{"report_id":"a89b0e7d-bf7d-44c3-b607-3330accb389f","version":0,"status":"done","tags":[],"date":"2026-09-29T05:03:17Z","url":{"schema":"http","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":0,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"title":"Envoycore","dom":{"size":161321,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19448)","md5":"35cea7883c544b1e7bccf616127f6412","sha1":"5d678b9efcf717c8dd24e043de8cabddce131744","sha256":"e4ea4021ebdbbd145f74d4b3cb6967b6e341a4247fa3fd5f51c4e351ad40c0cc","sha512":"367467b5169f534ae6978ccb6a052169d93377a9d6ecbd17cf9708bd7a24f0812f4c3c30217f062a122ecab3234e27c6bb389e84e48c785fb68c3be2d57b5bf2","ssdeep":"3072:ax9+E8hvSjfc/BTzIfM/BTnIYI/M3pfeIlWdThMIFWdDxIIDIon4YecpUN7h:q6haajDOW+yLC","tlshash":"73f35411caa40737d20a07cae3ab765526abc6c7cc52b8e4f079817497bec8c1d77da1","dom_hash":"domhash4cd288fbf63d8fdb815316f9b6824fed","first_seen":"2026-09-29T05:03:56.237925Z","last_seen":"2026-09-29T05:03:56.237925Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":0,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T05:03:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"translate.yandex.net","ip":{"addr":"213.180.204.194","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-14","domain_rank":123882,"first_seen":"2013-04-25T11:29:08Z","last_seen":"2026-09-19T07:02:10.659771Z","alert_count":0,"request_count":2,"received_data":602,"sent_data":1215,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-09-22T02:55:49.598006Z","alert_count":0,"request_count":2,"received_data":5525,"sent_data":1088,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.doubleclick.net","ip":{"addr":"142.250.178.38","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1996-01-16","domain_rank":1452,"first_seen":"2012-06-26T16:16:24Z","last_seen":"2026-09-28T09:25:50.429541Z","alert_count":0,"request_count":1,"received_data":770,"sent_data":474,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-09-26T08:45:24.740218Z","alert_count":0,"request_count":1,"received_data":7745,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":1,"received_data":23859,"sent_data":634,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-09-28T22:01:00.454273Z","alert_count":0,"request_count":3,"received_data":295534,"sent_data":1784,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":9,"received_data":307610,"sent_data":5007,"comment":"","tags":null,"fingerprints":null},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"63.181.39.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-09-26T05:50:00.799989Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":630,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-09-28T09:15:01.310693Z","alert_count":0,"request_count":9,"received_data":3760905,"sent_data":11122,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.cryptocompare.com","ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":265475,"first_seen":"2015-07-15T18:30:01Z","last_seen":"2026-09-28T03:08:48.589413Z","alert_count":0,"request_count":2,"received_data":9426,"sent_data":1367,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"142.250.178.118","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-09-28T14:33:45.458782Z","alert_count":0,"request_count":1,"received_data":73244,"sent_data":660,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-09-26T05:51:49.940723Z","alert_count":0,"request_count":1,"received_data":18557,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"api.coingecko.com","ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-09-24T14:32:20.75726Z","alert_count":0,"request_count":1,"received_data":1367,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-27T23:35:58.732281Z","alert_count":0,"request_count":6,"received_data":49823,"sent_data":3587,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.77.84.117","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-09-26T15:27:13.516607Z","alert_count":0,"request_count":1,"received_data":1574,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"use.fontawesome.com","ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-09-28T09:45:53.495197Z","alert_count":0,"request_count":2,"received_data":130201,"sent_data":1072,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"widgets.cryptocompare.com","ip":{"addr":"20.126.215.223","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-11-03","domain_rank":1460618,"first_seen":"2017-01-31T09:13:32Z","last_seen":"2026-09-28T08:13:16.989127Z","alert_count":0,"request_count":1,"received_data":1098262,"sent_data":526,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"googleads.g.doubleclick.net","ip":{"addr":"142.250.178.98","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1996-01-16","domain_rank