{"report_id":"9cba1375-b343-4a20-bf60-142a9012d326","version":0,"status":"done","tags":[],"date":"2026-07-17T18:08:04Z","url":{"schema":"https","addr":"fin103.grayku.com/","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":0,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"fin103.grayku.com/","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"title":"Fin","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"fin103.grayku.com/","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":0,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T18:08:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":2,"received_data":18505,"sent_data":1143,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":21970,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2026-07-13T10:01:52.556352Z","alert_count":0,"request_count":1,"received_data":1421,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-07-12T23:52:49.76326Z","alert_count":0,"request_count":1,"received_data":90144,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fin103.grayku.com","ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"domain_registered":"2019-05-21","domain_rank":0,"first_seen":"2026-06-27T13:15:30.417502Z","last_seen":"2026-06-27T13:15:30.417502Z","alert_count":124,"request_count":31,"received_data":2981219,"sent_data":17971,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"BootstrapCDN:5.3.0","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":6,"received_data":211732,"sent_data":3370,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-07-12T22:56:27.755137Z","alert_count":0,"request_count":12,"received_data":7389691,"sent_data":6286,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-07-12T22:46:04.598309Z","alert_count":0,"request_count":8,"received_data":152029,"sent_data":5418,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-12T22:48:41.233588Z","alert_count":0,"request_count":1,"received_data":80253,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"2e2fadb2f94f8aac778ba92f7a42562e","sha1":"ce36065c4b840b15eb7a5db3a0714443e0e589a6","sha256":"f020cafe7019dda7755577ad8ac2e5bdee87534b530f75d65286d31c07420739","sha512":"17bf4fb7bc2d907160bcaf201499ea6aab2c0e413c56a3a2dbeecb3637b41603f62c9155f0dc137709ff8fa0e646a1024f44ba9c6b9d1ba068d227a0fcfd67c9","ssdeep":"","tlshash":"a6b01227a654c4191c000146c827d7ade002412cf67080fc4068dfd402d29a78501800","size":102,"data":"","first_seen":"2026-07-14T22:23:00.817585Z","last_seen":"2026-07-17T20:17:51.115139Z","times_seen":1168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","size":891014,"data":"","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-07-17T20:17:51.138739Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026bft=0dAFcWeA4sGcVQKPyhV6Q5p8l3VjtQRyuGTjE5uFX3rYySpGhuJ16UGuuEZDoZAJfIQeJ1_GgF6nPlICDU_6heTjqQIBnxo_PeGw","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-17T20:42:32.465206Z","times_seen":491750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026bft=0dAFcWeA4sGcVQKPyhV6Q5p8l3VjtQRyuGTjE5uFX3rYySpGhuJ16UGuuEZDoZAJfIQeJ1_GgF6nPlICDU_6heTjqQIBnxo_PeGw","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"22db5dcdf8dae0e50fb9a8d214bb1fef","sha1":"0786ae343b44c32e7f51dcd34c027fdc4cbbd630","sha256":"169fe5c6ed8dcf77e293d730057697589d9f221db504fb38da89c2624b601c9f","sha512":"de8e5ed6398c918e9243a43bf22f7814bbf8097110e6780a699f445ce2e9ca65acfb0178375591c0e4b5959fbbdfa2e9ff0dd3345812c6c9625f3ceb84abf735","ssdeep":"","tlshash":"dcc0226312410df70c196c20085a90eb1c8c4823922783f08ac57e286ea0c117a00e3c","size":191,"data":"","first_seen":"2026-07-17T18:08:15.176533Z","last_seen":"2026-07-17T18:08:15.176533Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026bft=0dAFcWeA7IAWQnvVulEZGDSWyqLFwv56Ir1I030EchPuZBeJbCBK0SFWCW_B2C032tXarEN4qpnmezYSXgez86ecdChTtwJRrudQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-17T20:42:32.465206Z","times_seen":491750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026bft=0dAFcWeA7IAWQnvVulEZGDSWyqLFwv56Ir1I030EchPuZBeJbCBK0SFWCW_B2C032tXarEN4qpnmezYSXgez86ecdChTtwJRrudQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"27eab1489fe442aeab5ce0b8d56e1a3b","sha1":"ce0e757d2faad068435881a65e2325fd34b91015","sha256":"9051bcdade07f9daddac5320b5f3030da116300f812529e7ecbe0fd985850bb3","sha512":"fcabc3a425c6dea13413e0d37253820f9c0a31e6767131d2cd7c327b86436afda60773a0632a5caa45ddf85afc518f49b741098710cd83c0858d7f2d9cb0cbe7","ssdeep":"","tlshash":"76c0226312420df60c196c20085a90eb1c8c4823922783f08ac57e286ea0c117a00e3c","size":191,"data":"","first_seen":"2026-06-27T13:15:34.385393Z","last_seen":"2026-07-17T18:12:55.034805Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/lib/Bootstrap_v5.3.3/bootstrap.bundle.min.js","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-17T20:12:08.156617Z","times_seen":29348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/js/script.js","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b52b2bbb30fc5002927f168393132a61","sha1":"d86a5ee5e907abc9b4d9aa11cd88b5f50f6b767b","sha256":"31d2148af3270d088e336aec0f2e9df7fb4116add741d08d7cb627ac51c00d45","sha512":"205f28297c1294b5ddc3444f135c1e256c4242853ce6ad5809b1c41df8c30ee53b98306b86ac0ebd2c60790c041bfa84b2d1fd820dea4edbc3d569308f0cad50","ssdeep":"","tlshash":"2c51ed196171207104bb65efc34fb7c832a110ab500bdc023cdd8a996f51db795f2ee5","size":2888,"data":"","first_seen":"2026-06-27T13:15:34.344486Z","last_seen":"2026-07-17T18:12:54.969459Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f95a33d1515b23f75ba1cae827908e5a","sha1":"8a2cd0295a78d0de87f90b768d4e7e8fb2e8b81e","sha256":"20b461aea0c573b9600f70d23be45acd5cac7b64cd41d4dfddecae45baa583cc","sha512":"d6f5f17b2e12562320b36f25df4f2b530d1ffe8662da98d29532541c4daa6c7e8b3264b46f6c2a521d3420478ad06c58c8b7758572fb1f410e8b43e385d02ff7","ssdeep":"","tlshash":"101121731a08e0350f3209a1a1fedab5e042741cf16848e89415da842eaaccbce05445","size":976,"data":"","first_seen":"2026-07-14T22:30:27.99168Z","last_seen":"2026-07-17T20:33:01.434955Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=w3wt5ux2c36u","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-17T20:42:32.465206Z","times_seen":491750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=w3wt5ux2c36u","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ca9af290fba6ff8a57853c3ba7cccfa","sha1":"c7ba7fdd460c959d86b4cdda552b9036e638ef4f","sha256":"8d5ae5e2d96a95a6bdf391bbb86c173708263ef07c2229d8d6132bde66bf417a","sha512":"69136afe4770501684195b612607b8b0590ec513c0a008348ad8b66cad3f4681bbc42e03274f8da14ffdb6d68c3b4b75c0c13c3bb09911ddb5b841c827beb054","ssdeep":"768:+iNSr1pZPQ2zwWPzhrg60UH2HHAgj0GFYSr1ZCfLYt:+iMr1PQrWq606oHzVF6fW","tlshash":"bbf2ae1dec2738a7dfae87e25be937dc197c41895a0e11ac30b904c306655c7b98b1dc","size":35845,"data":"","first_seen":"2026-07-17T18:08:15.178421Z","last_seen":"2026-07-17T18:08:15.178421Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-17T20:38:21.872776Z","times_seen":491463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3b7e4283fee74912576e89d16d94ae8","sha1":"268ba0e365d0a742f565c6609a63190a768a7f81","sha256":"399575628650ad2e227f899ac452835ba31a0d64b451c0840c45841a5d243e6b","sha512":"260c7d144998b4d5f0893196607025433b5020c710c280bffbd886d4f37d42bc642bf007a38b144831a54d59337057f9b5cabea2c7fe2dbbf1e720b70f71cb3c","ssdeep":"","tlshash":"a231ddaa36b986224233b0994daf8515361070074d00ee51be9c93909f6c43ca8f37d8","size":1506,"data":"","first_seen":"2026-06-27T13:15:34.381101Z","last_seen":"2026-07-17T18:12:55.033282Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"aaaac014339b7f07e74929f4789a0521","sha1":"319a98ff933bb6a6de89953bc36d57b314e4dba9","sha256":"fb4adf389180748b9497619996b68819caa178ab63792c32436f43e895c250b7","sha512":"c0c7b3677f352bdf3b78763340b8e33cc8469613b6068064bdc55cb92cce217eabf25859c70870ef6f9ba0325baf47318c1b49911199ed9868609b9ef3e92816","ssdeep":"","tlshash":"1631e0aa36ba45224233b0999daf8915361070075d04ee51be9c87949f6c43cb8f37dc","size":1502,"data":"","first_seen":"2026-06-27T13:15:34.382489Z","last_seen":"2026-07-17T18:12:55.034074Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df4ddb0df34dfd07ba71a9689d8e86f4","sha1":"9ddbce3d72a4596c809ee2c15dbcc19152f27271","sha256":"4e86f0e22e4771b5b8aac24c613c661806a678b1afa284d03cf6ad03d3e21a0a","sha512":"4c0d69f88d40b6650dd909efa494f4d7f863bf10b18f205f5ed36e28d9efbf0c82690a5d9792547e227b81e42d327279e66ca7b53ab92703cb887de3e9edb6d8","ssdeep":"1536:Rw46gylPIZfNkROP55lOVU/SZ2DUQhI8bRZ:4gYITLlOVU/62PI8n","tlshash":"6a73f8916a00f0377ab745ae65d1e7047ae99405fcb34894f42cc8804fe7d4f2a77ab9","size":79150,"data":"","first_seen":"2026-05-23T13:15:34.758539Z","last_seen":"2026-07-17T20:20:50.79679Z","times_seen":1852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bg0fz2bmbrt9","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-17T20:42:32.465206Z","times_seen":491750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bg0fz2bmbrt9","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8cb9f20eda2f6434808bc369c9db578","sha1":"2b81e9c9d7e78b2734a624905083cda1bb79e7c6","sha256":"b34119b0eabed16c5d53f34a2d6140bdb333d67696da3e5df9f5a3aca535487a","sha512":"ba9795023d5786278302b532e4f333922883a1fa8e858d75541d56d5d020f55fcdf46ddfdc846aeeaf6a7ca7bf92a03524b37c4b52b0182ce2c23e4e1af3eab6","ssdeep":"768:eXytjieKPe3TCfXwgLA5DKLswTwppN8SNU7KYmG:/tjsPe3GvDLA1KipNVN8h","tlshash":"19f28d5a9c1234bfcdee9ae24fe12bc526bd40794a8f257d30eb21d316368c2754b58c","size":35794,"data":"","first_seen":"2026-07-17T18:08:15.181003Z","last_seen":"2026-07-17T18:08:15.181003Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/Picture1.