{"report_id":"a802b1de-ae7d-435b-88b3-412d7b51a70c","version":0,"status":"done","tags":[],"date":"2026-08-10T19:08:46Z","url":{"schema":"http","addr":"globaltdsolu.pro/","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"globaltdsolu.pro/","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"title":"Global Trade Solutions – Safe investment with Global Trade Solutions","dom":{"size":5123,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (508)","md5":"86330faaaf54b608b499c90badb56134","sha1":"47fd1e2515e70068d7f6593e6b2aed62f16a99fe","sha256":"86496bc2d520e4e4bdba34c15d8aded443ef452d176fe2e85f7ff8e3aff8259f","sha512":"a9bcfe23f3db1b9edad95ccf36f11e556749556c9334ff4251da0307329cd68016ed30ca9e01a94c4c50560367b7aa624aca4a8cefc0b4b806fcedb03fdd0976","ssdeep":"96:nUob7wj+WgNZ/OpZIbbGKkLj8xgv7ayGcAwsIvAzYU6m:h0j2NZ/OpZj1Lj8xgv7ayGcAwnvAz/6m","tlshash":"52b1192c9e634893f4c1f682fe12b15b4ab5e04bd14acc847d5c2a385fc1b6de1aed58","dom_hash":"domhashf65a1c6a1deec503d04bdb3b44b4c8f2","first_seen":"2026-08-10T18:18:02.312202Z","last_seen":"2026-08-10T19:08:48.788334Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"globaltdsolu.pro/","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T19:08:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"globaltdsolu.pro","ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-10T18:17:57.55893Z","last_seen":"2026-08-10T18:17:57.55893Z","alert_count":62,"request_count":31,"received_data":2514892,"sent_data":15704,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"CreateJS","description":"CreateJS is a suite of modular libraries and tools which work together or independently to enable interactive content on open web technologies via HTML5.","website":"https://code.createjs.com","common_platform_enumeration":"","icon":"CreateJS.svg","categories":["CDN"]},{"name":"Bootstrap:3.4.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":10744,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-08-07T02:53:41.111903Z","alert_count":0,"request_count":1,"received_data":23849,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-08-07T03:45:15.17525Z","alert_count":0,"request_count":1,"received_data":61813,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"globaltdsolu.pro/","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5139fca7cf5645f102f776e7dcf3a76","sha1":"399e67068cbe93ca416553017e99c49595625d94","sha256":"08c79df1a9865eb62730e042ef6f175edb7fb44f8edc95431ec96c079cdeafa2","sha512":"a652be4b56382a1063ca046ee76186f1bd183c3c8874ac5dec615e7b269101c201c75c1cf4eb5ce428071874ab3f59d3be225c1d603fc78f35badb9dd0e9fe5c","ssdeep":"","tlshash":"935135bce65309a7a4e1fb83ff1152850a98e44bd443ec853e1d56805f87b29f29cd74","size":2445,"data":"","first_seen":"2026-08-10T18:18:02.358351Z","last_seen":"2026-08-10T19:08:48.804602Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1d6e5f1800af4c3a8941fe7933b700b","sha1":"531177ded1fd5b4c0fbd566727cbbf2f291d6c1e","sha256":"f6f4abc8d20a201c91ead431bbe5cc801f794696436b926a8669736bb5169f77","sha512":"0f890508b67179c4ba86e01010e3e998485a6be89bd67e6dfd81693672cff58748ac961f8013e5446bb8a706e8f85dbca252185169c484a1a32022b456d469cd","ssdeep":"","tlshash":"c1d0970a22b12ea04cca5289b106086e2b2e40d8d2bcc432501c260c03aa2a4a7b2814","size":233,"data":"","first_seen":"2026-08-10T18:18:02.360211Z","last_seen":"2026-08-10T19:08:48.805171Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0d612ff537b479683d24c9e356c9717","sha1":"957c88d5049171acb3155e72ac5c626fd05a76fe","sha256":"ae5e1eb75c4871ccc2ad73f9127cf79edabbd0467a31fb7b9d8ca17daec5b265","sha512":"1f6005bd8688655fb607638b840dae5b9797660de9b1a6411c0cb678900d704fc4bd2cf2d10516725b7f26debdb3cb64df2e955d654390c06402a9646c4f1d7f","ssdeep":"","tlshash":"86c09b47f571554b0497f105d387448c7178450a453a4e25375d50ca3fb3f9d174d1e8","size":180,"data":"","first_seen":"2026-06-08T12:06:52.118962Z","last_seen":"2026-08-10T19:08:48.805988Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7046ff415640d232eb6ac1e15b97f2f4","sha1":"e0e6e8eb0b55f6ebe5a8ebde7fbe3ae242018c46","sha256":"2feec53b0c337e491092a9a5794a63cd876763bba743552d34edc703c9e1d50f","sha512":"32a15ee990917154cb55360c99e0a4bb97aafd8b33c1b565fe636e6fca18c4274f3874808d75c56f0fcc535fee36feef7c077ddc373c7eb13365336f67b8d8a0","ssdeep":"","tlshash":"d941dd84ee2d9311b135a03c2c5a3344ad7d78726d44cdd0bc7459951fbcea0a74be62","size":1932,"data":"","first_seen":"2026-06-14T08:05:09.546604Z","last_seen":"2026-08-10T19:08:48.806634Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"385b188986a7491a3a354b8bbe17acb0","sha1":"e8d7abac1bf546f2aff5ed4fa82aa1282c277f5e","sha256":"43a745b188d70d76a94337c7b59359a5fabef9ace3d0795b95af49a02db1ca92","sha512":"0033689f5f17deba71af33ec1ce6af487598e0a0b66d2d5bd47a64b7f613ef3903be691f55ac76652126f6699979dd7b33c00e169f1dd78c6bf16421f3546195","ssdeep":"","tlshash":"22e0dfada4ba1621023b74344e2f8100732a7017700ad904fd0c78e06f9933d02aea4a","size":372,"data":"","first_seen":"2026-06-11T20:26:19.238547Z","last_seen":"2026-08-10T19:08:48.807175Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-11T12:55:59.385982Z","times_seen":759004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c58e78caa4b72a5e579ac4efc1045b95","sha1":"0bf89ee03be35122a2ddea96981995d011963d76","sha256":"f1a59f4dc7ce15bbed7b89854ac46486e306b9d327fdce7a14c9df06e1494383","sha512":"b0c1e899118b8ab6835a9eba334b1b437a81e04a0b0bbbe53f71be32a7d60b0d140c4d176806a7e6ff9911e5480ea7e0ca4982b1eba68cc2cbc96a73bc3e6d54","ssdeep":"","tlshash":"efe0ab3e2c3291901b9750b5d2bfe128391630254080d41bb4a688294cb0fce6d04994","size":430,"data":"","first_seen":"2026-08-10T18:18:02.371302Z","last_seen":"2026-08-10T19:08:48.808157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd0e04bc6bc30178792f10d5135a958c","sha1":"b3e01df7a15e9f7c50656c72bcbde9c69d5952bc","sha256":"dc48f3005ab53f59bc375350f020930a5d72cf34a499c2a1595d922569b081c6","sha512":"eb0468ef3931237d4a77596cdf7cad59f3c179d7a91d04dd1e5978ae95a46a019d8948734dbf88946f9bdfdfd0667fc2007514e5120e937799bbfd45c74437a9","ssdeep":"","tlshash":"f4c08c0e5429ac7c775e2008aaba3f96583944e472613d28f3aa8e214b82453030a047","size":182,"data":"","first_seen":"2026-05-23T20:41:24.396223Z","last_seen":"2026-08-10T19:08:48.808726Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"globaltdsolu.pro/cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:05.848Z","timestamp":1786388885848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/aos/dist/aos.html","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:05.860Z","timestamp":1786388885860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/aos/dist/aos.html HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Fri, 16 Aug 2024 13:09:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1164,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-08-10T19:08:48.790104Z","times_seen":7057,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/assets/images/spinner.svg","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:05.926Z","timestamp":1786388885926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/assets/images/spinner.svg HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 19:08:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 227\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":398,"size_decoded":560,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c96699603943e28d51374ef9157176a1","sha1":"4c0ed8c18c5489163b9d6fc1e91179ad79fbef67","sha256":"6ed0c4b4fbde2f09a72837f7cef3fa19effe6af1d50a4d73946c71b36d7b7bf2","sha512":"ef8d7738420aef5be892ac46f359b8f454cbc10a1379f78292509fe0eddf0d2c669abb014aff156559fdc897f7842fde3f4a9c8388d7964665f17e3432b1a6c8","ssdeep":"","tlshash":"a4e0ab65d4944b0c1028d7a293f8481c223fb0a7e346008ae792212250098ee7b2470d","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-08-10T19:08:48.790717Z","times_seen":223,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/storage/app/public/photos/UIkNlCdaOn8Cjr2YDve6KofRilHgYPzG8y9hoFLm.html","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:05.929Z","timestamp":1786388885929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /storage/app/public/photos/UIkNlCdaOn8Cjr2YDve6KofRilHgYPzG8y9hoFLm.html HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Fri, 16 Aug 2024 13:09:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 378\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":919,"size_decoded":628,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"319ca99e63f99a8c7115f1392afaf184","sha1":"40ec201cd5a7d791dbe3fabacd264094b9985e2a","sha256":"3b8d24f576fd9dbe5af4a4a5f4dedc49f3094df8d255c127532606e7ab66630f","sha512":"a107b17594314a5f34cd2219eca1404d823dda610e4073ee377873d5527aedfdb665c456680f23041770a764fc539770ec3804921df3a7d641cd8fd56f39f55e","ssdeep":"","tlshash":"2211237f04511abf1310c662f411332de0dfbf2b6e827410d0a709ba6ad46c8c63d498","first_seen":"2026-08-10T18:18:02.32473Z","last_seen":"2026-08-10T19:08:48.791266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/assets/images/payments/payment.png","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.138Z","timestamp":1786388886138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/assets/images/payments/payment.png HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 19:08:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31354\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31354,"size_decoded":31640,"mime_type":"image/png","magic":"PNG image data, 572 x 472, 8-bit/color RGBA, non-interlaced","md5":"e7e74180798a40edc45887a7b558ad7e","sha1":"e559b43ae2ceeeb254743c6c74b7bd2167d5ad1f","sha256":"a678b09ac6bb860198b42b8aa6bb4b295365daf56f6e10bb1a902a47d473b3f3","sha512":"714c8d01aa09896622b25691ab2ee456eb64fe9e970f0d74015000f7b4391e6e60289a71b14daf103398a2bc592f58e56429a18a417fe5b290ae24abaaef76e1","ssdeep":"768:J9kx2DIiqbLLYzQtxIiH7+0c7/BaLyri2ZIP6jdc:JmxMIxLLMMxIiH7ZsosCP6jdc","tlshash":"36e2d02868b13aa6cb64a4eb59c052b5c67ab4d3d514cb3d3de635f108851fe9a0a4c3","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-08-10T19:08:48.791898Z","times_seen":258,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/assets/images/cross-line.svg","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.158Z","timestamp":1786388886158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/assets/images/cross-line.svg HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 19:08:07 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 264\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":530,"size_decoded":597,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c84b8126c1f17c0ba261b99c7fe84618","sha1":"e5f56290804dd219092c0d1fa605f2c1abe9b856","sha256":"a589274308bad146e1d77555edd9a7203ca4e8ddae9224c8ccd857d2cdadebb3","sha512":"ddfe2cd4c5d0cdae7992487f7b3fef71bae20d73b2354c147da2e1c1a6ebd49845724f8e9a0f9305fb09542bde186aa5b445e5df6ad90415c6379e403c40eee8","ssdeep":"","tlshash":"bef059dc431a2428f00f4d244e2e78e59297a7a77ccc02a444d211beecc4197f6e0d1b","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-08-10T19:08:48.79251Z","times_seen":228,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@300;400;500;700;800\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.332Z","timestamp":1786388886332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Manrope:wght@300;400;500;700;800\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 10 Aug 2026 19:08:06 GMT\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10060,"size_decoded":1395,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"79b7ff72520a657dc97dc293fa0aa4d0","sha1":"d096949cab1421f72ba16a9937ea32b919c90847","sha256":"97910c5aa838aad0ab708a9207badf4e24aeb2e73d3617851828529d6e17cd0c","sha512":"7e65ec091174019289015c099b6f220677049e6c4fdaa94ab1c9bd14e287d8cb2a14da545abddfce32e825c93549e150fdb9bade3d036ac71e9a4ac24b38e20f","ssdeep":"192:4JorV3dd8yoJx2V3888fzJ+pV3nn80tJMPV3hh8GEJFqV3QQ8js:K2sIQ2HmEo7","tlshash":"752287a1012be804ab470cd677ce7d399d4e6186708584b69bfe1c9cadebd32336075e","first_seen":"2025-09-07T18:57:35.440021Z","last_seen":"2026-08-10T19:08:48.792981Z","times_seen":199,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/s3.tradingview.com/external-embedding/embed-widget-forex-cross-rates.js","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.101Z","timestamp":1786388886101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-forex-cross-rates.js HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 16 Aug 2024 06:05:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4242\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12770,"size_decoded":4499,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3443)","md5":"7b9612c683903ecbd912d8205e28018c","sha1":"65e0dba0c8740e3b6a0b674effef28d4863032e5","sha256":"701cdc0aa3e83344e615108647e21d78e93a19bba8a2cbc628b5057de0ca3d8d","sha512":"2b3d043feef4169809f6c46a93a43d10769158b94cec0da5c828ac8f47fad2463603f523ad1f5db5c97708fc847a8db97e2753f738cbd70b4fff187b59ecd261","ssdeep":"384:RO0qLuCWoofYkFGMFE9SCbGOjcfUkcOUEZgFiaMES:R/q4ZE9SCKOjcfUkcOUEZ2IES","tlshash":"a642d8aab660dcbd91d945dba07a2321b61d3944b202eca4b5ecd4c511fdccca131fbe","first_seen":"2024-06-22T21:39:58Z","last_seen":"2026-08-10T19:08:48.793822Z","times_seen":59,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.html","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.122Z","timestamp":1786388886122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.html HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Fri, 16 Aug 2024 13:09:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 378\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":919,"size_decoded":628,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"319ca99e63f99a8c7115f1392afaf184","sha1":"40ec201cd5a7d791dbe3fabacd264094b9985e2a","sha256":"3b8d24f576fd9dbe5af4a4a5f4dedc49f3094df8d255c127532606e7ab66630f","sha512":"a107b17594314a5f34cd2219eca1404d823dda610e4073ee377873d5527aedfdb665c456680f23041770a764fc539770ec3804921df3a7d641cd8fd56f39f55e","ssdeep":"","tlshash":"2211237f04511abf1310c662f411332de0dfbf2b6e827410d0a709ba6ad46c8c63d498","first_seen":"2026-08-10T18:18:02.32473Z","last_seen":"2026-08-10T19:08:48.791266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/#","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.125Z","timestamp":1786388886125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 01 Aug 2026 17:09:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34690\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"CreateJS","description":"CreateJS is a suite of modular libraries and tools which work together or independently to enable interactive content on open web technologies via HTML5.","website":"https://code.createjs.com","common_platform_enumeration":"","icon":"CreateJS.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.4.