{"report_id":"a432f23c-1c74-425b-b6a4-2c21ebf38b86","version":0,"status":"done","tags":["phishing","suspicious","telegram_bot"],"date":"2026-09-14T13:49:15Z","url":{"schema":"http","addr":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":0,"asn":31898,"as":"Oracle Corporation","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"title":"PORTAL - Mail Authentication","dom":{"size":187231,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (51402)","md5":"9494850486f8099f7c2dcfb8c8ba2e76","sha1":"35d6998f7af74d743655d448b6dcdff2248b1935","sha256":"61d7a776e01bad61baf9dc6bbc97e93ce002332fb532c7fd449252fb6ddee9f9","sha512":"85910f048c6269414f7fd0a6745b1a5a64f492c95b83609abd80138e58de3ffd7112f8de68d2cb22d906bb6779cc694f50942d7693ac686dedd5437ba7242610","ssdeep":"1536:iRwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCFLVSG/y5lZf9r7:S709gMGFiyPGuuprlCFLVSG/yOIgVi5/","tlshash":"2b0497a9d14c04d16772c41baf78b3e8a1b9f73ac8550caaf82e580c4fc9b5525c2f79","dom_hash":"domhash4712aae63bbce41552d926cbcb218be6","first_seen":"2026-09-14T13:49:17.855103Z","last_seen":"2026-09-14T13:49:17.855103Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":0,"asn":31898,"as":"Oracle Corporation","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T13:49:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-14","alert":"Detects file containing Telegram Bot API","trigger":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"greatdiscountdeal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"greatdiscountdeal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":{"engine":"luna_v2","pattern_id":"generic.legacy_phishing.javascript.new_injection"}},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":{"engine":"luna_v2","pattern_id":"suspicious_scripts.javascript.telegram_api_send_message"}}]},"summary":[{"fqdn":"greatdiscountdeal.com","ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2021-09-15","domain_rank":4836366,"first_seen":"2026-09-14T13:47:24.01018Z","last_seen":"2026-09-14T13:47:24.01018Z","alert_count":13,"request_count":5,"received_data":196097,"sent_data":2681,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Popper:1.12.9","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"BootstrapCDN:4.0.0","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"www.w3schools.com","ip":{"addr":"23.214.96.148","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2000-03-21","domain_rank":2135,"first_seen":"2014-02-05T20:15:46Z","last_seen":"2026-09-14T11:21:30.13372Z","alert_count":0,"request_count":1,"received_data":24080,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-09-14T00:42:22.155493Z","alert_count":0,"request_count":1,"received_data":70239,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-09-14T08:46:23.375467Z","alert_count":0,"request_count":1,"received_data":49877,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":21970,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2026-09-14T13:37:51.383656Z","alert_count":0,"request_count":1,"received_data":51973,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"image.thum.io","ip":{"addr":"100.56.96.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2016-02-04","domain_rank":1742320,"first_seen":"2017-02-03T17:54:24Z","last_seen":"2026-09-11T20:22:31.678341Z","alert_count":0,"request_count":1,"received_data":92,"sent_data":556,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.geoplugin.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2006-11-06","domain_rank":398102,"first_seen":"2012-06-01T16:12:31Z","last_seen":"2026-09-14T03:53:43.279191Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":949,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-13T23:08:02.379663Z","alert_count":0,"request_count":4,"received_data":385256,"sent_data":2241,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-09-14T08:46:41.386609Z","alert_count":0,"request_count":1,"received_data":86562,"sent_data":492,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-09-14T08:24:24.409217Z","alert_count":0,"request_count":1,"received_data":25450,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aadcdn.msauth.