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.813Z","timestamp":1784311646813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/Picture1.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 08:00:16 GMT\r\netag: \"5e0eec-3fbb-6215aae5cea10\"\r\naccept-ranges: bytes\r\ncontent-length: 16315\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16315,"size_decoded":16554,"mime_type":"image/png","magic":"PNG image data, 720 x 448, 8-bit colormap, non-interlaced","md5":"9d73f56e0dfe67ac35f2ec2645a9a8b1","sha1":"727aa0f811f6a8cee9d0a869c48e88fb772b5a9f","sha256":"963361fe455ab965e7b631c07b1ebc5c9a60a353097ac5dbf19ceb8c929ef276","sha512":"a8bfd896752c48a5096f606490fefd9f145869b61cdbfbf06b12686d0a16c2bde2472978ac8237bbbc52b8c6e5a799f62d9ffa7cb4d758cc08ec2da883497a70","ssdeep":"384:uL3Pw0jo4H9M8t4zdaZIcOwY/sSznpn+kjgnFjGRw8xoGDD7G:uL3pXxidUZXo8kgnFjGpxoG3y","tlshash":"9372d0247918302dfcde60e6bc18c754de8c904ae3bf9e318ba5678366c1e673080e79","first_seen":"2026-06-27T13:15:34.375311Z","last_seen":"2026-07-17T18:12:54.970274Z","times_seen":3,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:30.423Z","timestamp":1784311650423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fin103.grayku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 06:03:03 GMT\r\nexpires: Wed, 14 Jul 2027 06:03:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 302667\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":8000,"size_decoded":8812,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-17T20:40:07.41699Z","times_seen":275781,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bg0fz2bmbrt9","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:31.001Z","timestamp":1784311651001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bg0fz2bmbrt9 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 17 Jul 2026 18:07:31 GMT\r\ncontent-security-policy: script-src 'nonce-KVQHBO1GMw-XQ1wPpfVwvQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":54237,"size_decoded":29188,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (35800)","md5":"103acbad0e3f130ce65be2417d87a257","sha1":"64ef0497d25a7d9be716dfccf2d9a12a6529e130","sha256":"dc253a3b8d065aec2e33eaea7b5c5bf36f800d1e4c3baf295cba6f15314dae80","sha512":"51cff7fadae3ac58c566a0f6d0f2f2e2959774f0d8f1475d7d1ee4e1d3f343df15d2f2fc674ed83b25e9f126a89be8cb98efd7946d10ea431e1692478976d580","ssdeep":"768:UFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/Jc1mXytjieKPe3TCfXwgLA5DKLswTwF:y+kiwHtjsPe3GvDLA1KipNVN8A","tlshash":"82336c514c132046dbd78ce213d93f70fe6e8164624a90b573fe27a7ae97c93625a38c","first_seen":"2026-07-17T18:08:15.132897Z","last_seen":"2026-07-17T18:08:15.132897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":33,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bg0fz2bmbrt9","date":"2026-07-17T18:07:31.080Z","timestamp":1784311651080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382189\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 19:02:33 GMT\r\nexpires: Wed, 14 Jul 2027 19:02:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 255898\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":891014,"size_decoded":383076,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-07-17T20:17:51.138739Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":301,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.786Z","timestamp":1784311646786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 18:07:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21297\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 11.26.25\r\nx-jsd-version-type: version\r\netag: W/\"1352e-ndvOPXKkWWyAnuLBXbzBkVLycnE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220097-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 41376\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2FQhPSo1YcjPIhqpxqM0R6FGrpz6cVLfh7NZoqFlo%2FgBRhpNLklyJn4JuP7zVh%2BERwAt0j1LOXpeFGpLES1iBbW40AGp8ZQzQMXLWqQBu0W6LEvD%2BdMlEJQThmRdlP4GYvw%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1cb2fc64f680b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79150,"size_decoded":22400,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48577)","md5":"df4ddb0df34dfd07ba71a9689d8e86f4","sha1":"9ddbce3d72a4596c809ee2c15dbcc19152f27271","sha256":"4e86f0e22e4771b5b8aac24c613c661806a678b1afa284d03cf6ad03d3e21a0a","sha512":"4c0d69f88d40b6650dd909efa494f4d7f863bf10b18f205f5ed36e28d9efbf0c82690a5d9792547e227b81e42d327279e66ca7b53ab92703cb887de3e9edb6d8","ssdeep":"1536:Rw46gylPIZfNkROP55lOVU/SZ2DUQhI8bRZ:4gYITLlOVU/62PI8n","tlshash":"6a73f8916a00f0377ab745ae65d1e7047ae99405fcb34894f42cc8804fe7d4f2a77ab9","first_seen":"2026-05-23T13:15:34.758539Z","last_seen":"2026-07-17T20:20:50.79679Z","times_seen":1852,"resource_available":true,"data":null}},"time_used":3510,"timings":{"blocked":-1,"dns":12,"connect":18,"send":0,"wait":8,"receive":3,"ssl":3469},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:30.446Z","timestamp":1784311650446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://fin103.grayku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382189\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 19:02:33 GMT\r\nexpires: Wed, 14 Jul 2027 19:02:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 255897\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":891014,"size_decoded":383076,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-07-17T20:17:51.138739Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":5,"connect":18,"send":0,"wait":19,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=w3wt5ux2c36u","date":"2026-07-17T18:07:31.067Z","timestamp":1784311651067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42354\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 21:55:21 GMT\r\nexpires: Wed, 14 Jul 2027 21:55:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 245530\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"62429037d6285782824616384b26132e","sha1":"b126600bf1a3041616793c05c1ce749dad01d952","sha256":"31d79d19622679a61ce0ee180498b570d78cf2202cfad7f25d991049d780f564","sha512":"9dc9ee85a14baef9a9c9881cd82c92b086b4d8c902e36dcaeacdae5627da8f9de5791c8305b747b16d512e46f4cae5949d4afaa9f80a35d9395c4623451d13f6","ssdeep":"1536:a7Rpgh9C9ToL9gTNfWNfK4RxMnHZzhXwWx7W1bx7:a7ArC9ULiTYNC4Rs9Xi","tlshash":"eb838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-07-14T22:23:00.889376Z","last_seen":"2026-07-17T20:17:51.138034Z","times_seen":1272,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.781Z","timestamp":1784311646781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Jul 2026 18:07:26 GMT\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3908,"size_decoded":1321,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"935871d1a732f1e46db8fac63abf0dcd","sha1":"1c67935ab647d6cb5bfa911856397443ab4a64ed","sha256":"b8eec3c6430ec7af2ae527219f944b1f3fde1695eb73efc2a56b3cabb23e2481","sha512":"2a9cb9036467308726cc6b979cab5e2c7159ec088436136f4aefc70cf43b6e90c7ebd277697beca525b052f2a8f8dc5909d9b9e5e4b09afc930e290a7195a571","ssdeep":"","tlshash":"2481c0910517a504da471cc523cf7e26de0e66767494d5797ffe2ca8bdeac220324b2c","first_seen":"2025-09-05T02:18:57.460387Z","last_seen":"2026-07-17T19:26:16.584239Z","times_seen":87051,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":24,"send":0,"wait":62,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:opsz,wght@14..32,100..900\u0026family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.783Z","timestamp":1784311646783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:opsz,wght@14..32,100..900\u0026family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Jul 