":252,"first_seen":"2012-05-21T07:15:40Z","last_seen":"2026-09-28T07:08:33.242588Z","alert_count":0,"request_count":1,"received_data":740,"sent_data":496,"comment":"","tags":null,"fingerprints":null},{"fqdn":"envoycore.click","ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":84,"request_count":42,"received_data":3087380,"sent_data":50994,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-27T23:02:15.547295Z","alert_count":0,"request_count":2,"received_data":64416,"sent_data":1044,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widgets.coingecko.com","ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":3132971,"first_seen":"2018-07-05T11:10:42Z","last_seen":"2026-09-16T08:43:53.934289Z","alert_count":0,"request_count":1,"received_data":231834,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-09-26T03:06:01.165901Z","alert_count":0,"request_count":4,"received_data":378708,"sent_data":1870,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"172.217.113.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8472,"first_seen":"2021-11-04T06:37:42Z","last_seen":"2026-09-23T00:47:16.402175Z","alert_count":0,"request_count":1,"received_data":32460,"sent_data":571,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"172.217.116.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2026-09-28T16:01:43.561409Z","alert_count":0,"request_count":2,"received_data":1197,"sent_data":1220,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"92eb5ffee6ae2fec3ad71c777531578f","sha1":"e9d71f5ee7c92d6dc9e92ffdad17b8bd49418f98","sha256":"3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d","sha512":"5267768822ee624d48fce15ec5ca79cbd602cb7f4c2157a516556991f22ef8c7b5ef7b18d1ff41c59370efb0858651d44a936c11b7b144c48fe04df3c6a3e8da","ssdeep":"","tlshash":"c700000000000003c00000300000000000000000000000000003000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-09-29T06:39:42.963849Z","times_seen":83252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c9317245afa86c4304c53887545eb21b","sha1":"aea32980d37c4cb30dfb428352a7e2e660819326","sha256":"2ed534af191bc3baaf1e09263808bf1bdd68db6241bd8f81e2bb014653dcbb36","sha512":"4155069c1e83e7096f35dc3ea300cb8ea47ce07074d144d3b11647535dcdb4e1f915bb067799278351ab287cd993da774ad8a680e7e37e482675e5c088f1f59c","ssdeep":"","tlshash":"c710000000000000000000000000000000000c0000000000000000000000c000000003","size":2,"data":"","first_seen":"2023-04-06T16:00:30Z","last_seen":"2026-09-29T06:39:43.010481Z","times_seen":1799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"679edcaa8385edcd487bea543266018a","sha1":"ec7217c0f62f1d0eb2ceecd924faad1346bce1b9","sha256":"8df3a0983d62094ae99f98a06de9d4b533596fbbda667fcdf251f8ebd8238038","sha512":"d04fe9ab0c22043a1bc531be4084100f4bdadb164b7c1e32b0aa4a81efcd4512ebec08b17fc9a019433c59137754dea6d912397705425606d589adcc71532e80","ssdeep":"","tlshash":"b5b01208c43034449010a1c72063c044e0c7510322930c54e004cc901fd1e2b551fc4b","size":94,"data":"","first_seen":"2026-09-25T07:27:18.82777Z","last_seen":"2026-09-29T06:39:42.996072Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5aefcaaf9790cc8ece124e274779ae94","sha1":"2ff12fb9b2e519682a4b22a03edc05eb7c5ccebf","sha256":"e7424eff12e0cabe5c45c15409aba4e859b80264588eb38c6cb0728772fc54b9","sha512":"386484887b0622ed8da62115d595107607bf70d09f5798919781e54e7d933059ad4168b6b4a0cfbcc6de1d264a5f6a9d14eb2657b150c5bd84837b74586cfaa4","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000000000000000030000000000000c","size":2,"data":"","first_seen":"2023-04-13T19:50:25Z","last_seen":"2026-09-29T06:39:42.97824Z","times_seen":813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"eb988edc601a76304a621a3b8dd1cdd0","sha1":"31b7c27d9df3b123472f512b3938f8e9fdb4476b","sha256":"11ad0aca966d8ca08a386af8c54526c7b66e8422ba20cce96bb23774936e05d9","sha512":"5c0c09a4872cbfb662f525f1d325332fe979d61bbb3dcd5a432f6781094fb45f99526af5bf1c7dce730789d9c7d1ea5b9e9ece21223eebf4758d69d740429233","ssdeep":"1536:rRY2E4dj7olU44g97EpiRvyNVZQP4pue7Yoqv:Muj7olVZ977yNVfukYoqv","tlshash":"985307def2d163b018f361f1a05b420d63bb9494dc88285eba65e7f42e7094790baf35","size":65588,"data":"","first_seen":"2026-09-29T05:03:56.301012Z","last_seen":"2026-09-29T05:03:56.301012Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d9c307cb7f3c4a32822a51922d1ceaa","sha1":"b51a60734da64be0e618bacbea2865a8a7dcd669","sha256":"8ce86a6ae65d3692e7305e2c58ac62eebd97d3d943e093f577da25c36988246b","sha512":"6b3b006aa3a86286c359a6d243d62a61e46f0c5f7d1db587faa26fbe72718eaee33f774af164e3ba790d4ae4136a25dc993d3246f7be6691fa7346d0be0f1a71","ssdeep":"","tlshash":"c700000000000000c000c0300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-29T06:39:42.926364Z","times_seen":65495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