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-10-25","domain_rank":5248,"first_seen":"2018-11-19T10:50:03Z","last_seen":"2026-09-09T20:04:34.423622Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":614,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"md5":"96b4af5cb297c3e7160b8766b363e715","sha1":"ee743ea77a0f4aa3664573bf323bcaef58b786d9","sha256":"c8bcb0b14bbf3708498219597ad105c727f5747776da3892f3a60866ccfdfba0","sha512":"b61c2b25ce52a93994a3adf4783f7b6acbf0a82caa3c5cedcfc88761dca5b9f702aacb9acdf6d1f33b51a9beeed42f19263462e6ac6815fa406dd429a41c7c66","size":2406,"token":"7141528079:AAHU0y6viWXZ2ENvBEuDw0BLlMuIh_hq1hI","is_revoked":false,"bot":{"token":"7141528079:AAHU0y6viWXZ2ENvBEuDw0BLlMuIh_hq1hI","user_id":"7141528079","username":"IfeelmeekyBot","first_name":"meeky","last_name":"","chat":{"chat_id":"6548230166","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":{"engine":"luna_v2","pattern_id":"generic.legacy_phishing.javascript.new_injection"}},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":{"engine":"luna_v2","pattern_id":"suspicious_scripts.javascript.telegram_api_send_message"}}]},"javascript":{"script":[{"url":{"schema":"https","addr":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"80e5e6a1206fe2ec8e6a587b5f1dd8eb","sha1":"2eed46f56e2481cc3569b341c6c5d7b50e6726ca","sha256":"2222077158679ceb37a2bc39765417823537d4afba57681166ef5b61f101b23d","sha512":"e772545f44dff2d0900db7ebb07cccbf764df38159935cf5fdc3c005d85a69faffe3e436011365461fd977cf866cd15336670cbd8b5f3d2c4c681f8f15014497","ssdeep":"384:jY7kpd9WOCJcA9OAul9tr8/6y4hdzVxOiI8xnNcfNAFhhJvgvVa29W0yVM0pg7:8id9tUHu+8jqNAVkMk","tlshash":"0c033b2bc72d185397e8c8151d3cfacae23d56918c792cffbd2d284a424cd57a291db2","size":41142,"data":"","first_seen":"2026-07-06T00:53:51.892835Z","last_seen":"2026-10-03T16:41:25.486713Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8239ebd3742c29e87e2f5a1ae79b3173","sha1":"ef510a7e4910a7463155a09c1e57084c8ecec9db","sha256":"fc8ea4ee595bb72ea547a0e3947d4ff2cefcb700dc2299d7e206545a23c302ff","sha512":"92584a713617dd515529304715b1d37a8f4e9b25758448c9b0e1557887e0ef5429d153eb6dc7c57597033827aabd1407fd9d1c6e4a49125686ef31a10fbdb5e6","ssdeep":"","tlshash":"42c08c4899aca0239036312f6ea82092bf243e18d48d5c20bdedc460302285bf56ac0d","size":165,"data":"","first_seen":"2026-07-06T00:53:51.893797Z","last_seen":"2026-10-03T16:41:25.487338Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e3740f740063a77c0b0f6fbc8425aee","sha1":"27113b842b70560999b5d0f7217df7bd635af415","sha256":"a53ba941be961e6f0ae7c1b46a2d2bbe755b0dfc2b792e2cec3969aa4728e687","sha512":"cc4800272e77961420cc5790b22f49d31d42ec3b7eadbaf9d9c45624cfcea5de53efb164cd2f5af4cc468528338750f90cfc5f64ec7f140f31e94e9685506b51","ssdeep":"","tlshash":"c6c02b6c42017b60b5f230888e763784a3ab3fbc1e94063d880eb002014365ee15c507","size":150,"data":"","first_seen":"2026-07-06T00:53:51.894804Z","last_seen":"2026-10-09T19:07:30.160114Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"89b9923be3f2b3fdc6f2881567f8df7c","sha1":"cda736839d7a2df366fcdd3f671428e1c9391049","sha256":"2cd1a63574da61caa51bb8c3ab7129c13c312bbf90ba07673a75d50564c3d1f0","sha512":"7196e80922894868beccbaa1effa17686f441ee8604b3828926859a2fb4936b43532608fc62823e4a148a5b3b73171a27f88cbccfc8a8bcab23059c84e4e735c","ssdeep":"","tlshash":"a0d02b0b345f670ad0109050cd55685c67958371e292c33fbb4ca0c318cbdbbd46c3d6","size":290,"data":"","first_seen":"2026-07-06T00:53:51.895745Z","last_seen":"2026-10-09T19:07:30.16606Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"15f439bfee30127518b9624f3556f839","sha1":"e50ae28fdddfb5ed8c7ee38413d793b0d09d0e12","sha256":"29d1b26a34aa8d4e349d4593ff91643c590d9f345cd393b9acb82058d57a8a0e","sha512":"ff9033f38386fd4a7c05495178db9f4163575d3d66c87bb3488f59e481d86f08ef301e140c740d91c27a63cb3a55b86a59bdca609da6668b750e6ff6a4e899eb","ssdeep":"","tlshash":"a2012bd896b1752506383aa314ef551523356052cc4aa91f3ade06802ff5d274261eb4","size":779,"data":"","first_seen":"2025-02-17T05:31:01.479898Z","last_seen":"2026-10-09T19:07:30.16777Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"df5e56e32e7cbd8e471e0d025bd1bc73","sha1":"f0df58d1ff590054211af71628f749daee49a0a9","sha256":"19517c7fe3c18e4bc5e1cc0f7c701979243eaed22833b848e8838db5015d1a66","sha512":"1749f96393a6b02dfe1c75057f6a8faf7f1a977cf63bf7c6d2eb188c4d3216136ed44256ce034dcdb89ac1fcc75cd5ed53e8c3fbf07c5709a9ba94dc527ac4a5","ssdeep":"","tlshash":"d1b0925362e6e36d5a3ac49218b01f8b062011d6878786ecd835a096969d091b948397","size":116,"data":"","first_seen":"2026-06-29T10:52:09.267688Z","last_seen":"2026-10-03T16:41:25.4899Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1f7878666cfcf7cf1d1aa7dc837e4c1","sha1":"ea19b36ce12ace6d3f2a221054a06fd68894fb9e","sha256":"03291c31345e3d3a5716aed40