2026 18:07:26 GMT\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13229,"size_decoded":1635,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"381533d5410fd946d371ad22ab59525c","sha1":"b8c309aca6b99df63f7aae351265f21f9b0b6316","sha256":"1af7cc4b33a8d9c6bb16b6e81c7bc876e50f79de26c9b6bce6c3916271bcf05e","sha512":"184950786245622be95c02639062a20b5e0e2201b057d153e8833eb84d34378f7e13156b0a09051ca1ddb98ba1a5041964e0b085dd831f17f609eb1de02ae283","ssdeep":"192:B3xpmj3U8fH8pspOlpXHaedhHdPgKQcXr3lVwa3RzJ/apsqiazk:FIMmkX","tlshash":"ec52abd1087be504ab831cc223cf7e36ee4e9155b450e5796bfe0c98adabc25436272d","first_seen":"2026-06-27T13:15:34.369147Z","last_seen":"2026-07-17T18:12:54.976734Z","times_seen":3,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":65,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/lib/fontawesome6.3/webfonts/fa-light-300.woff2","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:30.426Z","timestamp":1784311650426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/lib/fontawesome6.3/webfonts/fa-light-300.woff2 HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/assets/lib/fontawesome6.3/css/all.css\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 06:32:48 GMT\r\netag: \"5e0fbe-6998c-621597593a440\"\r\naccept-ranges: bytes\r\ncontent-length: 432524\r\ncontent-type: font/woff2\r\ndate: Fri, 17 Jul 2026 18:07:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":432524,"size_decoded":432766,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 432524, version 771.256","md5":"09325ffd7f267fb4e6b1065aab5f5938","sha1":"9f404f25494b2a73d89a803c306de3f232d12452","sha256":"aee810efea02f02fdd98d66218bba36deca0b84c5f939ede2bbe30cb2a9e0375","sha512":"b3b6a997d1975430e846b1c1bb1a112621f5aac0ef4a89c8c69db12cf5c4db4a3ac6af75ced6b424cff0c38d567069fa255c3af38557da4022bd54ccbbd9fa61","ssdeep":"6144:MMJrFSLhQFj2C75hTrMmgB6pdgPJzKLjIbslY2qCBRq/+1KAgnXL3l5XPkB0:t1R1MmT9jDLqkRq/+Enn7VRPr","tlshash":"5494235848fca238b927fca8bdc5939d52668f225370471101f8f29cc26b77d99a68cd","first_seen":"2023-05-24T18:56:57Z","last_seen":"2026-07-17T18:12:54.965356Z","times_seen":378,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bg0fz2bmbrt9","date":"2026-07-17T18:07:31.651Z","timestamp":1784311651651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 02:29:48 GMT\r\nexpires: Thu, 23 Jul 2026 02:29:48 GMT\r\ncache-control: public, max-age=604800\r\nage: 142663\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-07-17T20:41:13.398786Z","times_seen":686163,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bg0fz2bmbrt9","date":"2026-07-17T18:07:31.704Z","timestamp":1784311651704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 02:17:07 GMT\r\nexpires: Fri, 16 Jul 2027 02:17:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 143424\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-17T20:41:13.375076Z","times_seen":930892,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv","date":"2026-07-17T18:07:31.857Z","timestamp":1784311651857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382189\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 19:02:33 GMT\r\nexpires: Wed, 14 Jul 2027 19:02:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 255898\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":891014,"size_decoded":383076,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-07-17T20:17:51.138739Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/lib/fontawesome6.3/css/all.css","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.542Z","timestamp":1784311646542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/lib/fontawesome6.3/css/all.css HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 06:32:48 GMT\r\netag: \"5e0fb5-7b46f-621597593cb50-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":504943,"size_decoded":98945,"mime_type":"text/css","magic":"ASCII text, with very long lines (52052)","md5":"72bc760352aed0da126a81c24aa2018a","sha1":"4bc63ac1aa8d5db6c6b1218d8a4769f4e2f2bb9b","sha256":"a4d87f71b4f857b4fbd7e4e0dd3b0ef4e11db8868522935c5c7957ebf143fbdc","sha512":"4e0df1edea8233889b31c6801cbac073096a1fc94ceb9ec614e511d589341e26b63c84cc1cdbd09f77b2cb9149e62e4f5288da2ad8b2772b94aedd76e609a583","ssdeep":"3072:bKbQKfiR2hJFH9LpccYgOpfZCv1JCkRH1Sj/RkP0866x1nxDQj3:2bQK62hJFHnFoiJ5RHwj/R86qw3","tlshash":"45b4e8a0a05520dcb3d7e60f5b02b629e4b3f33ed9814f5fe1d5484e0dd3a6871867aa","first_seen":"2023-04-13T17:30:37Z","last_seen":"2026-07-17T18:12:54.991107Z","times_seen":252,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/lib/Bootstrap_v5.3.3/bootstrap.bundle.min.js","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.795Z","timestamp":1784311646795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/lib/Bootstrap_v5.3.3/bootstrap.bundle.min.js HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 06:32:48 GMT\r\netag: \"5e0fa9-13b51-6215975937178-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 23799\r\ncontent-type: text/javascript\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":80721,"size_decoded":24097,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-17T20:12:08.156617Z","times_seen":29348,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/Pic%202.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.823Z","timestamp":1784311646823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/Pic%202.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 08:05:59 GMT\r\netag: \"5e0ee9-466fd-6215ac2d26308\"\r\naccept-ranges: bytes\r\ncontent-length: 288509\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":288509,"size_decoded":288750,"mime_type":"image/png","magic":"PNG image data, 690 x 1002, 8-bit colormap, non-interlaced","md5":"7116138ea72fa2dd831db349f73484ea","sha1":"8a261647ee97f0c407a8525b80119eb82d3550f0","sha256":"0adacb20e72254cc9ae936b78d3b66537933201607a5cd6c724f3ef020a8b7fe","sha512":"355df5705b82b2383ca018123c0aade5f03862ad7fd99a9b3e7fc678d1768abe7fbdfaf4052c0674cb8551052add14241479d4cdd57b8806ff5304e8cb467a75","ssdeep":"6144:9lZjExpgYrGquTupvt0ucrshyxCY46ZK0N4ih9guqlHLxroiHJjq:9jMpaqWupvtPcggxrfI0mrusBogq","tlshash":"6554234f51fe5bada6a0b9eb1757c55dbfb9886012a136af1dc02b8834813f0e64340e","first_seen":"2026-06-27T13:15:34.363164Z","last_seen":"2026-07-17T18:12:55.003069Z","times_seen":3,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/fab-icon.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:28.648Z","timestamp":1784311648648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/fab-icon.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:45 GMT\r\netag: \"5e0ef8-9fa-6215aac8cc1d8\"\r\naccept-ranges: bytes\r\ncontent-length: 2554\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2554,"size_decoded":2791,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"7d7e1a2dcea7f208c832a9d7250edfe8","sha1":"1e26b8bb70b33b8ba8f35ae40d35eaed4b6b6ec5","sha256":"b0cc0b3596c99023cd5a11e82eb34b6b28fcc68664b59d8031f74bbc8cc2b3b3","sha512":"54bbe79cfa8ab24982d3cf716465fdac56ae6f8e299c72cb9eb39772b41adcb90c1002f9610c4094b049940ca7f63358a13f5ab2ec145a9f36dfd632c3b849ce","ssdeep":"","tlshash":"f5514c896c8064c2fe8eef9338a531036f5305d1bee07203a3cbc43613346a66b255ce","first_seen":"2026-06-27T13:15:34.347074Z","last_seen":"2026-07-17T18:12:55.01189Z","times_seen":3,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/Hero.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:30.369Z","timestamp":1784311650369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/Hero.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 08:00:08 GMT\r\netag: \"5e0ee8-9eef0-6215aade25ef8\"\r\naccept-ranges: bytes\r\ncontent-length: 650992\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":650992,"size_decoded":651233,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"c4fefcbdc4fba72eaa18f4fa53466687","sha1":"103162c344daa8a724c76cd54acb1d20302415fe","sha256":"a8f597b2b7eb34d28ab883516d17aeab3c6c4bf0e972f5691f8fba4c17651b96","sha512":"cbc599fce5b798f2de2a8af78a181440da616a203f2d09f0d28faaa68c25299aa3a7e28e6d4e914f4fe2ddd6a08f5b1447a980b5256195276208651947193937","ssdeep":"12288:+/lRueFarsyc3T3BYvM9zyjEMDiadhOPZpq1SyX3eZ0W0x9YZxW:uEFiKUD6iadhOhwkyXQEYZ8","tlshash":"2bd423f4d0a028fc68f1a5c1a67975070acb8580e66631abd45475c70deff3e6a1bbc2","first_seen":"2026-06-27T13:15:34.305389Z","last_seen":"2026-07-17T18:12:54.996413Z","times_seen":3,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:30.422Z","timestamp":1784311650422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fin103.grayku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:32:25 GMT\r\nexpires: Mon, 12 Jul 2027 10:32:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 459305\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-07-17T21:03:58.203951Z","times_seen":30100,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":32,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/Barclays.