"aa0f9bf54c9d756b1b63c0ddc2aec609","sha1":"7c003915b8a9f88d21f7311596e872ae17eebabe","sha256":"910e0bffc7ddfd547506dc71570db3b1436f19335fd370d8dc74a44e7799c491","sha512":"424ddc28638704ffa500c8c0a2dbe6e44465152c9c9f4b98c72602539371a8e95468dfbc0b96355b94ef192a508261446949e16654bb3964302cf14b0c745734","ssdeep":"","tlshash":"41c0806c571da44f520564e5650b519c116399455f850d04605599457b74d0fd912d2c","size":164,"data":"","first_seen":"2026-09-25T07:27:18.81931Z","last_seen":"2026-09-29T06:39:42.932901Z","times_seen":598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-09-30T04:36:25.344592Z","times_seen":306482,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-09-30T04:36:25.345083Z","times_seen":269892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"12347d552552b7eb8f1aaf47a5774b81","sha1":"4701684cb61e83493e14555659e2cd07ae9aba3b","sha256":"63b85d3cc0ccb498e52cf8dc76db5119713a85031ef4a8e99edd01e403cb08f4","sha512":"a0b95f6914bf92922a13db3f81f5612e2a360e0b3bb0f6ffabbe41623a044d662e27a216d788399cad99c8ec18c5f98f481e602d672de5b3b97d5da8ec930e4c","ssdeep":"","tlshash":"6b41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2083,"data":"","first_seen":"2026-05-25T17:49:28.102585Z","last_seen":"2026-09-30T04:36:25.345619Z","times_seen":28048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f25bd234c45487281f85b6c43590bfa","sha1":"3ce0b061e1d6cc5faab24de5d92a31a8dedb0414","sha256":"f6a320fc324792bd518403932d67224d32f502c44b4bae4440db5e0e725a5b9f","sha512":"ba44d33598665c28effe3eaf8b5576230826d50132f71bb5f10417cfa00a36aadf930e83fec25c770e3c8361a84067d8d3771804ee896213ad8dca27b2b282f2","ssdeep":"768:cFdIkhGD4fbN0gHwQPDi7KcjAJv0vcXYM9VPmqRt/ZYcveMFLnLGsIuUhiHwO3oI:N2epMIM9BHYNMFbLGlJhDRaF","tlshash":"288351640868a872c497d547deb9ff3e9ce406790bc896aebcbad35c01ec6510e9f413","size":86444,"data":"","first_seen":"2026-09-29T05:03:56.307301Z","last_seen":"2026-09-29T05:03:56.307301Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-09-30T04:36:25.347312Z","times_seen":121646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8501e99db1c76b62dea75ad32747a129","sha1":"791537ba64bbd81ed1644b015c4830d897182fb8","sha256":"25289f89e8785a11e468135cfa545b64462e90a61e62ee0bf9fe2dce0898016a","sha512":"d34b3b6f94043e080daf7804d7305efc1bade1433a80d4c6c547ab1325aceda8235ceea8bd99062a7737401ff5d767d46e4d24a972bfa88e9c6b197947041f77","ssdeep":"","tlshash":"7b1135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1032,"data":"","first_seen":"2026-05-25T17:49:28.106733Z","last_seen":"2026-09-30T04:36:25.347835Z","times_seen":27969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-09-30T04:36:25.348324Z","times_seen":268074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2bef04e571bde43e0cc8abe1c5d01d9","sha1":"ecee8506820f2fbd4ebb13fae1439c792a0726b9","sha256":"2c2f7d9249d1f9cdaccbca1d6707b2c28d2c373657ed17a9335a85cdd0e653d6","sha512":"d31d7ffb30a0456cf4bf4a57a7797185bd48678f9bc783b12dcd5666de02b1bd32772c573053bc86f8efc246c16aa19466c3642e8dc54930f0daf12a0d1d3cf6","ssdeep":"","tlshash":"2201475c06046dace905498cc7c2bb655fbc9237be013125f82f460dbaf3aeb9931857","size":740,"data":"","first_seen":"2026-09-23T19:58:56.922526Z","last_seen":"2026-09-30T03:42:09.464408Z","times_seen":1072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3acdba4dd02b9872bcdf37d947e577c0","sha1":"21ab3b0832fb94f03d4f4bdd8a6b4d8adc66510f","sha256":"0fb6d9a81ee50efdc4c3cbb52aea0cb06e677236b7de7402717a25690b48cfe4","sha512":"6c2aee3cd08f11d6c919b38b49c2d9fff5cb7171cd3b9e721d116fe8744eae848f60a32de4c857456a8b52034209b766f47b7822028f131eecab0237a4253af8","ssdeep":"192:yzEjQfb/44TmOavb+Nvyv8kYl90sxVjoObVWpO7sTM73gcAKc3Udq6bRXnLNy9nf:+OQfbwKavBv5Y4sxVMOUE7sTMDgcA3XL","tlshash":"f022c80fa38679ecd7d15598b7a36b037cf4821b63082a1d88cba0542cddf19429f9ed","size":10434,"data":"","first_seen":"2026-07-30T00:50:25.229944Z","last_seen":"2026-09-30T04:36:25.34941Z","times_seen":9880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a0c48a19b932a61cb2dcbf2976cc1af","sha1":"d464dd36bde8d619cb9e155c98dbb0c9387dbe86","sha256":"5f82d88b7b0077f33e06d18a7fd4261c4da77d09aabd2eabb8ebcc74089f3c1a","sha512":"372f05c7015a2b91633918f079534a03cc4006831ef56d05e3181c55eb2c04ae4226e2cbf81222bd7f9f73cb45eb132795c3f1900ae808412097399019c0fadb","ssdeep":"","tlshash":"73b02b0bc634145e0c80a01c6c0d07103d00e3744a084fbc10000204704e161602f3f5","size":119,"data":"","first_seen":"2026-09-28T17:18:53.910967Z","last_seen":"2026-09-29T17:31:08.568454Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-09-30T04:36:25.350425Z","times_seen":264741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0899dc14197546d7fa837d15053c324","sha1":"3014f7a092222fa5227a999a3f31a22fea399933","sha256":"e69a10ed764c4272c6eb025b281638991cce