800d0b8c285d98e58a8ea7561e6bdd2bb2561d3","sha512":"af846bdeb2105022062bfc063e32a7966e2d19d7aa378c1df562fb73ecb9280f86c1a0c3d582827abd878da4aed0664934f8d68e79592021d08d9481cde67149","ssdeep":"","tlshash":"96017dd3e04027d626b230a171ae124dd693058fbdc95de4f075b46cd248fa8327b3a7","size":665,"data":"","first_seen":"2026-07-06T00:53:51.898355Z","last_seen":"2026-10-03T16:41:25.490405Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"96b4af5cb297c3e7160b8766b363e715","sha1":"ee743ea77a0f4aa3664573bf323bcaef58b786d9","sha256":"c8bcb0b14bbf3708498219597ad105c727f5747776da3892f3a60866ccfdfba0","sha512":"b61c2b25ce52a93994a3adf4783f7b6acbf0a82caa3c5cedcfc88761dca5b9f702aacb9acdf6d1f33b51a9beeed42f19263462e6ac6815fa406dd429a41c7c66","ssdeep":"","tlshash":"5f4142c1f74c664ba27140b5617e31ca372da0b39a009f36fcf0e4641977a2e3916983","size":2406,"data":"","first_seen":"2026-09-14T03:53:48.093218Z","last_seen":"2026-09-14T19:31:57.673039Z","times_seen":3,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-14","alert":"Detects file containing Telegram Bot API","trigger":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","size":19188,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-10-15T01:35:29.119561Z","times_seen":113028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","size":48944,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-10-15T01:54:20.263064Z","times_seen":112662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","size":69597,"data":"","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-10-15T01:35:11.138871Z","times_seen":82403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-15T02:27:56.090371Z","times_seen":301109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67176c242e1bdc20603c878dee836df3","sha1":"27a71b00383d61ef3c489326b3564d698fc1227c","sha256":"56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4","sha512":"9fa75814e1b9f7db38fe61a503a13e60b82d83db8f4ce30351bd08a6b48c0d854baf472d891af23c443c8293380c2325c7b3361b708af9971aa0ea09a25cdd0a","ssdeep":"768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+","tlshash":"3533b649725078b201df9176913f460bb736788ea907816cb95d98ed2e7cd89322bf3c","size":51039,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-10-15T01:45:00.903274Z","times_seen":127513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/bowser@2.7.0/es5.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ec8d02e755832bf3c0a13ced466c23b","sha1":"a887b14c75fd0f0061f5da4e7d7adba1eff46aa2","sha256":"3165360876dfc227720dd6b835afcbbe7713dc7359c96eeddbdd7b79935bd053","sha512":"811ec59f126246ca994e96f52d641be5857f0a12f8a12c31bf0d0e9e348411b1c3e05793839a3905b660b766f677f76a14d3ab7b805a8ae78098aa5b92c4a45b","ssdeep":"384:3p6NKzratyoo3UoMpsZD7Ttsj/uGGcD2i:xznH6x","tlshash":"5bb234a8b2c7f0e5475255655c2f3c0a63366e1c150ea548fbe9cc81beb918f8133f6a","size":24569,"data":"","first_seen":"2023-03-07T12:55:41Z","last_seen":"2026-10-09T19:07:30.093011Z","times_seen":657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj27 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[_ua:map[configurable:true enumerable:true value:Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 writable:true] parsedResult:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj28 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 sealed:false type:object] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","line_number":4536,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"www.geoplugin.net/javascript.gp","fqdn":"www.geoplugin.net","domain":"geoplugin.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:33.106Z","timestamp":1789393713106,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /javascript.gp HTTP/1.1\r\nHost: www.geoplugin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T02:38:36.053238Z","times_seen":19112269,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greatdiscountdeal.com/webfonts/fa-brands-400.ttf","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:33.253Z","timestamp":1789393713253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greatdiscountdeal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:41:27 GMT","end":"Sun, 08 Nov 2026 10:41:26 GMT"},"fingerprint":{"sha1":"0A:44:A8:BF:09:3C:8C:D6:27:E5:91:26:2D:A9:4A:99:80:33:6C:C7","sha256":"1E:E2:C5:88:FF:CF:50:92:23:44:6C:1A:47:56:6E:D4:A5:7E:A7:BB:02:84:FA:C5:98:E1:FB:5C:0A:6C:8D:D2"}}},"request":{"raw":"GET /webfonts/fa-brands-400.ttf HTTP/1.1\r\nHost: greatdiscountdeal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/Office_cookies/Email.account.html?