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.811Z","timestamp":1784311646811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/Barclays.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:40 GMT\r\netag: \"5e0ee5-2291-6215aac348fb8\"\r\naccept-ranges: bytes\r\ncontent-length: 8849\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8849,"size_decoded":9087,"mime_type":"image/png","magic":"PNG image data, 625 x 280, 8-bit colormap, non-interlaced","md5":"ca9cf54cfaa305015e060a1e81cceee8","sha1":"005f409e2a2c3b5740a9db94b547b0c709633ec3","sha256":"aad4902a40a20dceb4c61faeeb64cd05ad3581b8a01dfdba950705eef977ba02","sha512":"b85624c36c07c1d9a98306cbed66abd7a9a16ce1ce19568cd2e7c2c40d23acc4363a5e19b864cdde635b4a13ab218a00f923d4df330d4d954417f6fe933f031b","ssdeep":"192:Tuz7ZiYHnbSsUBEXHqKlLsU5KFuqiFveFwzW1/ewwh3Hfu0qIO1tttttRXZl:siYHbSGKKlLs/sqCeFV129poFtttttzl","tlshash":"8702cfef25802b51ca0351b3315914cf47ca0f8556cf316168e9f9c7d17e2a842ad7ca","first_seen":"2026-06-27T13:15:34.317757Z","last_seen":"2026-07-17T18:12:54.959205Z","times_seen":3,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:30.421Z","timestamp":1784311650421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fin103.grayku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Jul 2026 18:06:57 GMT\r\nexpires: Sat, 17 Jul 2027 18:06:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38565,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-07-17T20:38:21.128109Z","times_seen":538923,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":24,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/documentation%204.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.828Z","timestamp":1784311646828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/documentation%204.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:43 GMT\r\netag: \"5e0ef3-3e4-6215aac66c730\"\r\naccept-ranges: bytes\r\ncontent-length: 996\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":996,"size_decoded":1232,"mime_type":"image/png","magic":"PNG image data, 36 x 40, 8-bit/color RGBA, non-interlaced","md5":"243530453fc3a8b26de310e8bc7dddb6","sha1":"f01d8999cd283542499a66b6729193cf31064c80","sha256":"ed466b953d725c21881912316e08b036e74c996691b45208c4e1668941dcbdcd","sha512":"1db729389d56b2e0a99b2c1bf465b3619e5e3862ff33ffae6e15fe268c0848e8eacfa5afb750afd415f76cacdbbebe1f7b73c0bd0d071a9d0a8a7a736447b721","ssdeep":"","tlshash":"8e11c8c96b179110e14a8476e2fc1188037e5a0a0e2bb506b44bedad16235f025c4f26","first_seen":"2026-06-27T13:15:34.35202Z","last_seen":"2026-07-17T18:12:55.01744Z","times_seen":3,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/Pic%203.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.836Z","timestamp":1784311646836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/Pic%203.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 08:00:10 GMT\r\netag: \"5e0eea-11f8b-6215aae0540a8\"\r\naccept-ranges: bytes\r\ncontent-length: 73611\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73611,"size_decoded":73851,"mime_type":"image/png","magic":"PNG image data, 690 x 527, 8-bit colormap, non-interlaced","md5":"370cc87988b17f20a8e90425719bd34f","sha1":"332599063c6fe5d18af9abcb4a402d8a33e5b21b","sha256":"db05f9eaf3897bb938f37be1502e5e1c9b8e718a704e58aa8a94b34dddc65135","sha512":"3c979c43a932e44938a37a345d95e67c9b32ce861dbc6b2ba53614365f58840fc818bbe157a68297d06e2bbfbc0365b08316d31efe0cdcfeb659b38bfd71dd70","ssdeep":"1536:gmvZupzlEOB2sjHSFYI7PqovoQnh5fX2kXCTYsuLl2wZqvR:Xozl92Ocyovn5O5TYJy","tlshash":"e5730226206fc6dee058f665cf8861243b684c3c798bdf96e1080f6615f0d2d36975ea","first_seen":"2026-06-27T13:15:34.353687Z","last_seen":"2026-07-17T18:12:55.005024Z","times_seen":3,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/Footer.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:30.448Z","timestamp":1784311650448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/Footer.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:48 GMT\r\netag: \"5e0ee7-25ed2-6215aacae5f50\"\r\naccept-ranges: bytes\r\ncontent-length: 155346\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":155346,"size_decoded":155587,"mime_type":"image/png","magic":"PNG image data, 1920 x 487, 8-bit colormap, non-interlaced","md5":"2245ef7a213fc9b1ae5ac7b4a9665590","sha1":"a54b8cef29d5b51f2c0f3f3cf6b13ba34389b8e9","sha256":"404135e2ff3578f7a21564e3b5f562107bf03e7a4e1c1c05b6988702c3e2b2ff","sha512":"6809866bab6c8a7db9be86cb29903715a2aaf3a0fc8e853b3050389ee04f74751766b4fae64ac771749f3c93478bcbe92fb5fbef55f5bba435cf9994d91286eb","ssdeep":"3072:2tBOR84PvC5L8yzU519hIZAEWX8usCuAsYKWOQW3MMh2Lszpsq/jiPJwL:2rUPvC5L88U57hK3PW+MMh2Lszp/4CL","tlshash":"4fe312881175032b3669825dfd8ab629533a92f484decf45858b227bd0d81fb6bfd740","first_seen":"2026-06-27T13:15:34.319171Z","last_seen":"2026-07-17T18:12:54.97427Z","times_seen":3,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=w3wt5ux2c36u","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:30.994Z","timestamp":1784311650994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=w3wt5ux2c36u HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 17 Jul 2026 18:07:31 GMT\r\ncontent-security-policy: script-src 'nonce-iv5iP5gKtAfnPYj9fGOmyw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":54288,"size_decoded":29225,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (35851)","md5":"29f6a368b0f7946f559c04d6a3d512bc","sha1":"4ed2d8c4fd7597bc06579f48eb4631030fe89942","sha256":"177bd92b33171b661e33632d176f0d3e505e8ff20624703286c8e2caa7184ac4","sha512":"2ad251cd84ece5b1773f14f8fc458c170b72666612421e7d2fe54402e3a7bca1b17351479d13e6e129222fbe5d14e1b7df3628cec8ec120bf911becce888a3d1","ssdeep":"768:UFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/O7mcwDriNSr1pZPQ2zwWPzhrg60UH2C:y+k1ZwDriMr1PQrWq606oHzVF6fX","tlshash":"39336c1448172442db9b8de223ca3f78ed2e8241720a90b477fd4797aed7c97925a3dc","first_seen":"2026-07-17T18:08:15.149953Z","last_seen":"2026-07-17T18:08:15.149953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026bft=0dAFcWeA4sGcVQKPyhV6Q5p8l3VjtQRyuGTjE5uFX3rYySpGhuJ16UGuuEZDoZAJfIQeJ1_GgF6nPlICDU_6heTjqQIBnxo_PeGw","date":"2026-07-17T18:07:32.689Z","timestamp":1784311652689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42354\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 21:55:21 GMT\r\nexpires: Wed, 14 Jul 2027 21:55:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 245531\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"62429037d6285782824616384b26132e","sha1":"b126600bf1a3041616793c05c1ce749dad01d952","sha256":"31d79d19622679a61ce0ee180498b570d78cf2202cfad7f25d991049d780f564","sha512":"9dc9ee85a14baef9a9c9881cd82c92b086b4d8c902e36dcaeacdae5627da8f9de5791c8305b747b16d512e46f4cae5949d4afaa9f80a35d9395c4623451d13f6","ssdeep":"1536:a7Rpgh9C9ToL9gTNfWNfK4RxMnHZzhXwWx7W1bx7:a7ArC9ULiTYNC4Rs9Xi","tlshash":"eb838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-07-14T22:23:00.889376Z","last_seen":"2026-07-17T20:17:51.138034Z","times_seen":1272,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/documentation%202.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.826Z","timestamp":1784311646826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/documentation%202.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:42 GMT\r\netag: \"5e0ef1-4aa-6215aac5a2ca0\"\r\naccept-ranges: bytes\r\ncontent-length: 1194\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1194,"size_decoded":1431,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"8f173882e9fff4cb39cf6da39168389e","sha1":"c9220439e54960d7cc8981300d1d1665a747ab8d","sha256":"867b83f10f5326846d94e3f1683f1064a0548892a11f00baedfb22c860f2f631","sha512":"36e8e0db375886679950174e7e1f5d8f046c80fb84609689e1429659b2cf0b2380611cc3c13d717c2c3287d491999172bfe1103fe501253b0535492fdcdaf5f9","ssdeep":"","tlshash":"d121dac54be7c27959e84a25507113268cfb0a5709eb88290c4a182620953b349f57b7","first_seen":"2026-06-27T13:15:34.356807Z","last_seen":"2026-07-17T18:12:54.994672Z","times_seen":3,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/documentation%208.