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":261009,"size_decoded":34942,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (629)","md5":"79d8d6729cf039eed52bccd832a166e2","sha1":"ae7433dbe0af0aaed0238e7cf75cd56ea095693b","sha256":"f5fc5facc13fc09cac3eb86926fc705ce210a04ca5e2f17d63181fa0cdaad07b","sha512":"588a5a621e54fa20654c25ff9258ca1c25651dcb355f26b477ee92c8875d2f18c06dad4816e60468c5d24af06f9151eb6ee88685f5e904accdbb71600e43c72e","ssdeep":"1536:BUGZY2KdvUjIWBfXCh9eQANrJCueASzjP+QTzNdNlV20vsbLAc8nhiv1vfu/zDLh:BXKJUomAc8kNu/zDL4iDF4H4KY","tlshash":"7844b818fdf01415306792ac6496afa67f6d8083c50ece7676ee2654dfceb818c73988","first_seen":"2026-08-10T18:18:02.316478Z","last_seen":"2026-08-10T19:08:48.794419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/indexAnimate.js","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.148Z","timestamp":1786388886148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/indexAnimate.js HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 76438\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":583193,"size_decoded":76696,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4086)","md5":"b483aa541bedb7a96b5c93b6d7a6bcbc","sha1":"600fb51e5b2b333e124e0740a2911efdc57bbd4c","sha256":"c314c8c380a9f77bf0587404621f65937e2948b4f21fc5d50e39970b11da2fe1","sha512":"4d378e132811edfe5992d8ec4661ccb6531319228b8472b7142a7602404c56d37cf90a12344f8c353d011d5157fd15a87624620823ca45da37ce862fe25dec0a","ssdeep":"3072:oLw8lmXmZBP8omX63pvmVCTMkLgHKtClL+khhB7ogxX3:o7vje6ZvmVCTMkLgHKtClLzhB7oeX3","tlshash":"e2c47b61b754c05faeb5216bd68c59721f6ebd3372114f8d3c1a02f90aa14af74bc2b2","first_seen":"2025-06-20T17:55:32.03493Z","last_seen":"2026-08-10T19:08:48.794962Z","times_seen":38,"resource_available":true,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T19:08:04.102Z","timestamp":1786388884102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 01 Aug 2026 17:09:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34690\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.4.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"CreateJS","description":"CreateJS is a suite of modular libraries and tools which work together or independently to enable interactive content on open web technologies via HTML5.","website":"https://code.createjs.com","common_platform_enumeration":"","icon":"CreateJS.svg","categories":["CDN"]}],"data":{"size":261009,"size_decoded":35120,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (629)","md5":"79d8d6729cf039eed52bccd832a166e2","sha1":"ae7433dbe0af0aaed0238e7cf75cd56ea095693b","sha256":"f5fc5facc13fc09cac3eb86926fc705ce210a04ca5e2f17d63181fa0cdaad07b","sha512":"588a5a621e54fa20654c25ff9258ca1c25651dcb355f26b477ee92c8875d2f18c06dad4816e60468c5d24af06f9151eb6ee88685f5e904accdbb71600e43c72e","ssdeep":"1536:BUGZY2KdvUjIWBfXCh9eQANrJCueASzjP+QTzNdNlV20vsbLAc8nhiv1vfu/zDLh:BXKJUomAc8kNu/zDL4iDF4H4KY","tlshash":"7844b818fdf01415306792ac6496afa67f6d8083c50ece7676ee2654dfceb818c73988","first_seen":"2026-08-10T18:18:02.316478Z","last_seen":"2026-08-10T19:08:48.794419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1872,"timings":{"blocked":0,"dns":194,"connect":75,"send":0,"wait":423,"receive":320,"ssl":860},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:05.850Z","timestamp":1786388885850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/assets/images/intro/logo.png","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:05.927Z","timestamp":1786388885927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/assets/images/intro/logo.png HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 19:08:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 02 Aug 2025 20:57:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 129726\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":129726,"size_decoded":130013,"mime_type":"image/png","magic":"PNG image data, 757 x 197, 8-bit/color RGBA, non-interlaced","md5":"20ee6268197cf64bf0e8d0e3b15c3b3d","sha1":"183bb13bea0c2e89688b85bd55133f4d3eeab7e0","sha256":"82f20aef31ae33de62696f192ae1d3a0173513a23538312c8859f353a3a9fe84","sha512":"27ccfec7465a8fcc8951073db5fa7f854194dcd92387585c830b09f55071370cbe89ba72b695a2fdcd73a3df0bc74e27405cfec4a7a6f024e0c2574705149dd2","ssdeep":"3072:InodWfPh8OMIDpR/P7Yi7a1gPh7I4DTCfZfgyXtblU:InoKh8Yp97N7ay5jTCxRlU","tlshash":"f6c30211d953f99863f24ca8e1bb02f425b0358e1eb3ee63ca172a3095c512d5263fd1","first_seen":"2026-08-10T18:18:02.333341Z","last_seen":"2026-08-10T19:08:48.795436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":407,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/assets/images/intro/robot.png","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.104Z","timestamp":1786388886104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/assets/images/intro/robot.png HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 19:08:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 122539\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":122539,"size_decoded":122826,"mime_type":"image/png","magic":"PNG image data, 534 x 683, 8-bit