=\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Mon, 14 Sep 2026 13:48:33 GMT\r\nserver: nginx/1.29.8\r\ncontent-type: text/html\r\ncontent-length: 462\r\nlast-modified: Thu, 26 Feb 2026 00:37:59 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":746,"size_decoded":717,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"dbf8ec3db1d4b93b848197591827939c","sha1":"2e12f671d6101f52060133c32f8d359af756f9b2","sha256":"63c52aa99ca361b59a27e7f51fe5fadffef99e671f8b4f9560fab204219e0666","sha512":"6be36399f1b84b3c1969a6498ff31f9cfbd3c660a6fe99ccd2a18339f9c62a68e810b93a7439de71ca33f9831cad37c43306415012541dd809928f5597acce83","ssdeep":"","tlshash":"7c01150bc480191be1334122bac2f7046315e555238b5da17ece5967dfc8f6496d77cc","first_seen":"2023-03-08T08:24:48Z","last_seen":"2026-10-15T00:52:33.573185Z","times_seen":13489,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"greatdiscountdeal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"greatdiscountdeal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greatdiscountdeal.com/webfonts/fa-solid-900.ttf","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:33.255Z","timestamp":1789393713255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greatdiscountdeal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:41:27 GMT","end":"Sun, 08 Nov 2026 10:41:26 GMT"},"fingerprint":{"sha1":"0A:44:A8:BF:09:3C:8C:D6:27:E5:91:26:2D:A9:4A:99:80:33:6C:C7","sha256":"1E:E2:C5:88:FF:CF:50:92:23:44:6C:1A:47:56:6E:D4:A5:7E:A7:BB:02:84:FA:C5:98:E1:FB:5C:0A:6C:8D:D2"}}},"request":{"raw":"GET /webfonts/fa-solid-900.ttf HTTP/1.1\r\nHost: greatdiscountdeal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/Office_cookies/Email.account.html?=\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Mon, 14 Sep 2026 13:48:33 GMT\r\nserver: nginx/1.29.8\r\ncontent-type: text/html\r\ncontent-length: 462\r\nlast-modified: Thu, 26 Feb 2026 00:37:59 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":746,"size_decoded":717,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"dbf8ec3db1d4b93b848197591827939c","sha1":"2e12f671d6101f52060133c32f8d359af756f9b2","sha256":"63c52aa99ca361b59a27e7f51fe5fadffef99e671f8b4f9560fab204219e0666","sha512":"6be36399f1b84b3c1969a6498ff31f9cfbd3c660a6fe99ccd2a18339f9c62a68e810b93a7439de71ca33f9831cad37c43306415012541dd809928f5597acce83","ssdeep":"","tlshash":"7c01150bc480191be1334122bac2f7046315e555238b5da17ece5967dfc8f6496d77cc","first_seen":"2023-03-08T08:24:48Z","last_seen":"2026-10-15T00:52:33.573185Z","times_seen":13489,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"greatdiscountdeal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"greatdiscountdeal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:33.687Z","timestamp":1789393713687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://greatdiscountdeal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:48:33 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4202993\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKoc11lBSg4P2HCkYuI8rPai270GruqTjocGNcZ1EIX2taP8na%2FFg1%2BCsS%2B7TsWTJRky%2FS1a1djlp6BDgrELOUKLte0Mt%2BhPi0XdTi0IcIyJxm8qHn6wTWE7CGlEVURiBMDySD4O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3afd9968b8db503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 109808\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109808,"size_decoded":110812,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 109808, version 772.1280","md5":"005c9aa92b564b73b7582cc4f1fa49cb","sha1":"373361ed756b1fe68ce2f5968d467826b6973bb5","sha256":"faae6fc0aa94cc5bde5076647c817a23206096a1cbeda10d1c6f3d89d6163ed1","sha512":"cf057683226d25fab8518295d9a2bbc7261b85a0e911d323f949719b6484beb99843887ac634e58f21988c5af3b8d825b8289cbfe29b2d4e1817016be1499bba","ssdeep":"1536:598+segXMbYt4ZF+jfdgY0q+JtV63kYFF8ChI+2F2aqQPj+QU0yXbO/YvSdE:AeeemxT+kkgeChI+20aqqDhcSK","tlshash":"56b312cbe021d582bdee1c5b69ba14bf61180424427dbe9dc306746bbf16e023d0bd27","first_seen":"2023-08-04T22:28:11Z","last_seen":"2026-10-15T02:37:09.951173Z","times_seen":33252,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:33.753Z","timestamp":1789393713753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://greatdiscountdeal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:48:33 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 