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.835Z","timestamp":1784311646835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/documentation%208.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:45 GMT\r\netag: \"5e0ef7-3c4-6215aac805a10\"\r\naccept-ranges: bytes\r\ncontent-length: 964\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":964,"size_decoded":1200,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"a34cef522d9192df7985050d02e735c4","sha1":"5bacf25dab36585c0ed3aeaacb6c06a173c6a1e3","sha256":"ef47f9796912dc394f94bb8fd58e5b3060a6a46b0860fd44e511d8c8f1ebbc0c","sha512":"b660fda9d75895000042993ca6c9f1d08b053cc7973852f8959f88db118e8177b35825cbdedb69bbd71a54e6887b22686d8d3f129f4423cd922e94817c7f1e03","ssdeep":"","tlshash":"481198d5cddb6c9f48415055234a06dba4b63c1c7b337448088bd03790a0e809f0370a","first_seen":"2026-06-27T13:15:34.373916Z","last_seen":"2026-07-17T18:12:54.99554Z","times_seen":3,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/5.3.0/js/bootstrap.min.js","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.785Z","timestamp":1784311646785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 06:33:56 GMT","end":"Tue, 29 Sep 2026 07:33:46 GMT"},"fingerprint":{"sha1":"95:C5:B1:CC:FD:2D:A2:1D:9E:F8:29:11:70:8F:C2:32:DB:0A:16:D8","sha256":"67:23:C0:55:AC:EE:9D:BF:1F:32:F6:C6:31:3A:5A:3F:85:B5:50:88:71:96:38:D1:BB:37:21:B0:0C:CF:B9:EA"}}},"request":{"raw":"GET /bootstrap/5.3.0/js/bootstrap.min.js HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\ncdn-proxyver: 1.57\r\ncdn-requestpullcode: 404\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1333\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncdn-cachedat: 06/13/2026 03:42:12\r\ncdn-status: 404\r\ncdn-requesttime: 0\r\ncdn-requestid: d3b9e96f0f2c87bde511ac403cc95c88\r\ncdn-cache: MISS\r\nage: 2989514\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a1cb2fb0baca56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":590,"size_decoded":1202,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, ASCII text","md5":"f701af76c78b1660cf20ee5bd307758d","sha1":"2bdb76166e393facf3ae0536a6666cd51b9e883d","sha256":"6b10e1183c16ca088ce42b243ca437a6cf0c8e019ed4bd553ad410baf3a240c7","sha512":"874ff5fb7e02619bf632970bcf792ff58c2d070f570feaa0d1142d722eb2e8078a775559652b3a7d4cc82eb2dd01ecfed113ec93d6d84cdc7a0d7ef92a4d4b06","ssdeep":"","tlshash":"8af0e10f1a11d645d10500293de721841eeb41adc5fa033a2205c18630cb6fbfd6b19e","first_seen":"2026-07-02T16:58:47.458614Z","last_seen":"2026-07-17T18:12:55.015545Z","times_seen":4,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":12,"connect":29,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/documentation%207.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.834Z","timestamp":1784311646834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/documentation%207.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:45 GMT\r\netag: \"5e0ef6-4c9-6215aac7fcd70\"\r\naccept-ranges: bytes\r\ncontent-length: 1225\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1225,"size_decoded":1462,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"b7d663676555b06f42d653733dc6c2a1","sha1":"cb765897b0a882d055ad6a1ba0dce6171afb56e9","sha256":"806887ea1c8b709c8861b81f960a5da40e9a23a23ddfe605750769b8d511dc8a","sha512":"ef8d8a2a4c2948058f15ba77f31068133f9116a02071bacb2fce93c988ba9c188bcfdf87281e21e1c8816620a90ff537c6ed7683ce6b776fd9e25185d92c4640","ssdeep":"","tlshash":"f521e7aa45d8998cabc40c0fd2a72abd21f21cbc75405076cec2282b13218bc5f99b99","first_seen":"2026-06-27T13:15:34.358034Z","last_seen":"2026-07-17T18:12:54.975958Z","times_seen":3,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/img/loderr.gif","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.839Z","timestamp":1784311646839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/img/loderr.gif HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 06:32:48 GMT\r\netag: \"5e0f89-55e5-6215975910848\"\r\naccept-ranges: bytes\r\ncontent-length: 21989\r\ncontent-type: image/gif\r\ndate: Fri, 17 Jul 2026 18:07:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21989,"size_decoded":22228,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"9447f771e8491cdcf3e85ff353628409","sha1":"465a80b4433125bd807dc5548bf0cecdf108459b","sha256":"81b95dc5191d57490f4cc5c3c799902ea675d265b28e531d420f299983664947","sha512":"164b398f0071952a51a52e9d541cb0bdc6abec91b204cb868c0a93a3f8620255659f1b5cfaa68640ffe52847d6512eb584fe4fc115ae06d53c4e193365184b64","ssdeep":"384:opEGJJwy1vMClf1td6w55WqCqUV+QAuAj4/4zXlqLp1lDdpQaiac6CePpC/Cn:opnJBMClf1TT55WQUoQAawsLp1ljQaVp","tlshash":"4da29e298b6c088e54d73cf46a55be4e835a6fd46c01817b0572fda7ec3066c80edb97","first_seen":"2024-12-23T23:33:38.792196Z","last_seen":"2026-07-17T18:12:55.023749Z","times_seen":4,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026bft=0dAFcWeA7IAWQnvVulEZGDSWyqLFwv56Ir1I030EchPuZBeJbCBK0SFWCW_B2C032tXarEN4qpnmezYSXgez86ecdChTtwJRrudQ","date":"2026-07-17T18:07:32.651Z","timestamp":1784311652651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382189\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 19:02:33 GMT\r\nexpires: Wed, 14 Jul 2027 19:02:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 255899\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":891014,"size_decoded":383076,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-07-17T20:17:51.138739Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/js/script.js","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.797Z","timestamp":1784311646797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/js/script.js HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:57:52 GMT\r\netag: \"5e0fa5-b48-6215aa5cca750-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 869\r\ncontent-type: text/javascript\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2888,"size_decoded":1163,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"b52b2bbb30fc5002927f168393132a61","sha1":"d86a5ee5e907abc9b4d9aa11cd88b5f50f6b767b","sha256":"31d2148af3270d088e336aec0f2e9df7fb4116add741d08d7cb627ac51c00d45","sha512":"205f28297c1294b5ddc3444f135c1e256c4242853ce6ad5809b1c41df8c30ee53b98306b86ac0ebd2c60790c041bfa84b2d1fd820dea4edbc3d569308f0cad50","ssdeep":"","tlshash":"2c51ed196171207104bb65efc34fb7c832a110ab500bdc023cdd8a996f51db795f2ee5","first_seen":"2026-06-27T13:15:34.344486Z","last_seen":"2026-07-17T18:12:54.969459Z","times_seen":3,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.789Z","timestamp":1784311646789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 17 Jul 2026 18:07:26 GMT\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":976,"size_decoded":1286,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (976), with no line terminators","md5":"f95a33d1515b23f75ba1cae827908e5a","sha1":"8a2cd0295a78d0de87f90b768d4e7e8fb2e8b81e","sha256":"20b461aea0c573b9600f70d23be45acd5cac7b64cd41d4dfddecae45baa583cc","sha512":"d6f5f17b2e12562320b36f25df4f2b530d1ffe8662da98d29532541c4daa6c7e8b3264b46f6c2a521d3420478ad06c58c8b7758572fb1f410e8b43e385d02ff7","ssdeep":"","tlshash":"101121731a08e0350f3209a1a1fedab5e042741cf16848e89415da842eaaccbce05445","first_seen":"2026-07-14T22:30:27.99168Z","last_seen":"2026-07-17T20:33:01.434955Z","times_seen":257,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":14,"connect":68,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.793Z","timestamp":1784311646793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nage: 1840726\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270041-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 377691, 539956\r\nx-timer: S1784311647.902156,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-17T20:38:21.872776Z","times_seen":491463,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":20,"connect":30,"send":0,"wait":36,"receive":369,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/check%201.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.817Z","timestamp":1784311646817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/check%201.