colormap, non-interlaced","md5":"92f6bebd998cdcd64189703d7f74596e","sha1":"b6d73cbecdd20c59f9a1ba749ff2c7b1a37609d0","sha256":"d8ec07205248151f8d0876f4f1592acf2e0f3bc6df442623396e1e22b825e463","sha512":"d5fc37c23d6127c2736470a9db9cb970753e1e589f496966df1002b72eb325c6723c78d481f7dee5aa046d1ffa7136d2466a498a0953cc70e830d697285f48f9","ssdeep":"3072:+g+F91e7Bz5KQWKqMotsGk3n6c8nwEjK8/AvG/5MSYy6djjN:miXlWKQtsFn6lG8IvGahySj5","tlshash":"6ec31280d603a6aa0ead8be3711d07dd614d71a3db18a15ede0fcdd4938d6ab54cc20b","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-08-10T19:08:48.796Z","times_seen":253,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/assets/images/check-line.svg","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.143Z","timestamp":1786388886143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/assets/images/check-line.svg HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 19:08:07 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 228\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":377,"size_decoded":561,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec3aabc7b899df83e302c6261cab4297","sha1":"a85d1fabe8227e113cd901399691206e4dc9d505","sha256":"c9687fe531edffc905520c7782d00fbbba55873f7194d42959dc1d384faebc82","sha512":"77ebd660596bb03bc2d0885a7fcefc3fd90cece774214b71b266fbeecdf90a5bdc29d799d82dacd79404c1f523a618ff21e36c944f8daede9184dbb0bc46e0c7","ssdeep":"","tlshash":"14e0c0d8472a854cf0c2c8965f71b839102f9ae333c755e48f409216f84cbf599b709c","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-08-10T19:08:48.796939Z","times_seen":229,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.149Z","timestamp":1786388886149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 16 Aug 2024 06:05:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4510\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13462,"size_decoded":4767,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3443)","md5":"993918bc422ec61fa565ae30083117f4","sha1":"c79f9f383676467f9eb36612d17c49823c619082","sha256":"9e1d256fb9f173fbe3b282eb606b2c812caba74410ba1f608c2d50d8fb4cc9d7","sha512":"c80d1439fc2e9cfc9300aa16605b9c6addfa26e502cdab7176aa571e5935be9744000283f13d876629337b505f342872c935a4c54da3ca7d4a5653bad4e41a2e","ssdeep":"384:RO0qLuCWoofYkFGMFE9GERYCbGgVcHU6YOU4ZWViaMEUYu:R/q4ZE9G6YCKgVcHU6YOU4ZWIEU3","tlshash":"2c52e7a9b660d8bd91d945dba07a2321b6193948b203eca4b5ecd4c511fdccca131fbe","first_seen":"2024-06-23T09:00:00Z","last_seen":"2026-08-10T19:08:48.797478Z","times_seen":189,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/storage/app/public/photos/hkyBiaLkuWDSSD1qVnfbId5yS8G9tQMDOAhkLDUy.html","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:07.484Z","timestamp":1786388887484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /storage/app/public/photos/hkyBiaLkuWDSSD1qVnfbId5yS8G9tQMDOAhkLDUy.html HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Fri, 16 Aug 2024 13:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 378\r\ndate: Mon, 10 Aug 2026 19:08:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":919,"size_decoded":628,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"319ca99e63f99a8c7115f1392afaf184","sha1":"40ec201cd5a7d791dbe3fabacd264094b9985e2a","sha256":"3b8d24f576fd9dbe5af4a4a5f4dedc49f3094df8d255c127532606e7ab66630f","sha512":"a107b17594314a5f34cd2219eca1404d823dda610e4073ee377873d5527aedfdb665c456680f23041770a764fc539770ec3804921df3a7d641cd8fd56f39f55e","ssdeep":"","tlshash":"2211237f04511abf1310c662f411332de0dfbf2b6e827410d0a709ba6ad46c8c63d498","first_seen":"2026-08-10T18:18:02.32473Z","last_seen":"2026-08-10T19:08:48.791266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/style.css","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:05.853Z","timestamp":1786388885853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/style.css HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 19:08:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 99\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":99,"size_decoded":381,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b2af816e3e0f297e4774c60a643f8f22","sha1":"e4f70cf0595544f4bcdcca9c4a22cb258c10426c","sha256":"85ccf1ee0abdc48514cfae474c059c7a25674729d223033bfbef48078e8e2f99","sha512":"f87b4e7a702188121a10fa36bade7597e2272a3bce6e6e22304947bda6dc87bfcff31857b06d2e4e3b4891db4778152feecd1cf82d27b6741886b22befb58863","ssdeep":"","tlshash":"0db022288200008bc23fb000abc08200c3b200c3f3ae0000fa8caf020ffe280e83aca8","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-08-10T19:08:48.798024Z","times_seen":251,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:05.924Z","timestamp":1786388885924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 16 Aug 2024 