2803043\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqHDx4Kq4Fqeaqf3wtmrn1R0oRexIwOZuxkaRKzjRnV5dl2ZCilP9yVRte2KPWKr3pbGe6pfAr5bthjv2w9z6cDeGY%2Fl9PGju0zWtpwgx8vQHoQuhZUe9zvjqD0PjFBAuX0RiCdk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3afd996fb90b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 150020\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150020,"size_decoded":151016,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-10-15T02:37:09.971703Z","times_seen":44308,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T13:48:31.481Z","timestamp":1789393711481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greatdiscountdeal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:41:27 GMT","end":"Sun, 08 Nov 2026 10:41:26 GMT"},"fingerprint":{"sha1":"0A:44:A8:BF:09:3C:8C:D6:27:E5:91:26:2D:A9:4A:99:80:33:6C:C7","sha256":"1E:E2:C5:88:FF:CF:50:92:23:44:6C:1A:47:56:6E:D4:A5:7E:A7:BB:02:84:FA:C5:98:E1:FB:5C:0A:6C:8D:D2"}}},"request":{"raw":"GET /Office_cookies/Email.account.html?= HTTP/1.1\r\nHost: greatdiscountdeal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 14 Sep 2026 13:48:32 GMT\r\nserver: nginx/1.29.8\r\ncontent-type: text/html\r\nlast-modified: Fri, 11 Sep 2026 20:54:58 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Popper:1.12.9","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"BootstrapCDN:4.0.0","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]}],"data":{"size":191896,"size_decoded":47591,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (51385), with CRLF line terminators","md5":"7286f60538c416d7e7b996f7c57c0e47","sha1":"d688229932582dba0a441bc0fd86dbdd9af873c3","sha256":"174ed2e10665e080ce3bbfff4e49b61d20a52e5de1870a1c89685fd7fc76844e","sha512":"4d65a1a8e50cf09a57684ecae91dca00222a76616da4a7923ecb3c6062f65465d553d77b440f238b14f12fc126fab05c930ac9ffeae4423d7a0acf6c82b00036","ssdeep":"1536:BgjMCMPMCMjMCM4MCMwMCM3sVM7709gbPMfjSFOTyPGuZprrlClySqraNVTDg6GQ:5709gMGFiyPGuZprlClymnSS","tlshash":"a014dabaf14c04c96376c21bab71f3a8a5b9f77ac1550c69f82e080c0fe5b552186f79","first_seen":"2026-09-14T03:53:48.074316Z","last_seen":"2026-09-14T19:31:57.65496Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1008,"timings":{"blocked":-1,"dns":366,"connect":166,"send":0,"wait":304,"receive":0,"ssl":171},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-14","alert":"Detects file containing Telegram Bot API","trigger":"greatdiscountdeal.com/Office_cookies/Email.account.html?=","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"greatdiscountdeal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"greatdiscountdeal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":{"engine":"luna_v2","pattern_id":"generic.legacy_phishing.javascript.new_injection"}},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":{"engine":"luna_v2","pattern_id":"suspicious_scripts.javascript.telegram_api_send_message"}}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:32.913Z","timestamp":1789393712913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://greatdiscountdeal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:48:32 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3568648\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6YIINhc2wuSPKZDnqRwIxFfFVEz9S%2Bl3u3uQTBD0MggD34s3sgCs5TgIGVefSMlGYOs42XAyfQRRjM%2Bj8eKizpaqmiDhzZxWolaonY4oCHMPlbJak4OhhK8aJy3DZfiuCBWU9wxy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3afd9920b4bb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18778\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102217,"size_decoded":19781,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"5222e06b77a1692fa2520a219840e6be","sha1":"8b4236206a8b86af3761a244277663046d7ff7ee","sha256":"0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5","sha512":"cf780ba5def29277f562835b0b3a9129ce2aca8afc81a294d6a9a7f824a1c5bb81bac00d23d42946884606b7821642b12e17a2e92f424171446db2aea8b8340c","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCq:M709gMGFiyPGuuprlCq","tlshash":"09a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-10-15T02:37:09.977215Z","times_seen":49713,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":3,"connect":40,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greatdiscountdeal.com/webfonts/fa-solid-900.woff2","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:33.076Z","timestamp":1789393713076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greatdiscountdeal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:41:27 GMT","end":"Sun, 08 Nov 2026 10:41:26 GMT"},"fingerprint":{"sha1":"0A:44:A8:BF:09:3C:8C:D6:27:E5:91:26:2D:A9:4A:99:80:33:6C:C7","sha256":"1E:E2:C5:88:FF:CF:50:92:23:44:6C:1A:47:56:6E:D4:A5:7E:A7:BB:02:84:FA:C5:98:E1:FB:5C:0A:6C:8D:D2"}}},"request":{"raw":"GET /webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: greatdiscountdeal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/Office_cookies/Email.account.html?