54235d1647b371bd51f04bc78228","sha512":"a43ab06d9e78146209a5eca04f5daf57c630746a5797e0b86ddf92e86edd81ea99b86583389377ea183359106c87233e07bdf0a4b9fb66b5a811ce2450f83e97","ssdeep":"768:E6SNT4F3L4J0h8NRCXbF5bXKLecZjszR35A5CZx+AKTBAajkfnkikAr0fP66TjX:HFb4c8NRkzKLzyI5CZx+AKTBQnkpn66n","tlshash":"ed03e04ad3aca0dfad750fda09df5b7e2b78cb10d092f9c36a82a351609b405291dcf4","size":40385,"data":"","first_seen":"2026-09-29T05:03:56.315332Z","last_seen":"2026-09-29T05:03:56.315332Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ac1839a14c0a34dcd7efca3a01be5a7","sha1":"d6ce94dd7148440de7cd068e4591d734e4f21cc6","sha256":"3dc57c11fecc0d840a2fe8f74634f7e9a156beed84fff89f629a8a33817ad554","sha512":"13ecab2eadbce9c454a6abeead1b128450bf6d76c9c933ae6de857fee1fe2d0e417e4bb139395fee9ab7d03fbe96da9026ccc59fbbeba535b1871c09b9af4f76","ssdeep":"","tlshash":"67a00263c529d5570038567055973116e12867608915e50c035a560975ea42bfed859a","size":62,"data":"","first_seen":"2024-01-04T23:32:41Z","last_seen":"2026-09-30T01:37:32.292751Z","times_seen":6383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"ea6a1f06d37b571be2dba047b623c32d","sha1":"9861c5681993eac33c7f7b896c446c24245e9e48","sha256":"ef38eb642e69e83db9c4f028f43774b4e088d941e379bda6183914cbc85c451b","sha512":"719d819f87d605ce4134a91eaa2aff5d94286acca7d369b7cf86639e2b76c105f8cd5a2856d8a8e5ba4cdaf61bbff39db177000e4e18ba0482fc850cd6f75b9b","ssdeep":"","tlshash":"89a002b4b5c3504082df21643ca719c5956d44605014ade95814d4955d7d835521dc6c","size":61,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.858008Z","times_seen":1451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f5008731bf52802006ee9aa478e1347e","sha1":"74e0ec55666063515352d29f8a7eaf9af3d1cc0f","sha256":"641fded50ae3d6c032fd1f1209b7dd73ba88383fedd2c6b8b50642e44e568264","sha512":"c1101289b7dca9939a9463bf64649365979ae0c880a303ca0cacdfd44ae4f1169c7081721b8cb6b154ca32976cbf519b034ddba0430ee57e7d8c12b749b7ed1a","ssdeep":"","tlshash":"cfa022b03c3232b88823202cf883300ccabf2a82e88c080c002b00003f20823f80cc0a","size":69,"data":"","first_seen":"2026-09-25T07:27:18.868468Z","last_seen":"2026-09-29T06:39:42.939266Z","times_seen":591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"eb5ccda1da004baba6010a60fcb07d5a","sha1":"e60fae0fa36a77ee12904d7126be8274996c16dd","sha256":"2b83b730137d27e96d077a9b8d2e7e5e92380dd5d570f5d992edf7e50628ee37","sha512":"39a12100d2c8f09118694c649c1781bd913e8a54bd1539a18e05db1583582cee63989ce9c74cc2c50cd103c371f24fbf23aa7db5d5e47b31c00a4d7b66b4d6c2","ssdeep":"","tlshash":"9ea002e621cb5500879312a514675c88903444b11485d985585899e69d690225317aac","size":59,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.858712Z","times_seen":631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"27d8a6ac00fa51086c44847527ac8573","sha1":"84ac6013ff1074d521b6da1db9c49b25d3f1ab6a","sha256":"23929c24df1af3a17f8ff1cb0fc71887a7601ef69804106795061c29a8c98912","sha512":"9c329e7fce6b2d07370df8679fe25ec18ea422afb02f5685d0c65a05083586c16c0f076b5a10a8caf951961cf59ce60ec19907b59e373c7f5e5dbc68a4db2269","ssdeep":"","tlshash":"faa022a838023080802008802c0f008c0c0e830a28230c0c802a823c383032a2c0cc0c","size":66,"data":"","first_seen":"2026-09-25T07:27:18.902219Z","last_seen":"2026-09-29T06:39:43.043096Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f52ba22baf75438bb1b02f476954c023","sha1":"498306ab9bc8d549692c799e13762e3296f3b77b","sha256":"af6324a357e772660d76326577f0bb8a35d4e07ed5f26f1d3993dbbddc6a377f","sha512":"51d9cc1a86414350b9523fd0597b4d40285577bcf08f8a63b59e016c7f74dba822f5b52c3dd90a4add309a283741d84f08074df23ec33e340f6c7c43dd82e005","ssdeep":"","tlshash":"c710000000000000000000000000000003000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-12T15:00:45Z","last_seen":"2026-09-29T06:39:42.913726Z","times_seen":2267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-09-30T04:36:25.364403Z","times_seen":217194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"44e00710fd359efa60bebc675b0834de","sha1":"3a8b0c63a88a21ac464a7ed2b263dcb9156fc1b0","sha256":"d7d106ecdf61ff7ad3eecdd86c84ee4fbc2eec3615c52ea48bb4c7aa534a8522","sha512":"40dc685c7ebef603a00008ffe00ca7c513363aad80bee75dd34d3bb13c795a0e9deb96fbbe9a6224ffa8e78e28ff346842a379bdcd71f05960b37cccf1f1e88a","ssdeep":"","tlshash":"4a9022bc20c20002030200b00003088880a0002000c08a00000080830c28022023083c","size":51,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-09-29T05:05:43.88252Z","times_seen":581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"207502527ca688cd61f209fe486536ac","sha1":"fdd2f8450630a55b6d51d56699f98f5b284b8f32","sha256":"e8679a4b7675e75a98a865f0169d0bea8913cab3505af9d8ab93d98035e78671","sha512":"419d7d1b438de6d7ecbfe519063619ebcf75641018eabe4177e9856023106bb664ad159a99d1e972b349388785a53d3293e158d