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:40 GMT\r\netag: \"5e0eee-7eb-6215aac412278\"\r\naccept-ranges: bytes\r\ncontent-length: 2027\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2027,"size_decoded":2264,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"43b4a2da37aae1d3be8a1484dc5bb694","sha1":"bf3c677bacdb0c376b7f66a2510fe60222a1657b","sha256":"424d70d24c139617f3c303f88b2ac9e5c74d58963aa6449c902207d24cb9c3bc","sha512":"b850c8ed918fa9b44e26331ffacec4a8ae56ae1596100f6a04c5c52de566cc58fccff0cfe6dce5a47dabdebebf300a6d25c16a33b8771d373c27d51ad529999b","ssdeep":"","tlshash":"40412ad30d85e4b48a348972db2b8351de39f069962422c17d32cb205491f4ed5c2b6f","first_seen":"2026-06-27T13:15:34.322012Z","last_seen":"2026-07-17T18:12:54.993837Z","times_seen":3,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/bannermobile.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:30.370Z","timestamp":1784311650370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/bannermobile.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:41 GMT\r\netag: \"5e0eed-1bdbd-6215aac4911b8\"\r\naccept-ranges: bytes\r\ncontent-length: 114109\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":114109,"size_decoded":114350,"mime_type":"image/png","magic":"PNG image data, 375 x 812, 8-bit colormap, non-interlaced","md5":"029c6f8d95fac9f400cc4705f4c2f982","sha1":"24975690e42b0662db04bdd27f6b1f67a9fb0eed","sha256":"90cc5544ec2a5f9e1aa78a3f0bc782dc018b0c9ff762dd3527dee0603615d7b1","sha512":"e57b7897f363ec22175871c47db8565ba36a737a0611c80ab46f26a3f7da38c269602b58dbfcc5fb515427aa03585fa30e6a8f418ffe7c690eb047c84d863541","ssdeep":"3072:wgUpxOWs7wgmbbn8WASVWJNl+SL1PT61PLDk/ti:nM/Owg6b8SVo60tokg","tlshash":"50b3122a5761189fbb3daa2a844abcdac11ea4a6631cc4fd14c7ef4fc2f8050d471d0e","first_seen":"2026-06-27T13:15:34.33115Z","last_seen":"2026-07-17T18:12:54.999587Z","times_seen":3,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:30.425Z","timestamp":1784311650425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fin103.grayku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 02:57:11 GMT\r\nexpires: Fri, 16 Jul 2027 02:57:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 141019\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-17T20:40:39.469873Z","times_seen":376267,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026bft=0dAFcWeA4sGcVQKPyhV6Q5p8l3VjtQRyuGTjE5uFX3rYySpGhuJ16UGuuEZDoZAJfIQeJ1_GgF6nPlICDU_6heTjqQIBnxo_PeGw","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:32.637Z","timestamp":1784311652637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026bft=0dAFcWeA4sGcVQKPyhV6Q5p8l3VjtQRyuGTjE5uFX3rYySpGhuJ16UGuuEZDoZAJfIQeJ1_GgF6nPlICDU_6heTjqQIBnxo_PeGw HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 17 Jul 2026 18:07:32 GMT\r\ncontent-security-policy: script-src 'nonce-vxE-wjGtwrSvu6AHHEdsoQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":17035,"size_decoded":3283,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"0a24fdc1f323439a25a368fe1c8201d1","sha1":"4ad9bbf788e12a6ca82b4fd50f74c98c597b07f0","sha256":"e3cacfe607df5446e38fd630235984f793be7aad6a4209953d4b92db1945483d","sha512":"c87f45fcb67a8c249e6758898596daf9f94af2416f1b8f77bb3ce665c003eb2ab264911d63a492ee3a8832d2e4672250ac5d1adfc89c39de7d698ae65d593704","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/p:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+E","tlshash":"10720f50041744009b835ce223ce7f34fe4e92117246d0b1abfd9b6beedbda6926939d","first_seen":"2026-07-17T18:08:15.161044Z","last_seen":"2026-07-17T18:08:15.161044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/documentation%201.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.824Z","timestamp":1784311646824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/documentation%201.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:42 GMT\r\netag: \"5e0ef0-4b5-6215aac574288\"\r\naccept-ranges: bytes\r\ncontent-length: 1205\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1205,"size_decoded":1442,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"1cb5265b3f5b2bc9494bcbe1936dc2a1","sha1":"b6b8e031e34878880611758f7c3762dab77dcce0","sha256":"c9f2fc2416eff70302db47524b9dd81f8cf25c2e1beb894592bda1f16f8d6460","sha512":"678dbe7a7b8e9b7eaa1b0c757b85e43249c50a830eb460c168872b6735524e57668b6917ec27fc38a2a6486031c8c0d98b8e5679e6ada48c58ae8b843fdc985b","ssdeep":"","tlshash":"6b21e4faac288067e43f883ca4c16230d8267a4e29c1e0b48a626929153b3a8038d2d0","first_seen":"2026-06-27T13:15:34.345839Z","last_seen":"2026-07-17T18:12:54.972567Z","times_seen":3,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=w3wt5ux2c36u","date":"2026-07-17T18:07:31.821Z","timestamp":1784311651821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=w3wt5ux2c36u\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Fri, 17 Jul 2026 18:07:31 GMT\r\ndate: Fri, 17 Jul 2026 18:07:31 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":102,"size_decoded":954,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2e2fadb2f94f8aac778ba92f7a42562e","sha1":"ce36065c4b840b15eb7a5db3a0714443e0e589a6","sha256":"f020cafe7019dda7755577ad8ac2e5bdee87534b530f75d65286d31c07420739","sha512":"17bf4fb7bc2d907160bcaf201499ea6aab2c0e413c56a3a2dbeecb3637b41603f62c9155f0dc137709ff8fa0e646a1024f44ba9c6b9d1ba068d227a0fcfd67c9","ssdeep":"","tlshash":"a6b01227a654c4191c000146c827d7ade002412cf67080fc4068dfd402d29a78501800","first_seen":"2026-07-14T22:23:00.817585Z","last_seen":"2026-07-17T20:17:51.115139Z","times_seen":1168,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv","date":"2026-07-17T18:07:31.852Z","timestamp":1784311651852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382189\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 19:02:33 GMT\r\nexpires: Wed, 14 Jul 2027 19:02:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 255898\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":891014,"size_decoded":383076,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-07-17T20:17:51.138739Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T18:07:25.433Z","timestamp":1784311645433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/7.4.33\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f; expires=Fri, 17-Jul-2026 20:07:26 GMT; Max-Age=7200; path=/; HttpOnly\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 15424\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"BootstrapCDN:5.3.0","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]}],"data":{"size":91505,"size_decoded":15894,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"ed50e099e6b7830c9c41420addaa64ff","sha1":"03735638deb283c36b899032248ede50627d7d3e","sha256":"cb7cc2d46a701d912824df2595b6ff2bf4447db7b528bc97b97b053729f3d05d","sha512":"e5494530b9693bf9edbdbc224ea7b33bb4e41e869e0f87d4960059cc4bd3a6334f33ae53577687096c7c2e8bf8e1e55635f18594910c3998d01ec776c6d99670","ssdeep":"768:MFP/ymGl9DTk3CkkNw+uUVJc8PTjFfwDxFAuHrN+U8XyjDj0/GTQUJlJg22Zw+I0:MFyHk3CkkNw+uAtFSx7Zg22Zw+IAt8W","tlshash":"76938d1068f4d9b240eb98d856325e2daef88303d50a1288fa5d9ff61f73d69ce37158","first_seen":"2026-06-27T13:15:34.311869Z","last_seen":"2026-07-17T18:12:54.985749Z","times_seen":3,"resource_available":true,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":44,"connect":156,"send":0,"wait":196,"receive":0,"ssl":472},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/documentation%206.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.833Z","timestamp":1784311646833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/documentation%206.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:44 GMT\r\netag: \"5e0ef5-404-6215aac737548\"\r\naccept-ranges: bytes\r\ncontent-length: 1028\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1028,"size_decoded":1265,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"812db9d2550e3cbe041b81ea847fc61e","sha1":"f6e4ca5242c85d68fde606081e6da01413d22343","sha256":"a27a1ecd2d751f5283f7af2d345895ac053b33ad1081596987178d3eeb7d36a2","sha512":"8d1d636a88eaa6a27871789998e9742b9133a5a4b929e3f217a7cfcff544b39bc4811eb5e4eb1a2a2eb7f2b09e462d0473c2a44feaceed975d1d968fffa5fd6e","ssdeep":"","tlshash":"5911d8c3e9b250358f0931e0061092e238d7131b05a03444fd0a14279007edd03f7abb","first_seen":"2026-06-27T13:15:34.314783Z","last_seen":"2026-07-17T18:12:55.021168Z","times_seen":3,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/css/style.css","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.778Z","timestamp":1784311646778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 12 Sep 2024 13:28:25 GMT\r\netag: \"5e0eca-e4a4-621ec14d0ed78-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 8914\r\ncontent-type: text/css\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":58532,"size_decoded":9203,"mime_type":"text/css","magic":"ASCII text","md5":"ca20b0b0a9bb93ee0f1d81fa4957f759","sha1":"42f9930b2b8c63fc2ff59c7c9da18ec566ed94d1","sha256":"2261c21968cff2d95185bca75507949f32edf64ed95eb40688ddc5b40d0bdb2f","sha512":"6f5a9650dd9d209ac7bff53432a9dc010aaaf14434be0cbff1be11ef5797a635186184e53b7f01285fc1e0af41380a4601ab5c98c48addcaa402b38081e5dd1c","ssdeep":"1536:L4c/L3hlFJ4XMV4Htlcask+OMuDdb6mt8d07ga9qCpvVWh5xrsy7tzsYd0sPecUd:T3hlFcbSWaO","tlshash":"ed43229f76b06514382aa5b57e2a2be4731a9413c20edcb57fd4306ccfcc2e586a274d","first_seen":"2026-06-27T13:15:34.316251Z","last_seen":"2026-07-17T18:12:54.986776Z","times_seen":3,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/Pic%204.