"mime_type":"application/json","magic":"JSON text data","md5":"27439eb0eac8afc554e49c8ee13610c5","sha1":"686985f96a190bbc2e7f80e566e16a6c78d4170a","sha256":"1eaf3ef008893a9668a000dbdab3ee97477077c2e6cd755e3c7a443487b79547","sha512":"ee3bf074c7568cedc3e2325bcae644d9bef71bbd8e2c888f03a12995ee3e9ddfeb7ed171c96a08f3430dce3791c730ba3106b1cfda797a6c54c96d17593c63b3","ssdeep":"","tlshash":"c4a0223ca0a0080f0032f80c820882e2822ea00f0fc3cc0800832a00b28f8ccce20323","first_seen":"2026-07-22T10:31:20.484516Z","last_seen":"2026-07-22T10:31:20.484516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/e3d81b2d611dd4f519271c6f44c54718847eadc68990f4e2ab8ca20851ca85e8.woff2","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:50.156Z","timestamp":1784716250156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/e3d81b2d611dd4f519271c6f44c54718847eadc68990f4e2ab8ca20851ca85e8.woff2 HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=74705dde-d198-4ada-a81b-f16a6de93506\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:50 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-66ec\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=co2QfUV46wTZTnfw%2FjTR0idSOkbj%2F72%2B47%2FawYBLX7BDQoUlZEE3Pj8Hgi98X4gbix39racV36FdCYG5ePJsveXFBgU0UHC4q7%2Fs4z6%2B9vrlw29e0NOc3Z64Pqr1Dps%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5b37f1d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26348,"size_decoded":27220,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 26348, version 1.0","md5":"4a4c93c5d45efd6ecb50ccd41b3ce4df","sha1":"74192cf454680e5186a6255c11f742738ad51346","sha256":"e3d81b2d611dd4f519271c6f44c54718847eadc68990f4e2ab8ca20851ca85e8","sha512":"a4f745cd3e80b374bc5e26ca1eeda966360f442bda7a0e61723087d48782dfc2ff815be0a2f24ccaffc314c669f45596996b33bcf02f866049de2ae3b9f1acc5","ssdeep":"768:jMfZcQAdT9nAclnAG+XNbwwY9SQjXmHeyMcC9w0:j2cQYWclAJhwd95m+yMcC60","tlshash":"5cc2f0625e2aad6dd093657ae48dee0c51bf0864ce6fc313e1d8c6ec6934922134a3dd","first_seen":"2023-05-31T04:00:37Z","last_seen":"2026-07-22T12:22:26.646293Z","times_seen":242,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/cr/assets/embedded/0fab2bf085cbd5c9b1e57b284abe6126fe9e3f2fb9e646624028981ccdb1c4c7.jpg","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:50.220Z","timestamp":1784716250220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"GET /cr/assets/embedded/0fab2bf085cbd5c9b1e57b284abe6126fe9e3f2fb9e646624028981ccdb1c4c7.jpg HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=74705dde-d198-4ada-a81b-f16a6de93506\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:50 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: \"6a3f891c-6549\"\r\nexpires: 0\r\nlast-modified: Sat, 27 Jun 2026 08:26:04 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YOkF8w1mpv73EGCNCs7vubTPKp5JyCQA5RTW9gkg9lRJ887ZfbVDRkV%2BP5UX6bxc%2BCSqFgDm3%2Bl0fiNue%2BY2TKgcUY6LVMmZ3MUrjkeVH%2BqILr7mmNRogIhbe5JqFw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1c5b3df6c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25929\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25929,"size_decoded":26782,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x225, components 3","md5":"ec7532e8deb596c27c99384424ac4306","sha1":"634d393824ba3f248abdf506c80fb118a11a87ca","sha256":"0fab2bf085cbd5c9b1e57b284abe6126fe9e3f2fb9e646624028981ccdb1c4c7","sha512":"f739fa2d0ecd703521e1af500014faa442a50b3867d32d917c4a65b8533c0b06166ab01c535766f6f703067587b5bae110cb75d07766b57c390270aa0d90018c","ssdeep":"384:gGXu3c6SxiLYNHOgHN75pG6r8z0htGIw8EWweVtNPsDvfL8KqyT5gdxSWk7MqE0V:Z+3Ei0HOgtx8yGzutNUDpqy0S97PESt","tlshash":"56c2e1a5b788c1f2fc318019cf4843d8b7ebadb6e1f54ee50a566d12a4e315f4702e0a","first_seen":"2023-10-12T03:24:01Z","last_seen":"2026-07-22T12:22:26.64709Z","times_seen":83,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visacssd.cfd/api/monitor/visitor/track","fqdn":"visacssd.cfd","domain":"visacssd.cfd","tld":"cfd"},"ip":{"addr":"104.21.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://visacssd.cfd/cr/","date":"2026-07-22T10:30:54.538Z","timestamp":1784716254538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visacssd.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 12:26:22 GMT","end":"Tue, 15 Sep 2026 12:26:21 GMT"},"fingerprint":{"sha1":"D1:39:AC:14:FC:4F:1B:2D:DC:C6:EF:AB:65:F2:96:96:D2:93:E5:E4","sha256":"7A:DE:59:3A:38:3E:8E:D9:8D:B0:89:C0:7D:E1:5B:AD:61:63:B1:6C:72:42:C1:F4:F7:1E:57:4E:1F:C9:34:32"}}},"request":{"raw":"POST /api/monitor/visitor/track HTTP/1.1\r\nHost: visacssd.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://visacssd.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: catstick_visitor_visa=977fd6fd-d02e-4437-8948-8c32265c6b51\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"visitorId\":\"977fd6fd-d02e-4437-8948-8c32265c6b51\",\"siteId\":\"visa\",\"page\":\"index.html\",\"action\":\"heartbeat\",\"entryPrefix\":\"\",\"url\":\"https://visacssd.cfd/cr/\",\"redirectAckId\":\"\",\"fingerprint\":\"498289126175e132\",\"isNew\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:30:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2BbhyB%2BGorcjXbDJUkm0embKfpjaCYOVmOMFp1rri6M2P3%2B7JgfYHvvlODvd8ix%2BlaWArf0ZC9yecE7zU7CkgBRqSrz0UwSc6PEGlipEmAq6Dn%2FWi6jfUVC1%2BUqAWg%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f1c5ceda4735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":771,"mime_type":"application/json","magic":"JSON text data","md5":"8f9fb63b957498684e79ffc6b3060972","sha1":"fed1efa72cdc658a31a940c940acf408cff63d78","sha256":"a8f88235f4f4a6286abcb864e14d65109ab7fae4313d56efaa7419216b21f30b","sha512":"253b5dc984ecebf98fabea50f316a8d24261d93c90e85ec2ba592e650ad4f065f7876f42ca7b2cc62b5b225489b7bf5ee54d0c039eb63b7b37178e841e0a4852","ssdeep":"","tlshash":"87a0223cb0a0080f0032f80c80080ae2832ea00f0fc3cc0800833e00b28f8ccce20323","first_seen":"2026-07-22T10:31:20.48636Z","last_seen":"2026-07-22T10:31:20.48636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"visacssd.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"visacssd.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}