8ab8b44f654a0202481f3300c","ssdeep":"","tlshash":"9fa002ea21c6540477d315f814675984902998625444da8a9864b5f26d6902a9227a6c","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.97393Z","times_seen":1096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"859f9b9c081b3354711d9b240b20416c","sha1":"be3bdc4ddc0087cf5998d5199ff9ce1365140803","sha256":"c366bab424e872af246f36d0eb82f6006608dd5a807492f943ac1fd93f6adcd4","sha512":"3f370b304f8d2194bef0def8ca7e126c08e13940bda667fe2bfa6a58febbd1dab1603e39143ae42c399a08a641a2f15647663943bde5586ee741fa4983abc9ed","ssdeep":"","tlshash":"6f8004041c057050015117500007414cc03714d431103c1c10154cc34c7315f1141c7c","size":34,"data":"","first_seen":"2026-09-25T07:27:18.895147Z","last_seen":"2026-09-29T06:39:42.875681Z","times_seen":564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"80cbca5d7f86a5a024943dc5a08bef9f","sha1":"01f20f3873079d5997fa086b64152225cb9dc45f","sha256":"7bf6523bf719ca16e9e83821d0f354775d30927a8109f563b1286ddb3255a491","sha512":"5c6b978fded755df1023b9afbe73f5cc4e0a5a581ce3de3e13f274c036669008228fb87d9e7a43d3da366a5b248c7c9fbbc3498ae3347a898019c60c745451cb","ssdeep":"","tlshash":"f2a022f020c38000038323be23230c80c0b80822080ca8000c8880a3afa30330233fec","size":69,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.841496Z","times_seen":1431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"e6ad7632da5f0d7f8c376732d6eed73d","sha1":"ea8d34ece6e6988be7a06194995b7064925cd616","sha256":"ffa06c9efed34a8b52b90d8f07fb27e284604bc742c5d2fa3431b5b7321757d9","sha512":"ff13f6574a72769731cec9c0519e32780e6f27d542ace9695792f19579bae561f6826434ff6a1c84ad4073ae9fdc3697046317a9b40ff251237a54605ef27124","ssdeep":"","tlshash":"4e9002b931cb54114b5251e424571c849068487024489d495544d5925c650225116a7c","size":50,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.785113Z","times_seen":1430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"f2f1d783a258a064f7da827d82c5b0a2","sha1":"4acb17f12e77e8d0d2204bcf480f77d4c0cf37bb","sha256":"c8b90c4261834cdbffdeaf4c6bb87df3e76e08d5b4ed5e6a8ea7d6d00af4df92","sha512":"d5ed63e5b76b1e27a58a4faae6038bf11f7753c458482e0c4f35b2e13ac6c7dc48e574ae75e6df73b5694297eb73c964888212e56403aad184f09c5215cbca9c","ssdeep":"","tlshash":"b2a002f876c65000829f26642de71cc499ad48601015e9e96824d9e56e6dc35412ecac","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.874916Z","times_seen":1330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"a11c23a4fe0ef387d15d019cbabb6a8f","sha1":"00216ebec29cd169fef6652dd9f69cce5a6c25e0","sha256":"2ff422c30925348b4ae163231b3a41fcc2190c449dd3a00e420235374f1e72ac","sha512":"a8e157b043da8d125daac7c28e4386f8aad746d9f12a12866c79ca8d63c1436744b848449aafc4ceedfa7eecfe8c00e3b7c071079425a510f7cdf559b367af84","ssdeep":"","tlshash":"e2a002f575c79000c29f12652ca75c88957d44b02055d9e95c2dd8e99e6d835431fd6c","size":71,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.832002Z","times_seen":593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f83ba497477f1b653cb3af0bcd5bd7f9","sha1":"a4a6f6cf953161fffbf57824d3819d2b045a1e9f","sha256":"2e0e755066d70863f87b17ce89ce01bfc9a10aa8ff065f1c087f69be22db28fd","sha512":"b0e7b0a1809e602ed5e1d6b5fd15c68d13de3149b0e21b1a8f54e0fae5e09350c37646dd3d4d215ff3f549e93a55b6fa4d5e9236a51cd17f7a02da7062a95eeb","ssdeep":"","tlshash":"c710000000c000000000000000c0000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T12:10:41Z","last_seen":"2026-09-29T06:39:42.893965Z","times_seen":1644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c78c8e46679624eac8724f898e5eadfb","sha1":"1056d97a8feb857b3dc8e901f6c71ddb9350902a","sha256":"230b690755470af44ba2ec58b2267b3ce4fff117d0d59475e8fe2e41a93f8f82","sha512":"18ab6dddca1c9f8896a70db99278c670cdab56edb673e05325365d6c9e2a089d53e33300178516ea9342ed41f21ea222ae87939cae8c162c9ceefdb7e0ec4d50","ssdeep":"","tlshash":"eba022b0bc8cfa0c00a0a8f0380f30cc00e82f820283cc2e300a000803f2823fc03803","size":78,"data":"","first_seen":"2026-09-25T07:27:18.887766Z","last_seen":"2026-09-29T06:39:42.920587Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec7e53845feb375870343182efd0b929","sha1":"63e71d0c5bcadc37a725d971054eb55e017f6989","sha256":"a2253e1fad60aa1ccf31416ca8cde6ffaa5af2510733c7186adc04a503346c5b","sha512":"339f50fe30462dd6204552b2d3d3fe5cbaeea2cadcfbde096f16b40f1d985a5a68ebb227dbbb9f37c9451a36376ed392b7fb50c6e661963124146bac7e03284a","ssdeep":"","tlshash":"cf50003cc00000c0000f03000300000cc0000c00c0c00300c3cc000c3c0cc00c000000","size":11,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-09-30T04:36:25.367058Z","times_seen":182190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6aa1e040c8b4607538970731e4040ed6","sha1":"881baaede9ab674cbb97cddae8bfda41d8ad51c3","sha256":"0e26f370b56256f2c7dc5a6c5b4a43cbdfb8a61961fcd697e65896ec1579f9e8","sha512":"a2de4c12afbf942649c13c254abe760c1e1b531cc1317253717a2e1faaf19b0874cf5b3fa9fc293e720ce8cf03d34e27b760b57a55846fb7e32ec17f822768c9","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000000000c0c0000000000000000000","size":2,"data":"","first_seen":"2023-03-08T03:54:58Z","last_seen":"2026-09-29T06:39:42.93354Z","times_seen":970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"7525d59cb1341118c89b0ceef17986e1","sha1":"0bd69301cd3437ce2448c6412204854aafaf9f3c","sha256":"05e0ed4070840eeac5243f24372aa4541960c70cb2f0c934c45dd3b9c86c20de","sha512":"2626e91f62d2af259ce40f67d4c6e364b4c140165bf2dfdd9b4b13807622262d862a554bd4c1b7af3b58b12bd2b1a33188e63dbf1c94de7b70884459d40f8a62","ssdeep":"","tlshash":"579002a531c75400477711e454675c85906c4c70344c998554409992ac650635515aac","size":56,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-09-29T05:05:43.874218Z","times_seen":587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"b4e92699ffaef2b82967e888e80fe0ff","sha1":"2497c684769952f88f0f7680bb7d2947f181c21a","sha256":"108642668da5d427b5b1b04f1241a1953e8013360097fc9d90b6806291f75823","sha512":"688a1aa366bba111e7f0e5163715e7063a530733fa706ede4cb2ee15a3362459fceec44f674b2d1d404aad1106eb2e1376cfa919c9f8984026b8567b971be7e0","ssdeep":"","tlshash":"eba022fc3ec20000828f00202ca32880a0bc80300008f8fa0800c8b00f3e832c02ecac","size":70,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.94622Z","times_seen":1380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6f8f57715090da2632453988d9a1501b","sha1":"6b0d31c0d563223024da45691584643ac78c96e8","sha256":"62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a","sha512":"f14aae6a0e050b74e4b7b9a5b2ef1a60ceccbbca39b132ae3e8bf88d3a946c6d8687f3266fd2b626419d8b67dcf1d8d7c0fe72d4919d9bd05efbd37070cfb41a","ssdeep":"","tlshash":"c700000000000000c00000300000000000003000000000003000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:09:42Z","last_seen":"2026-09-29T06:39:42.998426Z","times_seen":62841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"ff298be29451b87d3c6ddcccd831d345","sha1":"a09186b4eab2ac885db236f068b37a360640d38b","sha256":"7633191875649be900b5de5102a6d38d1d2fd1aac17e6936a9d1b2e35bd921b0","sha512":"3e5684054d7132fc5c212d25a01c1b82394157329f9a74833d03ba5a9e212bde9737fc845cf692493cf39ddbdd3242f3a4a3cb1853842ed9a50d94bdcdff7177","ssdeep":"","tlshash":"539002a5b1c65440475651b418675884a025586114549a456541e5925c790229155d6c","size":50,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-09-29T05:05:43.836138Z","times_seen":1355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"ff727817abdbf227f00af3ed93ec7825","sha1":"999b125a465cd3efb3cb6fc0d6e3a635909b9066","sha256":"8db560cebeb2515ceee73bebe9eafb46aa250578c00857c4dfffaa9ae5e0f7c1","sha512":"581ea68d6c8b383df2a2ff867e5598967fc09a27b7a0e295332b6257e863180da8cd3d513fb58daaf6cd27e41835928564e2167e71493d33d998db28c53bedd3","ssdeep":"","tlshash":"539002aa21d65402575211a415571888a1a4447014c49b85545695926c69166523597c","size":51,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-09-29T05:05:43.878185Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3635f557e9b6ec09543d553d43901c23","sha1":"38413a87de1a4c3cb0c0d0c06d5e4bf49f107883","sha256":"bf15a2af1d5f3dccf06a345be808ec06848d6ce558e1f8f269e6540ad4e31fe8","sha512":"742393b7828485f6669025fb5a88619bb2479712d600980c4937bed6b7615b9affeca302988ca66081daeed1df37c6c817b65da7f5147dd512b767fd924576b9","ssdeep":"","tlshash":"3ac012f0240491ee53b7634826ab9dc638d270e456c91b958530a0d544706dddad9343","size":194,"data":"","first_seen":"2026-09-25T07:27:18.933597Z","last_seen":"2026-09-29T06:39:42.993749Z","times_seen":587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/moment.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0941fc7ec3988352c959e5b3da86f666","sha1":"f5ff9e6fdcddb2951851412bc021015b6b59054c","sha256":"1fd8c0cfffd02e40cecbf9f313d1b86988a342d90bb7d16f1a67544f0064ea0b","sha512":"5afde44d2c0b90bfbf3292b794e80ab6c4e7e653b59e675eb2fee4f6459c22ed23a00268e0ac48b01e3fad03d45ffd4cfcc35e3026d16fbff64bf7f61488412d","ssdeep":"1536:4OpyD1Cb6yVBXfW1vCUUtQQTj06HPU3KQFSNF1T7cbF/nlzUIKHCIioTo3v2BcC:4OpyDJu8XUtQQSO1T7cbF/nlz3wq2BB","tlshash":"42e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","size":150941,"data":"","first_seen":"2023-03-07T16:46:41Z","last_seen":"2026-09-29T19:08:13.530524Z","times_seen":1614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.cryptocompare.com/serve/v3/coin/chart?fsym=BTC\u0026tsyms=USD,EUR,CNY,GBP\u0026app=envoycore.click","fqdn":"widgets.