=\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nlast-modified: Thu, 26 Feb 2026 00:37:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 746\r\nvary: Accept-Encoding\r\ncontent-type: text/html\r\ndate: Mon, 14 Sep 2026 13:48:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":746,"size_decoded":971,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"dbf8ec3db1d4b93b848197591827939c","sha1":"2e12f671d6101f52060133c32f8d359af756f9b2","sha256":"63c52aa99ca361b59a27e7f51fe5fadffef99e671f8b4f9560fab204219e0666","sha512":"6be36399f1b84b3c1969a6498ff31f9cfbd3c660a6fe99ccd2a18339f9c62a68e810b93a7439de71ca33f9831cad37c43306415012541dd809928f5597acce83","ssdeep":"","tlshash":"7c01150bc480191be1334122bac2f7046315e555238b5da17ece5967dfc8f6496d77cc","first_seen":"2023-03-08T08:24:48Z","last_seen":"2026-10-15T00:52:33.573185Z","times_seen":13489,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"greatdiscountdeal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"greatdiscountdeal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.geoplugin.net/javascript.gp","fqdn":"www.geoplugin.net","domain":"geoplugin.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:32.910Z","timestamp":1789393712910,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /javascript.gp HTTP/1.1\r\nHost: www.geoplugin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T02:38:36.053238Z","times_seen":19112269,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.w3schools.com/w3css/4/w3.css","fqdn":"www.w3schools.com","domain":"w3schools.com","tld":"com"},"ip":{"addr":"23.214.96.148","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:32.914Z","timestamp":1789393712914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"certification.w3schools.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 01:47:08 GMT","end":"Sun, 25 Oct 2026 01:47:07 GMT"},"fingerprint":{"sha1":"DA:B9:5E:B9:0D:DF:16:62:55:75:FD:41:AF:8C:89:ED:B4:8C:55:FF","sha256":"36:98:0C:C4:DA:E0:CD:EB:73:18:0D:42:8A:3D:A8:48:51:76:20:CD:39:00:F4:25:C6:62:6B:08:57:21:B6:F2"}}},"request":{"raw":"GET /w3css/4/w3.css HTTP/1.1\r\nHost: www.w3schools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 06:17:14 GMT\r\naccept-ranges: bytes\r\netag: \"011ee2fb541dd1:0\"\r\ncontent-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; upgrade-insecure-requests\r\nx-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5256\r\ncache-control: public, max-age=31258811\r\nexpires: Sat, 11 Sep 2027 08:48:43 GMT\r\ndate: Mon, 14 Sep 2026 13:48:32 GMT\r\nx-loc: true\r\nstrict-transport-security: max-age=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23427,"size_decoded":5909,"mime_type":"text/css","magic":"ASCII text","md5":"75b37d4abbdde1322116d2744181081d","sha1":"6d6b5ff442af4682c30e970c382002a7c694ac5b","sha256":"c4f2aba13970ecf8303fb9329f97c8824861569273b0aa27acce48abc61d04f5","sha512":"8ba303e078af3f71176b6e7fa5c32b0f3984014393133a960da7103bc78204a144a3d034a3d1ad7126f1547f45408e00e036175f54766ffccc8cf84cd4c129a5","ssdeep":"384:aHHLO7eS0F4bBY/fn6jZcy9/cGK1q8CarY64Cb+dOy:aHHCLYXfl1q8CarY64Cb+dl","tlshash":"fbb2f022ff8a1138261a873660d5fbfc573a8681df9f1b7a7030373943894c26796e49","first_seen":"2023-06-26T21:08:35Z","last_seen":"2026-10-13T16:21:57.733845Z","times_seen":17494,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":11,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:32.927Z","timestamp":1789393712927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.2.1.slim.