13:08:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30760\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92005,"size_decoded":31018,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2505)","md5":"f0600829a1d3002ba06e4fc5a86047d6","sha1":"ff4165dbe699e15b9a91c70c701a5f70faac5d02","sha256":"50c178ec5bd9f28605af8b14eb41a9c1270b05a6299a9478c73986ba90438f61","sha512":"fda3e17de7dd2c8951fab6b258529e028e5a3a8df32906babb9a510f9a237449b718c88c85676437aff642621bbef731830d493a43539c7568d6fd5b65bda4f6","ssdeep":"1536:Xa7IY7Y1KHETaVUb6i6OrRmY7lSNr7XsM9LrnPilwNWwM:X3N6OrmPiGM","tlshash":"7a93c8c8b2a670658367b5b5413f000eb27f5999f84c4dacb288d8e1adf0949427bf7d","first_seen":"2026-07-27T04:50:02.518265Z","last_seen":"2026-08-10T19:08:48.79853Z","times_seen":7,"resource_available":true,"data":null}},"time_used":854,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":590,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/storage/app/public/photos/photos/UIkNlCdaOn8Cjr2YDve6KofRilHgYPzG8y9hoFLm.html","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.140Z","timestamp":1786388886140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /storage/app/public/photos/photos/UIkNlCdaOn8Cjr2YDve6KofRilHgYPzG8y9hoFLm.html HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Fri, 16 Aug 2024 13:09:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 378\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":919,"size_decoded":628,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"319ca99e63f99a8c7115f1392afaf184","sha1":"40ec201cd5a7d791dbe3fabacd264094b9985e2a","sha256":"3b8d24f576fd9dbe5af4a4a5f4dedc49f3094df8d255c127532606e7ab66630f","sha512":"a107b17594314a5f34cd2219eca1404d823dda610e4073ee377873d5527aedfdb665c456680f23041770a764fc539770ec3804921df3a7d641cd8fd56f39f55e","ssdeep":"","tlshash":"2211237f04511abf1310c662f411332de0dfbf2b6e827410d0a709ba6ad46c8c63d498","first_seen":"2026-08-10T18:18:02.32473Z","last_seen":"2026-08-10T19:08:48.791266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/assets/js/app.js","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.145Z","timestamp":1786388886145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/assets/js/app.js HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 169297\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":567992,"size_decoded":169556,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"1895ea244d126e89e43f651594e9cd5e","sha1":"8b6472d42eb722742ebcf0b3e8a9237c78d8524e","sha256":"3080edfd181c84e9a02b4b7c3de1445ff5e8c4d855500deb776b6615dc2a138f","sha512":"5ac01abe17a1852dc4b4647d7db14a7b8f28202dfb55a6399de34a2715ca44bf724eafb238e608530efb9046d4bc0f37897e98494bbae73556b96468a6613218","ssdeep":"6144:swZ7L5KmRGkinigRlVb/Vc4Pf2Kh8T9wR5efIhboFTGI5PGbq82tQtv2yHjakune:Rn5KmRG1i2lVb/VEtnkVNdSL0LzL","tlshash":"0ac43bce7381746142eb71a5416f520bb3376859b8098058b079d8da7d78e8d22bffbc","first_seen":"2023-03-25T22:30:05Z","last_seen":"2026-08-10T19:08:48.799001Z","times_seen":219,"resource_available":true,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/assets/css/app.css","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:05.851Z","timestamp":1786388885851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/assets/css/app.css HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 19:08:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Aug 2024 19:22:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35754\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":251644,"size_decoded":36084,"mime_type":"text/css","magic":"ASCII text, with very long lines (41724)","md5":"c7ce7695feb391153e57b744f7faf080","sha1":"346a3f16f033ffc6bfff57961f67beefc354886b","sha256":"496b3fc825c270b005c30cee760f756af83d2a98b8f2777d5cf6a7e6354c22ef","sha512":"6cb5e6631649922b3cbedee3fa5b111dddae7cd04cd4e288018878a4c9f19c455d42d02e2ca3360d74282c35158e7c7494c4d53756c0e3acc3ebda7ffbd45c07","ssdeep":"6144:C63gyfi5olXkR2h/q3SYiLENM6HN267j7dOFV1jxhTZw:CqpV1S","tlshash":"f1349473b991220ce027ce1593d07bbd5279c017e2132affe9927a25c7c67d605b264e","first_seen":"2026-08-10T18:18:02.339304Z","last_seen":"2026-08-10T19:08:48.799554Z","times_seen":2,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/assets/images/funds/1.png","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.127Z","timestamp":1786388886127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/assets/images/funds/1.png HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 19:08:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4547\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4547,"size_decoded":4832,"mime_type":"image/png","magic":"PNG image data, 258 x 192, 8-bit colormap, non-interlaced","md5":"562ff539510c580321426f6532d24e61","sha1":"bccae524b8e8aeda15fc487e2fffc968c8f57abd","sha256":"a3eff76292ec942c9f8bdf964a080dc860e84a91d68699f92d03a160bb6104a6","sha512":"88b1f051a1c06b931aede7b36804baf141aa9a62e4f9d79b59d4e6bf462d195608f249b2630d5738764d7fbc0e36d7f68b42640f832165aae9fc7ac75cc579e6","ssdeep":"96:+M00+UQfblZdDePIZwlqGSR+aurm8r6B1u5xGD12BjA+eW5HgD/jovR:+D0oZhwzSR+PrmnBs5UDejLeeHr5","tlshash":"25918ed8c50211c2dd3beff4ac8cc6a1230e7957ed679d5307175c405cace66e4513a8","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-08-10T19:08:48.800401Z","times_seen":254,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/assets/images/funds/3.png","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.129Z","timestamp":1786388886129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/assets/images/funds/3.png HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 19:08:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6019\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6019,"size_decoded":6304,"mime_type":"image/png","magic":"PNG image data, 258 x 217, 8-bit colormap, non-interlaced","md5":"4dbc22849af350b597d33b52e2d8f769","sha1":"810a18eb78033e0642a64594897893547dedbe73","sha256":"ed1fd187e5f842730e1c71c7fac127ebf2df5b8274a272b89614f161f20131fa","sha512":"49f0936e216861be2437daff27fce6d963bc83468eeda52f2cf9b7d419fda5e0df7f70ff57588283b42c4a5cbb7a9d93861721619dc04acd0579a8321470225b","ssdeep":"96:0Mj13xF7dwgP7fuulFVr1TdDYPT6pF2U0FhlyYMQ19wU9+UEyKp6hDF:dJ726lfE+vj0QYFV+UEv6hR","tlshash":"dac19eb42b694eb7e15d11bb707a05c5ca623cd9a2e80c6fba41cf203ee364d517f290","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-08-10T19:08:48.801013Z","times_seen":253,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/code.createjs.com/createjs-2015.11.26.min.js","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.146Z","timestamp":1786388886146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /code.createjs.com/createjs-2015.11.26.min.js HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/style2.css","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:05.854Z","timestamp":1786388885854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/style2.css HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/jquery.fancybox.min.html","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:05.855Z","timestamp":1786388885855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/jquery.fancybox.min.html HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Fri, 16 Aug 2024 13:09:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1164,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-08-10T19:08:48.790104Z","times_seen":7057,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/js/jquery.min.js","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.102Z","timestamp":1786388886102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/js/jquery.min.js HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32364\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93435,"size_decoded":32622,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65480)","md5":"0b6ecf17e30037994d3ffee51b525914","sha1":"d09d3a99ed25d0f1fbe6856de9e14ffd33557256","sha256":"f554d2f09272c6f71447ebfe4532d3b1dd1959bce669f9a5ccc99e64ef511729","sha512":"468c0f964014d76ec5966f5589b2ccc0a7b5f3e8a785134897dfa282a3e6824ce9a75584c9404b77a6962fef99547356aabe8aa71a6499e2568b9de792d90579","ssdeep":"1536:bYUfBybwh3KRI83RExoulFXo7CkSsz/G0bSVze/3260eMSTC5bqYKKhwFvxizJSM:XIi3kIP9kSsgo/ZvxYrtPTKCNtHyUtCg","tlshash":"c893e7e972d6716387b730a850af510bb13698e6b80c8c60f058d9e47e74e4960bbf7d","first_seen":"2023-03-07T01:12:05Z","last_seen":"2026-08-10T22:27:37.183086Z","times_seen":10561,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/assets/images/funds/2.png","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.128Z","timestamp":1786388886128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/assets/images/funds/2.png HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 19:08:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7631\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7631,"size_decoded":7916,"mime_type":"image/png","magic":"PNG image data, 258 x 217, 8-bit colormap, non-interlaced","md5":"4428427e9fdb3e44500a1edebf0f68d9","sha1":"ac8232a37aed6ec415309539e1446368fa1eeb39","sha256":"6ce9df0b8ea8c9a1e15d61fbddf1c36fd2ab8b655be29e1caa70b6cf2b23e697","sha512":"d4dc9dff5898aac7eea692f445e59d1f8ea3a9184cd9d636c8d9ddc98c4e21d2e3117dfad300ed8dcf905f17d6cd5a198ba19ce10f2ad69c29a563a8f3c178ac","ssdeep":"192:UkvkUmjcJwAXn08E/D/sPtVL29ooBL0P79AM:Zv8HAX0b7/skooBwD9AM","tlshash":"59f1aef01f06089ef8fd8d140686e973de36744f902e8a575faa3a4378f1170ab8c159","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-08-10T19:08:48.80195Z","times_seen":252,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/assets/images/steps/1.png","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.130Z","timestamp":1786388886130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/assets/images/steps/1.png HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 19:08:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29774\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29774,"size_decoded":30060,"mime_type":"image/png","magic":"PNG image data, 600 x 233, 8-bit colormap, non-interlaced","md5":"7c7334408a7750bde8d6f5fab124d22d","sha1":"b7077633931d6fa0a512d982853029518db94e52","sha256":"d802ce8db43ae41e1e2cb5b9365b1f8586453a1bac39fe4d7204a8c8ffca518d","sha512":"3d5ada24ccdad8345558dcecf64e801ca2214bc015e1293c3c08c85ab1a86b174cc4183352d06b5d33b0e391478b9bf9c027cfaee7bf79d06fc65447ef5a3adb","ssdeep":"768:FEihiatJXkGoq2ld/eAPJTvVO+ffIfzey0:CXDldGAFVOYfMSn","tlshash":"99d2e1dae71ecb3b2ac8720eba2a7862a5cdb4574025d40343660973dc4d377e2d9c56","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-08-10T19:08:48.802471Z","times_seen":250,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltdsolu.pro/temp/custom/assets/images/steps/2.png","fqdn":"globaltdsolu.pro","domain":"globaltdsolu.pro","tld":"pro"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.137Z","timestamp":1786388886137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltdsolu.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 15:52:32 GMT","end":"Fri, 30 Oct 2026 15:52:31 GMT"},"fingerprint":{"sha1":"82:34:DB:2C:0F:13:1D:18:1B:45:55:BA:5B:89:CD:03:0D:C2:F5:98","sha256":"16:4B:64:46:E4:E3:E7:5B:5A:88:73:01:04:47:81:47:03:CA:29:D3:73:CE:F6:58:2E:6E:A2:5B:6A:FC:84:70"}}},"request":{"raw":"GET /temp/custom/assets/images/steps/2.png HTTP/1.1\r\nHost: globaltdsolu.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 19:08:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 26 Aug 2023 06:47:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23246\r\ndate: Mon, 10 Aug 2026 19:08:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23246,"size_decoded":23532,"mime_type":"image/png","magic":"PNG image data, 486 x 190, 8-bit colormap, non-interlaced","md5":"c4ee3bdcd7966a0985d18a48af069469","sha1":"e118f3741f983ee77a190b0eed2bd08b7d741400","sha256":"1a48f6c4d84091ed3fcef8a5e2f65354dbb1c1b6dc3ccdb13afd8ed0eb020bd4","sha512":"2c869710f549484bcdb3534a6d3d9d47696024286a0ee5f9066020af770eaeedcc602d766e91f8a2416057859171ea4c8ca528849215b2d13ad5ace9afe04245","ssdeep":"384:geCaqNXl22mJy1tr/rfaafqzAPMiIL2uCvO9AXtBAgT1Xi3v7Jo42ua:cVlh1pbfqzAELUOeXtBAgT5i3zJorZ","tlshash":"b2a2e0f74a152476222155f76bb00b5b4b7783ceadd500ae440f90fbd2aacd217a0bf9","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-08-10T19:08:48.802966Z","times_seen":250,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"globaltdsolu.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"globaltdsolu.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.154Z","timestamp":1786388886154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 02:04:42 GMT","end":"Wed, 23 Sep 2026 03:04:28 GMT"},"fingerprint":{"sha1":"7E:41:C7:FB:AD:E5:FE:5D:B3:02:94:54:88:D4:EE:DD:EA:46:BC:9C","sha256":"0F:62:03:25:71:9E:01:C5:E5:A6:FD:62:89:4B:D6:28:CC:04:66:24:A5:08:2F:E1:17:68:AA:E7:51:AA:E9:A3"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 06 May 2026 19:42:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Sat, 31 Jul 2027 23:54:11 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cj0EWckmhGsQxcpB8iIlAIr57FYtFxjFRSjLGbQ7DC2ypkEGf4Oi49qB89VzorguedlcNWD0xh09NeYUKX7A0ih9xMwwjOTxxhVbRcboTE3yylse%2B%2FtJ08RFasvLxsoyaj7j7w%3D%3D\"}]}\r\nage: 846834\r\ncf-cache-status: HIT\r\netag: W/\"69fb99bb-5a62\"\r\ncontent-encoding: br\r\ncf-ray: a291498a8c187130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23138,"size_decoded":7502,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"68ee10aa7ede43f8bb3293b220daf775","sha1":"1f26a636577ea9aaa524c0a23ae8cf342be925e9","sha256":"76e28fc0425d80422e45305464ada45c7c9b4a00132c65012c737c22814c259f","sha512":"531d2baf5f4d61c0def2c5f45fd8d9b69b143c24d0474a01291d858b086b45c233d1cca885cc722d6e6eaff3f8cb62e637df797beca8f5aec20d090f0e23fe08","ssdeep":"384:UzCKMPZATN09o0mtvwfEXMb5TZ/dDszCnfYI:UVMhAh060svwcX0T1dhh","tlshash":"10a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2026-05-06T20:53:53.345523Z","last_seen":"2026-08-11T04:45:48.823607Z","times_seen":2294,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":13,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/2KfLRfk/about.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltdsolu.pro/","date":"2026-08-10T19:08:06.120Z","timestamp":1786388886120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /2KfLRfk/about.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globaltdsolu.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 10 Aug 2026 19:08:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 61447\r\nlast-modified: Fri, 12 Jul 2024 23:09:31 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61447,"size_decoded":61813,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x500, components 3","md5":"b547570ff409c9455687647529020c72","sha1":"42f12aaaa261297f300eb080f0c67fc806f43a9d","sha256":"89b8e23fa6ac471bd75ea91d3fa514a2bdd0999791383f7b5588ba08bfd1efe5","sha512":"04c058e0fae9dae58b4d33b9b050eb07a3680b82260220c4a764e91a7062fd78c84bbbc916a7131bc262bed5d56aef10528f93702d7aed787fe9a2a43ab53db5","ssdeep":"1536:OeIMIDDEYNrCTIDZZ69+p9qhBKI8Pc+TNz5Rp/+a:OeIMIHEgrCTSZ6ugBKHEGxB/v","tlshash":"6853024e2f3bab1a6adecbac610ad75ca74dfb0d974e77f7c8475810a06b4560c5208c","first_seen":"2023-08-30T00:05:43Z","last_seen":"2026-08-10T19:08:48.804117Z","times_seen":11,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":2,"connect":20,"send":0,"wait":21,"receive":350,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