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"20.126.215.223","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6afec09938c26719dcf701f37b01e008","sha1":"9d58270516edcd6fb26946c0914f088f0233436d","sha256":"defcb541c05cc4b1025f2d4e3abc317d81c57e0282656a9a69852ee72228893d","sha512":"c78c8b01f29bd97986640a17e8462e5402913acc2f4cbfed12dcc5a1af7749e3deb5248eaa806ee5dc4a7ef9b616f52dc4470546521957cde7c34e020c06007d","ssdeep":"12288:Gdc8RLxSn7pfK+OBING50o+Vcmxjb8kSbmpg:Gy8RFSn7pfKPqG5P+V9jbPg","tlshash":"1a355c4dbb462815c39262a808ff11c6613a724a5805c8acb63cd6e56e7cddd21fff39","size":1098011,"data":"","first_seen":"2026-09-29T05:03:56.335692Z","last_seen":"2026-09-29T05:03:56.335692Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"80ca5cd11656be980bce8201993dba7f","sha1":"de50663d81896c0aa91d957737a053ca2b353f6f","sha256":"d48f9d4e53c38dc790f47249b86060ab6b4c6d71fada3a10a0ff40d4e4368592","sha512":"a4ca685143e4cafdcb10b4baea5a96e0527a3bb01d9da55a6955d20c4582c4a74f4769d4b1916a5237622eadec3e6c715d10ef086de2cd059d05a4158f2b1b58","ssdeep":"","tlshash":"2aa022f83bc2800082bf00a02ca33880c0bc80300000b8e80c00c8b00f3e8b0803ecac","size":71,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.785899Z","times_seen":1394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/imagesloaded.pkgd.min.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5594,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-09-30T00:47:07.640264Z","times_seen":25173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24cc3dc813f384fde380df619f1525cb","sha1":"56399e3ce57ff98d68c7de98a563e572230dff6b","sha256":"5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b","sha512":"fdb6e7d3b9452cc36c1e877ebe47c50c82fd413f2cef945f808e47b081da88ae6aaac7aa14386687c59479e19c856f6031d7ae666fe9c5b54a0b6fe37fa062f7","ssdeep":"","tlshash":"027000c008088802080aa02008800080220088023e0a0e0008200000832000280a28aa","size":19,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-09-30T04:36:25.482397Z","times_seen":247206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"09d00148cd6e851f6054a0cca02ae814","sha1":"6a532754ab3a87c8a1ac238a169580b20b6dba44","sha256":"c41de80fd3c7a5ee98db833a483ba162fd6ca74cfbbb57c340f0c062cc749708","sha512":"3fb38b0b78179a5f90d9f2c814c1bd8bbc47bf0b941b609f09d9d1f7728224bd1c1d306e83b45bbe7d3886cb0a0234b28547f99ed116f3860919c3d1c585b00e","ssdeep":"","tlshash":"249002b529c6545447d251a429571c849028486035489d459442d9a25ca51235215a6d","size":54,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.853017Z","times_seen":939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6512b1833bddc270426fec71101f8bc3","sha1":"37811c948c76e7090b931fb295c080fbcb6b944a","sha256":"dbd771f86bf52d2a08e63893c9932b3a75986a79dac5fb19a900a6607cdf6b8f","sha512":"82730d08df7196f5713eea8215ebdb733d43fd258649f01ce427dde25f17fec0c51da826cb4355647336a3beda191c8abb6cc4b4d18c71c9f666cda3bf4507f5","ssdeep":"","tlshash":"c5700028ae08a00002e2b02008cb000c8022080020220080020000800c3002a800e888","size":22,"data":"","first_seen":"2026-09-25T07:27:18.904252Z","last_seen":"2026-09-29T06:39:42.957257Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3df6c88f664ee703dc22bf5b091e34ba","sha1":"288ff5d3ddb9b3ac883461a038411d6f24f315a1","sha256":"e1ca8565ea052e7f1595af459bb64541495a329d3205eeb57058801fb658cefe","sha512":"c35ce1acd182bf50ae0f16ae60d435d8b6ef8d8e0670c466a29aad609f96b785b9e8f7d0a2c8d449da5b9400cc5944b6d5d946426a96313ebb23e335f2dcfdf0","ssdeep":"","tlshash":"5af0477fa5d513a156b610d707ff56cc60e961a23f29340f1351029cc639ec104bef01","size":598,"data":"","first_seen":"2026-09-25T07:27:18.934645Z","last_seen":"2026-09-29T06:39:43.008523Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"852dd9819ff83180fd00156f44e3d25f","sha1":"45f0d48ff5d438e80d16338b1662ac34cc2eff30","sha256":"cb3f4f8ff27e091ad6844da23b1f031f64ef3371701d5562ddeb9616268123d2","sha512":"2137685bdaa751f589d9e7ee303227ef6070fbc9af2b78ec54466fb240e1f9efc2520934e87c3a10071d4e76ef9d32c306e0e07b9ff7e314331d740068217f9f","ssdeep":"","tlshash":"0fa002b876c35510829f11641da72884957d44605114aaf95814d4a55d7dc35812ecac","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.871716Z","times_seen":1350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9acdbc05ab7c5f2b2576422f0400963a","sha1":"143be00a352c9dc9fb12da7791c366233b5e95ff","sha256":"6fd2a6981e2ee5ba0aeef97b7bfe07df86aebd3b1f3f49a60331dd23be694de2","sha512":"f65139a3b586546763e8969f12b90495fda9b6b76686ba2a196a78ff8a898a50a2dc2a42d0a934a48c7bf343d420c785c392b62117c2413d9b1c72e72e18f470","ssdeep":"","tlshash":"c710000000000000000000000300000000000000003000000000000000000000030000","size":2,"data":"","first_seen":"2023-03-07T12:23:58Z","last_seen":"2026-09-29T06:39:42.975575Z","times_seen":2517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f26b70ef4ffe1196b950e0d72c817799","sha1":"fe922689ef44d7f39b8cd989cae2d2c5d7777588","sha256":"39de89f2948e35b9827254edaa13a3e6aaad7aa8cdcd9008bdc98e5143ce7e80","sha