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://greatdiscountdeal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-10fdd\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 14 Sep 2026 13:48:32 GMT\r\nage: 2878370\r\nx-served-by: cache-lga21984-LGA, cache-bma-essb1270073-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 228649, 19437\r\nx-timer: S1789393713.981186,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 23856\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69597,"size_decoded":24498,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32012)","md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-10-15T01:35:11.138871Z","times_seen":82403,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":7,"connect":10,"send":0,"wait":10,"receive":2,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:32.930Z","timestamp":1789393712930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://greatdiscountdeal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 13:48:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4115583\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:15:37 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XQ21OJ7u52L8AlkVXSvts8r3apNtEAiCoICSh1%2B8QVVhZOPOZfF3tTrHblcv5AS3TTNcilxZv9qvZGVgd1NhfzOSaeu7o2ymf4gJW03iHHxcR34AwfKQarn%2F%2FVKcmR9DW%2BoorNCX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3afd991fb4ab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6157\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19188,"size_decoded":7177,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19015)","md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-10-15T01:35:29.119561Z","times_seen":113028,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:32.934Z","timestamp":1789393712934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:21 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:21 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 443832\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85578,"size_decoded":31012,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-15T02:27:56.090371Z","times_seen":301109,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":16,"receive":15,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greatdiscountdeal.com/webfonts/fa-brands-400.woff2","fqdn":"greatdiscountdeal.com","domain":"greatdiscountdeal.com","tld":"com"},"ip":{"addr":"162.144.3.79","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:33.075Z","timestamp":1789393713075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greatdiscountdeal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 10:41:27 GMT","end":"Sun, 08 Nov 2026 10:41:26 GMT"},"fingerprint":{"sha1":"0A:44:A8:BF:09:3C:8C:D6:27:E5:91:26:2D:A9:4A:99:80:33:6C:C7","sha256":"1E:E2:C5:88:FF:CF:50:92:23:44:6C:1A:47:56:6E:D4:A5:7E:A7:BB:02:84:FA:C5:98:E1:FB:5C:0A:6C:8D:D2"}}},"request":{"raw":"GET /webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: greatdiscountdeal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/Office_cookies/Email.account.html?=\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nlast-modified: Thu, 26 Feb 2026 00:37:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 746\r\nvary: Accept-Encoding\r\ncontent-type: text/html\r\ndate: Mon, 14 Sep 2026 13:48:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":746,"size_decoded":971,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"dbf8ec3db1d4b93b848197591827939c","sha1":"2e12f671d6101f52060133c32f8d359af756f9b2","sha256":"63c52aa99ca361b59a27e7f51fe5fadffef99e671f8b4f9560fab204219e0666","sha512":"6be36399f1b84b3c1969a6498ff31f9cfbd3c660a6fe99ccd2a18339f9c62a68e810b93a7439de71ca33f9831cad37c43306415012541dd809928f5597acce83","ssdeep":"","tlshash":"7c01150bc480191be1334122bac2f7046315e555238b5da17ece5967dfc8f6496d77cc","first_seen":"2023-03-08T08:24:48Z","last_seen":"2026-10-15T00:52:33.573185Z","times_seen":13489,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"greatdiscountdeal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"greatdiscountdeal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:32.931Z","timestamp":1789393712931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:52:42 GMT","end":"Fri, 27 Nov 2026 07:52:32 GMT"},"fingerprint":{"sha1":"F6:58:F9:2B:5B:29:DD:D1:99:3E:40:DB:56:17:DC:42:4E:6A:E9:05","sha256":"F3:FF:92:2E:B0:B0:F9:26:38:04:80:FE:73:FB:B7:4A:8E:03:4E:26:D7:44:86:CA:E3:D0:83:59:81:32:88:A3"}}},"request":{"raw":"GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://greatdiscountdeal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 13:48:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"14d449eb8876fa55e1ef3c2cc52b0c17\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:04 GMT\r\ncdn-cachedat: 03/22/2025 12:19:15\r\ncdn-proxyver: 1.22\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1048\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f548e142863d1a06e57cf865830bccd3\r\ncdn-cache: HIT\r\nage: 