{"report_id":"a0c2cedd-1de1-45df-b2dd-87c33cb6e7c5","version":0,"status":"done","tags":[],"date":"2026-07-12T21:23:15Z","url":{"schema":"https","addr":"silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"104.21.63.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"title":"Quantrixysost | Quantrixysost : ბიზნეს გეგმის შექმნა და ადაპტაცია","dom":{"size":77007,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7228)","md5":"d161b218486785bd8fafc5cfd339fb0a","sha1":"165b79adbe3771c9a842b278afd8d8f3a4c53f1f","sha256":"7bd3d01c25428d1865a85d90efc4a19a0f0b9a4288df51a9c4249a4df1e75bc4","sha512":"4ca4231b73287e33cb610b65a72ee7d01426646f7c7453615efc3d836c6e015b5b9e6c543daa93c5b7f6b6024d102b20294969199fd66229d1a4f006d50fbb96","ssdeep":"768:BljttPyJLRU1hr+C6XkpfdBFjFNzkkfqh50CMfvFJFO4w:DfPyJdU11+zYNQr0CMfvjM4w","tlshash":"2773894629fb23249c4f50240bb6b78a77a48c4fe1c9c83eb91db191bf829445dbf359","dom_hash":"domhash9080f823545037b27e0c6463d76cb57c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"104.21.63.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:23:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"silversiphon.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":2,"received_data":5891,"sent_data":1070,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":2,"received_data":83406,"sent_data":1094,"comment":"","tags":null,"fingerprints":null},{"fqdn":"silversiphon.top","ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-06","domain_rank":0,"first_seen":"2026-07-10T08:14:20.773513Z","last_seen":"2026-07-10T08:14:20.773513Z","alert_count":12,"request_count":12,"received_data":512462,"sent_data":10772,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3cec1168a2cf6f66103c4d60f4f2ec01","sha1":"93a9513ea06beee5f1c06879132bb2aeef5e5aa4","sha256":"ec14976262dff9470e89bbd67eff74895725416401ade4c2b82b4d2c13092ee3","sha512":"dd8e683f447de6512bc1d89df1edef20cee2ba030ce1d884ead18e33f667e53ab7221b15990f127acc2e0941a8c3dab23d07640f60c8ecdffed6e3a2cc8aa231","ssdeep":"","tlshash":"c401894b717b101f609fb53b6b5f832a3635010f14854a123eacc3509f75e242ce1799","size":822,"data":"","first_seen":"2026-07-12T21:23:18.066756Z","last_seen":"2026-07-12T21:23:18.066756Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"silversiphon.top/lander/white-1/js/cookie.min.js","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7e7f229bfffd7c22904dfd85037ca15","sha1":"e24a42588d9a01715d64f66155b9e03aff863007","sha256":"be23080b185440e40fd57a559264156ce5b6f7c61a2eaf5227e1cf66737d0fa5","sha512":"afd36d075fb91c8f52d61ed380da38f9aaa7155f7c1004e2dd1b2050d109367dd5b76af1c518ebf181c5b22b404e4f7d9a0a80fa0a1b9d98f733477d83fed3d3","ssdeep":"","tlshash":"d151f12ab15414bc43bb32319eef978d78320779196cd429486cc1661a24ee019efcef","size":3050,"data":"","first_seen":"2026-07-12T21:23:18.063195Z","last_seen":"2026-07-12T21:23:18.063195Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"silversiphon.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-14T16:16:49.3483Z","times_seen":395852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"silversiphon.top/lander/white-1/files/img/avatar-jX-0.jpg","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:39.938Z","timestamp":1783891359938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silversiphon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 07:56:51 GMT","end":"Sun, 04 Oct 2026 08:55:39 GMT"},"fingerprint":{"sha1":"B8:5D:CF:63:90:6C:B2:00:34:41:03:44:03:E2:8E:4F:88:C2:1F:1A","sha256":"1D:90:D1:27:06:59:6B:7C:F5:F0:30:C7:AE:C6:FC:A8:A2:B5:72:EF:51:E8:45:4E:21:E6:C1:1B:DE:39:17:B3"}}},"request":{"raw":"GET /lander/white-1/files/img/avatar-jX-0.jpg HTTP/1.1\r\nHost: silversiphon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln\r\nCookie: e3b0c4_13=1hq4g5m1lcsngj; _token=1hq4g5m1lcsngj.1783977759.1.8b026c5bb3d88638586b773af527ba27; _subid=18uumd0.d.phr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:22:40 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 08:06:27 GMT\r\netag: \"6a4f5683-1a491\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VbtKcrbuYdN6eMZcO7DwhmjYm8rIHep1HVtTOjJhdd6LBDdU3lVV4ljpllPfqTZsFTG10Lu5l4s0djDX%2Fy1ui3gt7OlBq0p4e%2FgOGLK%2F%2BhmitOFKbdd74SKfxSACff3898NA\"}]}\r\ncf-ray: a1a31ac79d535ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 107665\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107665,"size_decoded":108390,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 720x720, components 3","md5":"f066b5e6a276fd5aa343f61ae346cacd","sha1":"83d10a5dd1ca8d58f294db1f8b35070e32bad139","sha256":"79be261a0742817214661d362f705a6cc25f45ab6553d82e110035be82e08587","sha512":"4b845411f41bb13b83e7f5779323e0ccf9278f1f46adc771eb09fbeac8075f60dced7340f09dc189b6869e59f17bc63a9b92e8c591d49ed16c045421b88f7be4","ssdeep":"1536:BkcZXOrCncomb/uKsq3NUrrp3GgOX7nNHfLOA38Yhws95wboO1zQw8uqO0WV1qd:VZXODs+2p2lX7nRIc5qoO1lV1qd","tlshash":"09b31264f681e36073efab09bd3c1f3f1741d7e1988e2c924da382960465b1a03fa174","first_seen":"2026-07-12T21:23:18.043554Z","last_seen":"2026-07-12T21:23:18.043554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"silversiphon.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Sofia+Sans:ital,wght@0,1..1000;1,1..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:39.916Z","timestamp":1783891359916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Sofia+Sans:ital,wght@0,1..1000;1,1..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://silversiphon.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 21:22:40 GMT\r\ndate: Sun, 12 Jul 2026 21:22:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3636,"size_decoded":1259,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fef164d75e3c8f70215ed391bfb8b7af","sha1":"1295379e078d051017ae589703a2c594dc7fb560","sha256":"a0b644d91bf3d9d052a4bdbb9d3356b83fe276751bf843645eca9000dad58962","sha512":"2573237c0553538485dc31910d4eb21a3ae0127430308801a4dbb340694cfa719be739f70c37b674b5f88db4350fb695f645a9a197340e91ceba104e126741ce","ssdeep":"","tlshash":"5371c9d1042b6504eb632cc237cf3e269e4f61246046c1ad9bfe1899ede6d2a52b0b1d","first_seen":"2025-09-06T15:17:18.213196Z","last_seen":"2026-07-12T21:23:18.044599Z","times_seen":58,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":37,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Shadows+Into+Light\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:39.918Z","timestamp":1783891359918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Shadows+Into+Light\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://silversiphon.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 21:22:39 GMT\r\ndate: Sun, 12 Jul 2026 21:22:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":907,"size_decoded":1091,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8f1645c463b187f710706423ccc73cf4","sha1":"c9840fd0d7b48b5b7d3a49e33342259a2b9c75f7","sha256":"6aa619e1e59c8038940af4a3ee14860fb8ffa5b999c70a78d81ee06eed10a9bf","sha512":"edfdd1c15bb954f4236fe230a36ad6587d1669316b05ea1d676dfd5e29f1d220b6c9f5ec1100ee2c5d74c7d006f1248eab4b12bb5b43359207ed9eac3ce60224","ssdeep":"","tlshash":"9111dc820827f910aba30cc623ce7e33ee0e2220984495645efe1498bca6e265252b0d","first_seen":"2025-09-14T20:36:21.907936Z","last_seen":"2026-07-14T04:46:36.641158Z","times_seen":288,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":1,"connect":14,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"silversiphon.top/lander/white-1/other/css/cookie.min.css","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:39.919Z","timestamp":1783891359919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silversiphon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 07:56:51 GMT","end":"Sun, 04 Oct 2026 08:55:39 GMT"},"fingerprint":{"sha1":"B8:5D:CF:63:90:6C:B2:00:34:41:03:44:03:E2:8E:4F:88:C2:1F:1A","sha256":"1D:90:D1:27:06:59:6B:7C:F5:F0:30:C7:AE:C6:FC:A8:A2:B5:72:EF:51:E8:45:4E:21:E6:C1:1B:DE:39:17:B3"}}},"request":{"raw":"GET /lander/white-1/other/css/cookie.min.css HTTP/1.1\r\nHost: silversiphon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln\r\nCookie: e3b0c4_13=1hq4g5m1lcsngj; _token=1hq4g5m1lcsngj.1783977759.1.8b026c5bb3d88638586b773af527ba27; _subid=18uumd0.d.phr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:22:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Jul 2026 08:06:27 GMT\r\netag: W/\"6a4f5683-1244\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DlYf8TMMjecr2Kf36sKR9cw7ZxhvZhWtzkl5GcGdAognOXguuqrUqGslZEZt7GLL8TGdDZRYQp1x4KnDgKXa01xXZZDhdvG2tVUf2H1YeYdfs%2FKLK2QoziV2tQR256Z9nNVU\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a31ac78d465ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4676,"size_decoded":1935,"mime_type":"text/css","magic":"ASCII text, with very long lines (4676), with no line terminators","md5":"7eafec4538bd5bf8ec71c34007fc3f2c","sha1":"0932d8c4015a46794ff333556facff26dc428fd6","sha256":"07fc1e8efdcc2e5227b807de69752bde5dabde4a5f6f8fb49533e96a097c47b4","sha512":"e5c1f7e91ae63f58860829c28724bdc58621f630125cf6cf6e653bba5c1cd703f34bc10430c50d16c7a004980fbec7378983a5f9d39bb93349a72865f9fa2237","ssdeep":"48:uaVWzCJCqI2iJRmwNA0hCcKdgIdmXkSw55bPw82w0oJlBkY0KS4mfkSeI4VVa2vS:QziNU3pKdbs1wXbPw5wml1c5Ia1vS","tlshash":"7ea16aaa16a41084b2bf9138eff2d7183179c224dd2afdfc6cd21897c18d2945ca679d","first_seen":"2026-07-12T21:23:18.046102Z","last_seen":"2026-07-12T21:23:18.046102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"silversiphon.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"silversiphon.top/lander/white-1/files/img/vector2-AGtG0.svg","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:39.933Z","timestamp":1783891359933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silversiphon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 07:56:51 GMT","end":"Sun, 04 Oct 2026 08:55:39 GMT"},"fingerprint":{"sha1":"B8:5D:CF:63:90:6C:B2:00:34:41:03:44:03:E2:8E:4F:88:C2:1F:1A","sha256":"1D:90:D1:27:06:59:6B:7C:F5:F0:30:C7:AE:C6:FC:A8:A2:B5:72:EF:51:E8:45:4E:21:E6:C1:1B:DE:39:17:B3"}}},"request":{"raw":"GET /lander/white-1/files/img/vector2-AGtG0.svg HTTP/1.1\r\nHost: silversiphon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln\r\nCookie: e3b0c4_13=1hq4g5m1lcsngj; _token=1hq4g5m1lcsngj.1783977759.1.8b026c5bb3d88638586b773af527ba27; _subid=18uumd0.d.phr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:22:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lSXJSXbGRLMKSGpqOUCDy1QEgUgafyTx3ett8nbm1vXbnAIiVnS%2FtwV4eYiv24abLrHHiYxN30ZfJfynZFGqX9990nKxNqpUbNC4Hvs4VsAEnsgnIQbZ26QFic4Y4uhUfIfF\"}]}\r\nlast-modified: Thu, 09 Jul 2026 08:06:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f5683-4ff4\"\r\ncf-ray: a1a31ac79d4f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20468,"size_decoded":8813,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b8c4d8273f94e8c93e9d95d095cb6e4","sha1":"945b119a5e074a64513c9cdaf7b2b702debca3de","sha256":"e7d8f612de58186ea78abbb1b12766388067b9aa0d6a23b3c0968d77305aefe1","sha512":"12666b948288ac3a0ad558f2074491abfadbec5601447f105ef60ebd88d38ae5ab234f3a30bf9f9a5de6906657d1cd7b41d9db8a64f5354618dc3b05f7c57ab7","ssdeep":"384:ZRDbQS7o47WjtjCgarOcDfouklJ0oVKk1w3T+FxIYtbjAdvLBjT:Hv5o47brOcTtcJ1fdbjANh","tlshash":"f99263b713696bfb86818fac775c20e536a401cab2f9e1eccb6742435c259f740b8d61","first_seen":"2026-07-12T21:23:18.047056Z","last_seen":"2026-07-12T21:23:18.047056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"silversiphon.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"silversiphon.top/lander/white-1/portrait/photos_gallery_6a4770b2486348.37246660.jpg","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:39.935Z","timestamp":1783891359935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silversiphon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 07:56:51 GMT","end":"Sun, 04 Oct 2026 08:55:39 GMT"},"fingerprint":{"sha1":"B8:5D:CF:63:90:6C:B2:00:34:41:03:44:03:E2:8E:4F:88:C2:1F:1A","sha256":"1D:90:D1:27:06:59:6B:7C:F5:F0:30:C7:AE:C6:FC:A8:A2:B5:72:EF:51:E8:45:4E:21:E6:C1:1B:DE:39:17:B3"}}},"request":{"raw":"GET /lander/white-1/portrait/photos_gallery_6a4770b2486348.37246660.jpg HTTP/1.1\r\nHost: silversiphon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln\r\nCookie: e3b0c4_13=1hq4g5m1lcsngj; _token=1hq4g5m1lcsngj.1783977759.1.8b026c5bb3d88638586b773af527ba27; _subid=18uumd0.d.phr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:22:40 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 08:06:27 GMT\r\netag: \"6a4f5683-c0f9\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OwVcFXglUu0lmu8%2Fx4QSCFw%2Fmz4wKSSSleyryj0WC%2FBbxcuYamv%2BilKDd3eLnzlPKA4KnZB9u3XjXNdYyh0rBwDT9FNOr8U9Iz75pVr1SjGM8r59zV%2BZhMvicGxTwU8hjUGL\"}]}\r\ncf-ray: a1a31ac79d505ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49401\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49401,"size_decoded":50126,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1024x683, components 3","md5":"1da8a3e562a87de5caa252785c375c62","sha1":"6d985aad3cb0e03f46ca25d6572decf364a0b324","sha256":"4d094d10c139a8362d8f2546e9128355839708a0b24d12709fbc22c9b63798f9","sha512":"dcb6c8b5ba97176d398ceef77dbf26f622d0631dcfac318c7b3a33050c3e994496609f7585fac2634fc1459c848ab8179d693559da752812296bff982a4de61f","ssdeep":"1536:wDqdcPKEsYSrXvnLIVw6JiE5oWiVMroT3j:6qGPKDjQieoTT","tlshash":"9b23e167ad42c4a7d433d4b8652239e875ad744b47e78b6c6e0c683fe3be64e0dc9840","first_seen":"2026-07-12T21:23:18.048226Z","last_seen":"2026-07-12T21:23:18.048226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"silversiphon.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"silversiphon.top/lander/white-1/visuals/business-analytics-2026-06-30-1.jpg","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:39.936Z","timestamp":1783891359936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silversiphon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 07:56:51 GMT","end":"Sun, 04 Oct 2026 08:55:39 GMT"},"fingerprint":{"sha1":"B8:5D:CF:63:90:6C:B2:00:34:41:03:44:03:E2:8E:4F:88:C2:1F:1A","sha256":"1D:90:D1:27:06:59:6B:7C:F5:F0:30:C7:AE:C6:FC:A8:A2:B5:72:EF:51:E8:45:4E:21:E6:C1:1B:DE:39:17:B3"}}},"request":{"raw":"GET /lander/white-1/visuals/business-analytics-2026-06-30-1.jpg HTTP/1.1\r\nHost: silversiphon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln\r\nCookie: e3b0c4_13=1hq4g5m1lcsngj; _token=1hq4g5m1lcsngj.1783977759.1.8b026c5bb3d88638586b773af527ba27; _subid=18uumd0.d.phr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:22:40 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 08:06:27 GMT\r\netag: \"6a4f5683-1a27d\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b1GVDEFgyzkgOG41wox5hTTxCKniQiIzvtJRs8ApTr5bqaQx4NmVsK21gJYDtFnPcuY97czSnsT7QhcWlw2g6qokeFJHMJnqCEVw%2BE%2FHqZ7GCC4yAa4tkCN5AopMWjBpM4eI\"}]}\r\ncf-ray: a1a31ac79d515ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 107133\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107133,"size_decoded":107854,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 79\", baseline, precision 8, 1200x800, components 3","md5":"a10e71c8a95e0c3dd7606c916932384d","sha1":"0e1da5b70d53998cff128ed0a1f91782a808071c","sha256":"1f2ac8bb97789a66e8fe47d2b098a052bba7cc1c73a908734cadff2ff8022e10","sha512":"d24fd83e872939e8cb949f4174d6a60f6f2f3aa293e08284bed717f53a7f1407e3377b3727745561e0e711c1a822740a998e23d7d1cd6d4cfe588363761e65a0","ssdeep":"3072:veuSpwKhK5L/DpciTw1U0mzIzTzReFc7z:veuSvqbDmiTufDzTtei","tlshash":"30a302e3c13f5ec1bc2b63deee876c9fbf0eab15524479d985027e8a4b685421a0c524","first_seen":"2026-07-12T21:23:18.049426Z","last_seen":"2026-07-12T21:23:18.049426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"silversiphon.