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.838Z","timestamp":1784311646838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/Pic%204.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 08:00:13 GMT\r\netag: \"5e0eeb-2e758-6215aae36f350\"\r\naccept-ranges: bytes\r\ncontent-length: 190296\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":190296,"size_decoded":190537,"mime_type":"image/png","magic":"PNG image data, 690 x 1002, 8-bit colormap, non-interlaced","md5":"a42c59c2e1fe2da674d4d7f1ddc52960","sha1":"dcb25ac1b3e6c3eeead54021de269e433ae314ee","sha256":"2bcdb7989de03b983d9c3bb2d49288b20beef2dd382bf41fbb233ceabfa51236","sha512":"24dedfcf9b06ba476875ce12519a462e04f148e8c446a58c0fa1185780e2fa22ec6c49c8e795487bffc8f83c8a18d4c73ff37284d7c9611389d41ccf62c30318","ssdeep":"3072:yQ61jICNN8EQmS/rNtWp5VIf1YwzlLlcP7kXgCoQi0/KMEw5ULZ0L8lzvUm6v:yv1XzzqXm5VINjlL47kFoE/KME8ULZC5","tlshash":"2c04127aeb723b477f87ad49a00b65ec431cf702f7439f85da5a4b195e9206dc20ac42","first_seen":"2026-06-27T13:15:34.326303Z","last_seen":"2026-07-17T18:12:55.022083Z","times_seen":3,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/logo.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.840Z","timestamp":1784311646840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:48 GMT\r\netag: \"5e0ef9-14b0-6215aacbaf210\"\r\naccept-ranges: bytes\r\ncontent-length: 5296\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5296,"size_decoded":5534,"mime_type":"image/png","magic":"PNG image data, 102 x 60, 8-bit/color RGBA, non-interlaced","md5":"a52b79cc967182de7fc7595b3f4caa98","sha1":"e42991f6460f5657487f7af4483f96c1dee40569","sha256":"28b776b5ce7c5c72b3130d00e43c927ee0be3a518cf93eca805499b2c55c3284","sha512":"5f6c6f97c1d6f8b5e8e65035ed03b52382829bcd2545920bfe258f2fdf0ab67b89b34e348deb20495be7cf55af0ed8101a60db82d0272a26d04e3402b168145e","ssdeep":"96:/S7NrJOYPAFsZ2wWsBCSNTXWvDJt5ItbKsIe2iyp9+Ob6+bNvDwPPW:/S77V6MPWsQgKvDJt5GbKfiyHbl5wm","tlshash":"f1b17ef8d793339080b2a1b655d616386e1f58332372fd29eb170201fa4dd981497dfa","first_seen":"2026-06-27T13:15:34.365043Z","last_seen":"2026-07-17T18:12:55.00875Z","times_seen":3,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026bft=0dAFcWeA7IAWQnvVulEZGDSWyqLFwv56Ir1I030EchPuZBeJbCBK0SFWCW_B2C032tXarEN4qpnmezYSXgez86ecdChTtwJRrudQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:32.601Z","timestamp":1784311652601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026bft=0dAFcWeA7IAWQnvVulEZGDSWyqLFwv56Ir1I030EchPuZBeJbCBK0SFWCW_B2C032tXarEN4qpnmezYSXgez86ecdChTtwJRrudQ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 17 Jul 2026 18:07:32 GMT\r\ncontent-security-policy: script-src 'nonce-IJOWiavlgyr9hce8AMznfQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":17035,"size_decoded":3284,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"f8c3141d7bd99000f207ed8374157af8","sha1":"29b5671391701cd8e007f291d3a5997dbce505e1","sha256":"ea7205d1a5561187a97c4e377ea6f56ef75137362680be10c16fac40acbf1d40","sha512":"9ec2bde410f731f7afacc1f03ca03f993e897d81bd150450dd5658a68d5a2e5345ad0caad2521fc5e58400c9fbfbfb43d655a1eb91be91212a46eb4c5b5fb21c","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/L:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+i","tlshash":"21720e50041744009b835ce223ce7f34fe0e92517246d0b1abfd9b6beedbda6926939d","first_seen":"2026-07-17T18:08:15.16848Z","last_seen":"2026-07-17T18:08:15.16848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/Footer-mobile.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:30.449Z","timestamp":1784311650449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/Footer-mobile.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:46 GMT\r\netag: \"5e0ee6-6991-6215aac92efe0\"\r\naccept-ranges: bytes\r\ncontent-length: 27025\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":27025,"size_decoded":27264,"mime_type":"image/png","magic":"PNG image data, 375 x 524, 8-bit colormap, non-interlaced","md5":"04e1f99af471ef838f6182d95bcd545f","sha1":"d6d25285725185bfae771d034be3ecb757a852ef","sha256":"8386e2409cd3365b74b08da459bff701c55655e06bba8c0e81fc3d2745259203","sha512":"01706a62d5a9505df8fd4a12b9fd7dec3f76ef58f1f263fac56aca4b7ba1a70f60cc64173f4aed282ab6cc3317dd581a9ede3d514000ae6b21833d2fceb4b375","ssdeep":"768:xzs5yspJP+ypaibipf+29UgD50H6N8m64:xgJp5+M8pJOg90Hjmb","tlshash":"9ac2e1e81080435ab4def265e460d9bc941a05bfc32ea698e6d3e549b247a19f1282f6","first_seen":"2026-06-27T13:15:34.355599Z","last_seen":"2026-07-17T18:12:54.963369Z","times_seen":3,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=w3wt5ux2c36u","date":"2026-07-17T18:07:31.068Z","timestamp":1784311651068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382189\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 19:02:33 GMT\r\nexpires: Wed, 14 Jul 2027 19:02:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 255898\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":891014,"size_decoded":383076,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-07-17T20:17:51.138739Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026bft=0dAFcWeA7IAWQnvVulEZGDSWyqLFwv56Ir1I030EchPuZBeJbCBK0SFWCW_B2C032tXarEN4qpnmezYSXgez86ecdChTtwJRrudQ","date":"2026-07-17T18:07:32.649Z","timestamp":1784311652649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42354\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 21:55:21 GMT\r\nexpires: Wed, 14 Jul 2027 21:55:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 245531\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"62429037d6285782824616384b26132e","sha1":"b126600bf1a3041616793c05c1ce749dad01d952","sha256":"31d79d19622679a61ce0ee180498b570d78cf2202cfad7f25d991049d780f564","sha512":"9dc9ee85a14baef9a9c9881cd82c92b086b4d8c902e36dcaeacdae5627da8f9de5791c8305b747b16d512e46f4cae5949d4afaa9f80a35d9395c4623451d13f6","ssdeep":"1536:a7Rpgh9C9ToL9gTNfWNfK4RxMnHZzhXwWx7W1bx7:a7ArC9ULiTYNC4Rs9Xi","tlshash":"eb838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-07-14T22:23:00.889376Z","last_seen":"2026-07-17T20:17:51.138034Z","times_seen":1272,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026bft=0dAFcWeA4sGcVQKPyhV6Q5p8l3VjtQRyuGTjE5uFX3rYySpGhuJ16UGuuEZDoZAJfIQeJ1_GgF6nPlICDU_6heTjqQIBnxo_PeGw","date":"2026-07-17T18:07:32.691Z","timestamp":1784311652691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382189\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 19:02:33 GMT\r\nexpires: Wed, 14 Jul 2027 19:02:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 255899\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":891014,"size_decoded":383076,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-07-17T20:17:51.138739Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/documentation%205.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.831Z","timestamp":1784311646831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/documentation%205.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:44 GMT\r\netag: \"5e0ef4-3b6-6215aac723110\"\r\naccept-ranges: bytes\r\ncontent-length: 950\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":950,"size_decoded":1186,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"bded66805c1ee6ba68bbe367b3f64b7a","sha1":"e82f5bbf0a244463d64d7d1f9dfb5be369739dc7","sha256":"e3ca00d369e69d4ecc12ab72273e5408cf50c348ca6aef395ae09d425446bad1","sha512":"201b7abbe6cbef3c3de766690608dc4d4395197d3263b5f95ea08bdeb3797177a76ddd19cf96bf21b5718e75b388f5beea4aab9d65024b806dabbb2b2f4cc623","ssdeep":"","tlshash":"e511c81a64229e7df3ab1570091e4d25b0532e1112052c281a9b6070a57815d36f56b6","first_seen":"2026-06-27T13:15:34.376636Z","last_seen":"2026-07-17T18:12:54.973445Z","times_seen":3,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/pdf%201.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.837Z","timestamp":1784311646837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/pdf%201.