229859\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3afd9920bd4b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48944,"size_decoded":14462,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48664)","md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-10-15T01:54:20.263064Z","times_seen":112662,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":1,"connect":24,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:32.937Z","timestamp":1789393712937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:52:42 GMT","end":"Fri, 27 Nov 2026 07:52:32 GMT"},"fingerprint":{"sha1":"F6:58:F9:2B:5B:29:DD:D1:99:3E:40:DB:56:17:DC:42:4E:6A:E9:05","sha256":"F3:FF:92:2E:B0:B0:F9:26:38:04:80:FE:73:FB:B7:4A:8E:03:4E:26:D7:44:86:CA:E3:D0:83:59:81:32:88:A3"}}},"request":{"raw":"GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 13:48:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"67176c242e1bdc20603c878dee836df3\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:06 GMT\r\ncdn-cachedat: 08/01/2025 15:36:25\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1078\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a78b5a25cfaf2df533c60a6d4fa388d4\r\ncdn-cache: HIT\r\nage: 5642929\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3afd99208e3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51039,"size_decoded":15426,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50758)","md5":"67176c242e1bdc20603c878dee836df3","sha1":"27a71b00383d61ef3c489326b3564d698fc1227c","sha256":"56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4","sha512":"9fa75814e1b9f7db38fe61a503a13e60b82d83db8f4ce30351bd08a6b48c0d854baf472d891af23c443c8293380c2325c7b3361b708af9971aa0ea09a25cdd0a","ssdeep":"768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+","tlshash":"3533b649725078b201df9176913f460bb736788ea907816cb95d98ed2e7cd89322bf3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-10-15T01:45:00.903274Z","times_seen":127513,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":4,"connect":22,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/bowser@2.7.0/es5.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:32.940Z","timestamp":1789393712940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /bowser@2.7.0/es5.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 13:48:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a3afd9921bbf1525-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 10685150\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Sep 2027 13:48:32 GMT\r\nlast-modified: Mon, 11 May 2026 09:35:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:MWU2CHbfwidyDda4Na/LvncT3HNZyW7t2917eZNb0FM=:\r\nfly-request-id: 01KKE316NFE82MEG82WDNTXWCK-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24569,"size_decoded":6340,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24569), with no line terminators","md5":"9ec8d02e755832bf3c0a13ced466c23b","sha1":"a887b14c75fd0f0061f5da4e7d7adba1eff46aa2","sha256":"3165360876dfc227720dd6b835afcbbe7713dc7359c96eeddbdd7b79935bd053","sha512":"811ec59f126246ca994e96f52d641be5857f0a12f8a12c31bf0d0e9e348411b1c3e05793839a3905b660b766f677f76a14d3ab7b805a8ae78098aa5b92c4a45b","ssdeep":"384:3p6NKzratyoo3UoMpsZD7Ttsj/uGGcD2i:xznH6x","tlshash":"5bb234a8b2c7f0e5475255655c2f3c0a63366e1c150ea548fbe9cc81beb918f8133f6a","first_seen":"2023-03-07T12:55:41Z","last_seen":"2026-10-09T19:07:30.093011Z","times_seen":657,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":3,"connect":26,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:32.945Z","timestamp":1789393712945,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T02:38:36.053238Z","times_seen":19112269,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.thum.io/get/width/1200/https://","fqdn":"image.thum.io","domain":"thum.io","tld":"io"},"ip":{"addr":"100.56.96.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greatdiscountdeal.com/Office_cookies/Email.account.html?=","date":"2026-09-14T13:48:33.078Z","timestamp":1789393713078,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /get/width/1200/https:// HTTP/1.1\r\nHost: image.thum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greatdiscountdeal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Mon, 14 Sep 2026 13:48:33 GMT\r\ncontent-length: 35\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T02:38:36.053238Z","times_seen":19112269,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}