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"silversiphon.top/lander/white-1/files/img/avatar-jX-1.jpg","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:39.939Z","timestamp":1783891359939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silversiphon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 07:56:51 GMT","end":"Sun, 04 Oct 2026 08:55:39 GMT"},"fingerprint":{"sha1":"B8:5D:CF:63:90:6C:B2:00:34:41:03:44:03:E2:8E:4F:88:C2:1F:1A","sha256":"1D:90:D1:27:06:59:6B:7C:F5:F0:30:C7:AE:C6:FC:A8:A2:B5:72:EF:51:E8:45:4E:21:E6:C1:1B:DE:39:17:B3"}}},"request":{"raw":"GET /lander/white-1/files/img/avatar-jX-1.jpg HTTP/1.1\r\nHost: silversiphon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln\r\nCookie: e3b0c4_13=1hq4g5m1lcsngj; _token=1hq4g5m1lcsngj.1783977759.1.8b026c5bb3d88638586b773af527ba27; _subid=18uumd0.d.phr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:22:40 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 08:06:27 GMT\r\netag: \"6a4f5683-dad9\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qIZ1UyNgeB9PdgLUL5aC8iS9H2CRy78HFX52nsvNEhXVT61amGE8eggcUMWx81MN3TxjfGR7ITPPgr7ya9CBQzN5CqEbRH%2F3PB%2Bd0%2F3ToOQO9Rrt74IJ%2BHTqYptHsptLnQtV\"}]}\r\ncf-ray: a1a31ac79d555ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 56025\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56025,"size_decoded":56748,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 720x720, components 3","md5":"06ae253ce330d882ac1320beca9959fd","sha1":"7e41360c83283286613928b165f26ca65d09be26","sha256":"6fb72776fffb85df6f0f2ea32e3ad8bfb1875e955cb16307610fbf0622df27f7","sha512":"957588fc368d39683d5eed9c32f803dbef9aefc9ec729ecb8a65c4fc6514533118f7e2a0978dd982444e18df766aa459fc003991e1bf995e223ad46cce5f8440","ssdeep":"1536:BWhURUYZ3ty8Tjq2wUn7NdVkei6LynBh1Ewq644+DG0noRJz6Ad:xjZRjq2wUn7pi6Qxd44F0noT6Ad","tlshash":"9e431211130605bf3c312437aac5e3dbe29e2027b347db6b68c119b7d2b1d4acb1a4ac","first_seen":"2026-07-12T21:23:18.055042Z","last_seen":"2026-07-12T21:23:18.055042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"silversiphon.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sofiasans/v20/Yq6T-LCVXSLy9uPBwlATrORKkDAp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:40.315Z","timestamp":1783891360315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/sofiasans/v20/Yq6T-LCVXSLy9uPBwlATrORKkDAp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://silversiphon.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 41408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Jul 2026 04:26:42 GMT\r\nexpires: Sat, 10 Jul 2027 04:26:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 233758\r\nlast-modified: Thu, 04 Sep 2025 18:34:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":41408,"size_decoded":42221,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41408, version 1.0","md5":"2b2cfa49754db22a742345c9012b8772","sha1":"d062054a8d9851973951eeeaf9fea44e8f1efdde","sha256":"ec48ebc67d958ddff1cc0ca1ed8310f13ecde521a9f560662aa37d959ab3690d","sha512":"901370da914cbafcaa77e7d92b896a9d222217042c48db749823dde65536af2159fe7cdf220b8b388a28e52404e8b433cf0ab97c7f3900e6318616e7bd73c5bc","ssdeep":"768:Nu/pDC0Hf6fNnfcFJE3lXS/okorQJJmy91zaDRC1c1wnIodY3y2GbNQyMMvXhqFA:ggvfxeGRSAfrQ7RLzIoULmhvoA","tlshash":"c303f2c1c8a69817f320a342c669d2c7b959a1927def2f3f70b587d86a50ec35344d8e","first_seen":"2025-06-23T01:36:15.85554Z","last_seen":"2026-07-12T21:23:18.056593Z","times_seen":120,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":21,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"silversiphon.top/lander/white-1/brand.svg","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:40.452Z","timestamp":1783891360452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silversiphon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 07:56:51 GMT","end":"Sun, 04 Oct 2026 08:55:39 GMT"},"fingerprint":{"sha1":"B8:5D:CF:63:90:6C:B2:00:34:41:03:44:03:E2:8E:4F:88:C2:1F:1A","sha256":"1D:90:D1:27:06:59:6B:7C:F5:F0:30:C7:AE:C6:FC:A8:A2:B5:72:EF:51:E8:45:4E:21:E6:C1:1B:DE:39:17:B3"}}},"request":{"raw":"GET /lander/white-1/brand.svg HTTP/1.1\r\nHost: silversiphon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln\r\nCookie: e3b0c4_13=1hq4g5m1lcsngj; _token=1hq4g5m1lcsngj.1783977759.1.8b026c5bb3d88638586b773af527ba27; _subid=18uumd0.d.phr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:22:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75WbQIvpeaqhGPXXd1wamDvQa%2F0Y2sfKDN4yGT3g7ZjFmD%2FQlCAjcTA2FWsYuLNHIamckX%2BPiIDR0LcqoyjaLhk%2BO00qNp5exB1aXEhOU3AcTsGhdTZMl49bausIwkg3UkR2\"}]}\r\nlast-modified: Thu, 09 Jul 2026 08:06:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f5683-589\"\r\ncf-ray: a1a31acade315ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1417,"size_decoded":1400,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2a02ebb167d300a0dcf45e352c07d5e","sha1":"c0ad9a092d65def3350620fb91e48e47416898ca","sha256":"7142c724a83695397bc1e9da01fe5df11047d41f44ac73bf0798011696176739","sha512":"3ef87a8f7e0ee4c17e0b62cabaec20572322ab581cbe784c22b2c1f0ba6b6cb12b56a0d96610219d98f68f0b02267f4e63a806a2dcbd0985fdeeb44358ebe687","ssdeep":"","tlshash":"5d2101af87663cbdd01203d8376111c2b993f8d8e78283f850e0f7313607d62d95566a","first_seen":"2026-07-12T21:23:18.057208Z","last_seen":"2026-07-12T21:23:18.057208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"silversiphon.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"silversiphon.top/lander/white-1/files/img/profile-Sx-0.jpg","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:39.941Z","timestamp":1783891359941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silversiphon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 07:56:51 GMT","end":"Sun, 04 Oct 2026 08:55:39 GMT"},"fingerprint":{"sha1":"B8:5D:CF:63:90:6C:B2:00:34:41:03:44:03:E2:8E:4F:88:C2:1F:1A","sha256":"1D:90:D1:27:06:59:6B:7C:F5:F0:30:C7:AE:C6:FC:A8:A2:B5:72:EF:51:E8:45:4E:21:E6:C1:1B:DE:39:17:B3"}}},"request":{"raw":"GET /lander/white-1/files/img/profile-Sx-0.jpg HTTP/1.1\r\nHost: silversiphon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln\r\nCookie: e3b0c4_13=1hq4g5m1lcsngj; _token=1hq4g5m1lcsngj.1783977759.1.8b026c5bb3d88638586b773af527ba27; _subid=18uumd0.d.phr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:22:40 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 08:06:27 GMT\r\netag: \"6a4f5683-11b89\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kHDSREGiin7%2BFHtTViocJOyPL4cgd1ONFym0rFagPjYIqAPRvKKxcVZDDiFHQWEHy62MovtAuFeTNHdz9v6XUT6NFmoAU6efrOWHCyAZkPUHSym3H%2B4pkJpcWZo9Mlv0x%2BZJ\"}]}\r\ncf-ray: a1a31ac7ad565ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 72585\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72585,"size_decoded":73307,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 720x720, components 3","md5":"d18f3fece2bad577bd83f523b8e240ef","sha1":"4ea79b7307f26e86a2f5cb41ca1b2b52a83c74c3","sha256":"20d1670e6ad8007ceff8d43287e002b34bd2c82624c709ba075032233962aa2c","sha512":"0f8755dc3413ba8aa07a6f491c1f28474448cbad5bb3a76e26b11d8820b6d9f240b67d73ff3f761c5905b38dde1c4f900993f2168c02b14d4eb611dbddef67c9","ssdeep":"1536:B5oOAbipKTK13yPSWU88Dm08DqKzYETpPdg3SZTYSrR1/8x1308aHh:PAbipuWyj8a0SzYkdbY66132","tlshash":"42630219f142716cae2ea39461df5c67bceca4099d14c6b3e3a4d671028be024bf718b","first_seen":"2026-07-12T21:23:18.058538Z","last_seen":"2026-07-12T21:23:18.058538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"silversiphon.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:22:39.215Z","timestamp":1783891359215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silversiphon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 07:56:51 GMT","end":"Sun, 04 Oct 2026 08:55:39 GMT"},"fingerprint":{"sha1":"B8:5D:CF:63:90:6C:B2:00:34:41:03:44:03:E2:8E:4F:88:C2:1F:1A","sha256":"1D:90:D1:27:06:59:6B:7C:F5:F0:30:C7:AE:C6:FC:A8:A2:B5:72:EF:51:E8:45:4E:21:E6:C1:1B:DE:39:17:B3"}}},"request":{"raw":"GET /dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln HTTP/1.1\r\nHost: silversiphon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:22:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Sun, 12 Jul 2026 21:22:39 GMT\r\nset-cookie: e3b0c4_13=1hq4g5m1lcsngj; expires=Mon, 13 Jul 2026 21:22:39 GMT; path=/; domain=silversiphon.top; secure; httponly; samesite=none\n_token=1hq4g5m1lcsngj.1783977759.1.8b026c5bb3d88638586b773af527ba27; expires=Mon, 13 Jul 2026 21:22:39 GMT; path=/; domain=silversiphon.top; secure; httponly; samesite=none\n_subid=18uumd0.d.phr; expires=Mon, 13 Jul 2026 21:22:39 GMT; path=/; domain=silversiphon.top; secure; httponly; samesite=none\r\naccess-control-allow-origin: *\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Etu5n2XSQ3cTRSE%2FXZz8ekbi7rv0kbR2NNbuzQDmSxqVqNfxCG4KaMhY7r%2FZ3m4d%2Br1j911dv8wMi0DEePRsIG%2BwizX6uuif9OuqpicG%2Fdroe0s%2BGdmHgkMB4Ez%2BeRZnvZWs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a1a31ac38cb95ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78362,"size_decoded":17122,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7221)","md5":"e86bb41c137ab982203c3758442ecfb7","sha1":"89373beabb42baa12679fe63898da8f4720703c2","sha256":"9b94e190127e1560f32579c502e509c74c5fb78a65c8c0ef179d7dc1ae1af873","sha512":"c67efc801dc5296629e431bb434f46bcf3664718681bf5952c04cf22a5f7fd38b5e1e2bccb2ca52531ac7cb1f1c90466ae952be0e18151055314e5a9db418d69","ssdeep":"768:UBj+OP5JKYUV5ZC6Xkpa4BFjFNzkkfqh50CMfvFJFq4Q:EHP5JjUV3zINQr0CMfvjY4Q","tlshash":"0b73794629fb23249c4f50240bb6b78677a48c4fe1c9c83eb91db191bf829449dbf359","first_seen":"2026-07-12T21:23:18.061689Z","last_seen":"2026-07-12T21:23:18.061689Z","times_seen":1,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":57,"connect":13,"send":0,"wait":290,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"silversiphon.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"silversiphon.top/lander/white-1/js/cookie.min.js","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:39.921Z","timestamp":1783891359921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silversiphon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 07:56:51 GMT","end":"Sun, 04 Oct 2026 08:55:39 GMT"},"fingerprint":{"sha1":"B8:5D:CF:63:90:6C:B2:00:34:41:03:44:03:E2:8E:4F:88:C2:1F:1A","sha256":"1D:90:D1:27:06:59:6B:7C:F5:F0:30:C7:AE:C6:FC:A8:A2:B5:72:EF:51:E8:45:4E:21:E6:C1:1B:DE:39:17:B3"}}},"request":{"raw":"GET /lander/white-1/js/cookie.min.js HTTP/1.1\r\nHost: silversiphon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln\r\nCookie: e3b0c4_13=1hq4g5m1lcsngj; _token=1hq4g5m1lcsngj.1783977759.1.8b026c5bb3d88638586b773af527ba27; _subid=18uumd0.d.phr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:22:40 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFeOTDnyOPgzzgO7QVV11IsVXFCGlPa5EX%2B9VS0Zov1qDjT9%2FvMEs6je0mzzUbm3Sju9n3sLyRDTLT3CM9bfxbda05NE%2BgZil6ybX3WfR8ze48xCOXVVydTkgczcxZBRdcOT\"}]}\r\nlast-modified: Thu, 09 Jul 2026 08:06:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f5683-bea\"\r\ncf-ray: a1a31ac78d495ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3050,"size_decoded":1692,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3050), with no line terminators","md5":"b7e7f229bfffd7c22904dfd85037ca15","sha1":"e24a42588d9a01715d64f66155b9e03aff863007","sha256":"be23080b185440e40fd57a559264156ce5b6f7c61a2eaf5227e1cf66737d0fa5","sha512":"afd36d075fb91c8f52d61ed380da38f9aaa7155f7c1004e2dd1b2050d109367dd5b76af1c518ebf181c5b22b404e4f7d9a0a80fa0a1b9d98f733477d83fed3d3","ssdeep":"","tlshash":"d151f12ab15414bc43bb32319eef978d78320779196cd429486cc1661a24ee019efcef","first_seen":"2026-07-12T21:23:18.063195Z","last_seen":"2026-07-12T21:23:18.063195Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"silversiphon.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sofiasans/v20/Yq6R-LCVXSLy9uPBwlATrOF6kg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:40.312Z","timestamp":1783891360312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/sofiasans/v20/Yq6R-LCVXSLy9uPBwlATrOF6kg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://silversiphon.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40372\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 08:40:34 GMT\r\nexpires: Fri, 09 Jul 2027 08:40:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 304926\r\nlast-modified: Thu, 04 Sep 2025 18:40:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40372,"size_decoded":41185,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40372, version 1.0","md5":"b7a156073a4211eb4fe1146ce084e4d8","sha1":"266f37df2b35a7e0d9949b9e14ba84d63b428d15","sha256":"2176b732b7e4e2bf32a38335a1ee0a127efef2478266d3ec2ed806edaf9671a8","sha512":"4da5c9d7388911ac80836cfdfbb7bc15e8e4665f94058803cc6320f450efa0105de8e6e3accd354ecd66500e64ef71591009b50c860e6532a5b3228744e3c5fd","ssdeep":"768:zzB/rTq3R/YaPeDbIw8erbCHsXGE/rVf6jRsVdmyh4nQ27ksFB+IyFUECnNBRqc:tr+BLmDbjRbCH/WSyer7ks3+P1uNyc","tlshash":"8903f173d6cf7825582d8d2e772bfa8499236e343ad2097713f04f87a4a39367251292","first_seen":"2025-09-06T15:17:17.987355Z","last_seen":"2026-07-14T15:01:34.141589Z","times_seen":510,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":3,"connect":33,"send":0,"wait":17,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"silversiphon.