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:49 GMT\r\netag: \"5e0efa-255-6215aacc76590\"\r\naccept-ranges: bytes\r\ncontent-length: 597\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":597,"size_decoded":833,"mime_type":"image/png","magic":"PNG image data, 37 x 37, 8-bit/color RGBA, non-interlaced","md5":"868500f0b83837e8e7a13189e9607a16","sha1":"5f1e1f59b4df4d2a260ecfbe804ba3b43502a839","sha256":"5b27e07bd07b2dbac48eb6e7f12abb0c65c557c2029fb830c1950c9e10a5f3bf","sha512":"1fcbe74c354937a5a55bfa016076e5b202f9113836453d8cdabba527179e187ab4674f22ef19e4a0374e59c68c27e510e49ea2155e5547572d9c821610d74ab8","ssdeep":"","tlshash":"b6f047c5f3b7556f8aced2a51b47c355e83310a14c03614b188c171457c0474294bd6b","first_seen":"2026-06-27T13:15:34.341269Z","last_seen":"2026-07-17T18:12:55.007274Z","times_seen":3,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:30.531Z","timestamp":1784311650531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://fin103.grayku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382189\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 19:02:33 GMT\r\nexpires: Wed, 14 Jul 2027 19:02:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 255897\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":891014,"size_decoded":383076,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-07-17T20:17:51.138739Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":5,"connect":17,"send":0,"wait":21,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=w3wt5ux2c36u","date":"2026-07-17T18:07:31.697Z","timestamp":1784311651697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 02:17:07 GMT\r\nexpires: Fri, 16 Jul 2027 02:17:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 143424\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-17T20:41:13.375076Z","times_seen":930892,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bg0fz2bmbrt9","date":"2026-07-17T18:07:31.817Z","timestamp":1784311651817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LecNjcqAAAAADM5HG8SVZ6VmmkBd_pL8IJKDDD_\u0026co=aHR0cHM6Ly9maW4xMDMuZ3JheWt1LmNvbTo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bg0fz2bmbrt9\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Fri, 17 Jul 2026 18:07:31 GMT\r\ndate: Fri, 17 Jul 2026 18:07:31 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":102,"size_decoded":954,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2e2fadb2f94f8aac778ba92f7a42562e","sha1":"ce36065c4b840b15eb7a5db3a0714443e0e589a6","sha256":"f020cafe7019dda7755577ad8ac2e5bdee87534b530f75d65286d31c07420739","sha512":"17bf4fb7bc2d907160bcaf201499ea6aab2c0e413c56a3a2dbeecb3637b41603f62c9155f0dc137709ff8fa0e646a1024f44ba9c6b9d1ba068d227a0fcfd67c9","ssdeep":"","tlshash":"a6b01227a654c4191c000146c827d7ade002412cf67080fc4068dfd402d29a78501800","first_seen":"2026-07-14T22:23:00.817585Z","last_seen":"2026-07-17T20:17:51.115139Z","times_seen":1168,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/check-black.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.819Z","timestamp":1784311646819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/check-black.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:41 GMT\r\netag: \"5e0eef-437-6215aac4dad68\"\r\naccept-ranges: bytes\r\ncontent-length: 1079\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1079,"size_decoded":1316,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"a289b460d6482bcc0d6340ec9b3e10ac","sha1":"a4b10111f167655b857e11337ef93826eb2ab1ed","sha256":"2c83d4dedbbf6a9e217223778483fceaa1c3a787c7fcc8a3dacfdc8fbd0ad5fe","sha512":"1b291f579897628ce1ae644dfc7d7bcad5367a125e792ee24a0f5ae75c04e10ad41a24535d83090c33cb022e02e4dbf11b5c73b2bcf0295d09737b6b4defcb75","ssdeep":"","tlshash":"1911b5e9f9d0dc2df81d4c7b86632c69bb2b1d7fa2802c9748856870d52294f1689743","first_seen":"2026-06-27T13:15:34.370975Z","last_seen":"2026-07-17T18:12:54.992943Z","times_seen":3,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/documentation%203.png","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.827Z","timestamp":1784311646827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/documentation%203.png HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 07:59:43 GMT\r\netag: \"5e0ef2-436-6215aac652150\"\r\naccept-ranges: bytes\r\ncontent-length: 1078\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 18:07:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1078,"size_decoded":1315,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"33bc304c221fe3e3a8915e3c1e3b2200","sha1":"bd51fe255a9a1129c87cff9f7bc98a12de519d49","sha256":"f9c50bf36348c4a6075a4e060178194879f15248ca5fa6cebb36da448d6f2157","sha512":"ef65c3a6df06701a3d10cd45dec22cf5466f74bc474b824bc82b7f172fd81704dfc533f4a7ffebc7d840013ca35416676bad4dff803cf884b144461e85fc2d22","ssdeep":"","tlshash":"cf11b9c3f7a810cded118e160d54d1dcfa3606ad16095754786888511b385bdd248684","first_seen":"2026-06-27T13:15:34.372347Z","last_seen":"2026-07-17T18:12:54.990317Z","times_seen":3,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:30.362Z","timestamp":1784311650362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 17 Jul 2026 18:07:30 GMT\r\ndate: Fri, 17 Jul 2026 18:07:30 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":976,"size_decoded":1286,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (976), with no line terminators","md5":"f95a33d1515b23f75ba1cae827908e5a","sha1":"8a2cd0295a78d0de87f90b768d4e7e8fb2e8b81e","sha256":"20b461aea0c573b9600f70d23be45acd5cac7b64cd41d4dfddecae45baa583cc","sha512":"d6f5f17b2e12562320b36f25df4f2b530d1ffe8662da98d29532541c4daa6c7e8b3264b46f6c2a521d3420478ad06c58c8b7758572fb1f410e8b43e385d02ff7","ssdeep":"","tlshash":"101121731a08e0350f3209a1a1fedab5e042741cf16848e89415da842eaaccbce05445","first_seen":"2026-07-14T22:30:27.99168Z","last_seen":"2026-07-17T20:33:01.434955Z","times_seen":257,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/lib/Bootstrap_v5.3.3/bootstrap.min.css","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.541Z","timestamp":1784311646541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/lib/Bootstrap_v5.3.3/bootstrap.min.css HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 06:32:48 GMT\r\netag: \"5e0faa-38d63-6215975937560-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 31248\r\ncontent-type: text/css\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":232803,"size_decoded":31539,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-17T19:48:45.586799Z","times_seen":24959,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin103.grayku.com/assets/images/visa-3-svgrepo-com%201.svg","fqdn":"fin103.grayku.com","domain":"grayku.com","tld":"com"},"ip":{"addr":"148.72.73.195","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fin103.grayku.com/","date":"2026-07-17T18:07:26.809Z","timestamp":1784311646809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"terminaljv.grayku.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 10:39:06 GMT","end":"Sat, 05 Sep 2026 10:39:05 GMT"},"fingerprint":{"sha1":"C7:D6:F1:33:6E:27:03:E8:D4:45:69:A1:74:C8:BD:23:05:07:C7:3F","sha256":"5C:2C:C6:6D:49:71:51:3E:12:DF:3D:2B:7F:3B:FF:23:A4:A0:45:AC:48:6B:3E:32:31:00:CD:AC:8D:08:ED:E9"}}},"request":{"raw":"GET /assets/images/visa-3-svgrepo-com%201.svg HTTP/1.1\r\nHost: fin103.grayku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fin103.grayku.com/\r\nCookie: ci_session=db6913ab7925708b7a54e3c851167dec44b0720f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 05 Sep 2024 08:00:20 GMT\r\netag: \"5e0efb-896-6215aae9a3d48\"\r\naccept-ranges: bytes\r\ncontent-length: 2198\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 18:07:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2198,"size_decoded":2439,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5835ce0dc04156434047a524850c1f1e","sha1":"ac8de6550395d6150bd1f99798f7ece59b369c91","sha256":"e1113f0324ccdd9ac6cd9191d4b1edaefac29d14db792b4ca2582d737f049280","sha512":"176f5286e689e1b5ddad1e24bea8b25eaf232e571ebb806268a7b25011dd2dfd3235b21f92b6fb67f82944976f98d0b7949dcbf28bae7c69eedf2e4f73d2be58","ssdeep":"","tlshash":"aa4171ec336c59da8655c3f6afa210ac6517e0f69bc4d214ca86af6f78810676c11bc4","first_seen":"2026-06-27T13:15:34.32507Z","last_seen":"2026-07-17T18:12:55.010318Z","times_seen":3,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"fin103.grayku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"fin103.grayku.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}