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:39.924Z","timestamp":1783891359924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silversiphon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 07:56:51 GMT","end":"Sun, 04 Oct 2026 08:55:39 GMT"},"fingerprint":{"sha1":"B8:5D:CF:63:90:6C:B2:00:34:41:03:44:03:E2:8E:4F:88:C2:1F:1A","sha256":"1D:90:D1:27:06:59:6B:7C:F5:F0:30:C7:AE:C6:FC:A8:A2:B5:72:EF:51:E8:45:4E:21:E6:C1:1B:DE:39:17:B3"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: silversiphon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln\r\nCookie: e3b0c4_13=1hq4g5m1lcsngj; _token=1hq4g5m1lcsngj.1783977759.1.8b026c5bb3d88638586b773af527ba27; _subid=18uumd0.d.phr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 14 Jul 2026 21:22:39 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LVHBWSqs%2FVb5wVFCfg0lso5o5TvMfqv3adneOrLP2ldKQCpMO5H5L9xIaz3oBpWt7Mw%2FP%2B%2BmlQM18%2BbfXtyP%2B4rQ530AX5MBEzLmkYYO6ru8v3hv73gJs2L3CzLJZARQb7c6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 12 Jul 2026 21:22:39 GMT\r\nserver: cloudflare\r\ncf-ray: a1a31ac78d4a5ebd-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-14T16:16:49.3483Z","times_seen":395852,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"silversiphon.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"silversiphon.top/lander/white-1/brand.svg","fqdn":"silversiphon.top","domain":"silversiphon.top","tld":"top"},"ip":{"addr":"172.67.169.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln","date":"2026-07-12T21:22:39.931Z","timestamp":1783891359931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silversiphon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 07:56:51 GMT","end":"Sun, 04 Oct 2026 08:55:39 GMT"},"fingerprint":{"sha1":"B8:5D:CF:63:90:6C:B2:00:34:41:03:44:03:E2:8E:4F:88:C2:1F:1A","sha256":"1D:90:D1:27:06:59:6B:7C:F5:F0:30:C7:AE:C6:FC:A8:A2:B5:72:EF:51:E8:45:4E:21:E6:C1:1B:DE:39:17:B3"}}},"request":{"raw":"GET /lander/white-1/brand.svg HTTP/1.1\r\nHost: silversiphon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://silversiphon.top/dt7Rnbdk?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1933901947325942\u0026ad_name={{ad.name}}\u0026sub1=karat_ln\r\nCookie: e3b0c4_13=1hq4g5m1lcsngj; _token=1hq4g5m1lcsngj.1783977759.1.8b026c5bb3d88638586b773af527ba27; _subid=18uumd0.d.phr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:22:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBesRle6iqnQuZsH2u6L1%2BuiMv7exQDp6bTGbNJa4YxywOmXKLwaKS%2FsnjdO0gnmRNX1a4vSmSLCUfA3GQ80st9%2F0P8I7ATh1yZidYeIHM4dIjhUW5s924PP4SJM%2BFfI5PIR\"}]}\r\nlast-modified: Thu, 09 Jul 2026 08:06:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f5683-589\"\r\ncf-ray: a1a31ac79d4e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1417,"size_decoded":1390,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2a02ebb167d300a0dcf45e352c07d5e","sha1":"c0ad9a092d65def3350620fb91e48e47416898ca","sha256":"7142c724a83695397bc1e9da01fe5df11047d41f44ac73bf0798011696176739","sha512":"3ef87a8f7e0ee4c17e0b62cabaec20572322ab581cbe784c22b2c1f0ba6b6cb12b56a0d96610219d98f68f0b02267f4e63a806a2dcbd0985fdeeb44358ebe687","ssdeep":"","tlshash":"5d2101af87663cbdd01203d8376111c2b993f8d8e78283f850e0f7313607d62d95566a","first_seen":"2026-07-12T21:23:18.057208Z","last_seen":"2026-07-12T21:23:18.057208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"silversiphon.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}