512":"444696737f3554cac3ff6e2c2ce6140ac6c487d676caabcba2b6c525be5b6a65ff410218e78e8832da4551cb064d37164c736ff726197f0e86f202c17bb190be","ssdeep":"","tlshash":"50d023c516391c71c7af607719c3803742f140533ec54b1c75823d5871d35c9d746412","size":218,"data":"","first_seen":"2026-09-25T07:27:18.81408Z","last_seen":"2026-09-29T06:39:42.92379Z","times_seen":598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f623e75af30e62bbd73d6df5b50bb7b5","sha1":"50c9e8d5fc98727b4bbc93cf5d64a68db647f04f","sha256":"3f39d5c348e5b79d06e842c114e6cc571583bbf44e4b0ebfda1a01ec05745d43","sha512":"2ac968752f624be3e3df46764b51b7831feb70d40307df5d587d4793bffeaf8b4042a1fd6d465df2aacc3304328d431ef10e083baf690b8cc535480a4fef092f","ssdeep":"","tlshash":"c700000003003000c00000300000000000000000000000000000000000000000000300","size":1,"data":"","first_seen":"2023-03-07T01:27:27Z","last_seen":"2026-09-30T02:21:54.322584Z","times_seen":70426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-09-30T04:36:25.436232Z","times_seen":257790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"f0db5a717936f2ca5f4d45cfe51e4468","sha1":"50385d524af52d7556ba3e59e9d421222c49d984","sha256":"75f7c6d22cc19c4a5258bec9172f7a113b53c1ac48cbf98fc841d07ef9528f68","sha512":"6daa4280288770efdb1fadc04cf961097d74773fb3660bc00daff1b8402a8655e05b81804fbd590538601febbb7511c4002a9107f6eb7668483c9732eec87eda","ssdeep":"","tlshash":"d4a022e823c302000ba200e020033880803080300c00b8000800c8b20e3a0a2e0228ec","size":59,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.822663Z","times_seen":1403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"50a42204409d4960be74b60bc7449202","sha1":"4a6bc5ba299a11c027429529df32995b6f8720ba","sha256":"ad39af33539ade9ee75a3871ad6c71589cda04c00dd812a52fe57060a6514577","sha512":"6f2efbf32e20abcf74ab1d83e7568a7c3e1b06d89ec30cf7f4912a672708dece4978b4a9017e2e4d6ef6e8606070da5d21c1856236ec4677a7419e2689a17c2c","ssdeep":"","tlshash":"549002ea22c75815475651e414971a84902884a024459d455444d5d25c694329155d6c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.944385Z","times_seen":1273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"1868b2f1db098176aae5e36140349440","sha1":"a8b49516820776fa3a0a3705e299701d763de072","sha256":"f0bd2c3091ac499408704c9d3f602bdce3e5630254bb192448d64c6387a77d0c","sha512":"b97908bd121bbc229ac355bc56f4659e4f01331944a6512189341a15571ee345eed4e34f4882859d40e4328da79c1f1ff1abf236ce49517df3a7da4e9b957230","ssdeep":"","tlshash":"8a9022a028c2000003c300a030830880803002300080ac80020082a20cb00220300b2e","size":55,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.925415Z","times_seen":514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/fb50cd46/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"755d34ea613ef1de33c9c71d8c021d58","sha1":"b71a7c8112c22173ca12ea8e44f7b51ca5808d8e","sha256":"4598415ce17b4fccee8ed41af03f7c15dd397ca04add7940f9853cd30ed57735","sha512":"9285f57a5c76f7ffb35957179f8db3c8e4fc1364a5830e190c419410cd89fdcc94f6815d9acb74d7b3a3276f6f132776a08592645330163d7d4d76ef2585bfc2","ssdeep":"24576:z423qyGJaJ+PMbeU7CnRVhUSYQETPrHKVaf6qaNcHy1c3w:z423qyya0c7CnRVhUSYQETPrHKVaf3w","tlshash":"a3756ed873d3e82213a2e0a5589f1202f67a5854a4c8c16cb57aefdb2d64d07607bff4","size":1629834,"data":"","first_seen":"2026-09-24T15:17:05.670715Z","last_seen":"2026-09-30T00:11:53.0474Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f1675418678f455a5a9859669fa002a0","sha1":"74c28b766ad758ff3f10d2e9e973e0c76b7564ad","sha256":"811e7d3c82785ab7a861e0222966700d57e46261a1a7a0533e32668d1c8a4854","sha512":"1e82815ecaac7eed76411fd2e124f5fe16c1ea6416f39674aaa3c3255feddf667cdf0fe5fccf716847ffb8a53f71253bd05c019998687c3cc9c1504b36319e6d","ssdeep":"","tlshash":"dea011002a02220080ae28b0a802828820aa2b08a083cc88b02c0c082b3e80baa23803","size":76,"data":"","first_seen":"2026-09-25T07:27:18.906581Z","last_seen":"2026-09-29T06:39:42.916238Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bfbb35b3970b75bab6c372bd4e690fdf","sha1":"6c06b6e16d67c4543ec661570436fe68e2734fe6","sha256":"b25937ace2e8a9fb3368abf4a7d0689cd49d5905314c8650cd65e6c761d3e8ed","sha512":"1d8ba5618e3d02d020197eb0167dfca971d3f30e5b5a6684bbe874237b1e837a54ce390c9eb718fb3829c5dba267973602448319db05df57f66aa439240bcc3b","ssdeep":"","tlshash":"aac0125b71c6d3a02cc615d9254b1244076650022cd4544f7d8233ec9964b470538f01","size":189,"data":"","first_seen":"2026-09-25T07:27:18.824324Z","last_seen":"2026-09-29T06:39:42.96993Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cbf08411573ed612fefb56c21ffcb183","sha1":"40671839cba6af4a5d8289209bbcaf15d308d2b7","sha256":"b9f516c4cb9373e4dfb566c1ff0c00c69532d1750883abceed7c99a604cf455f","sha512":"6afabb856d0400a5e96e279cdea48831ecb3dc46353370f138ee322caf678575880698fa24a2879b3178bcd7842d745628464fc5d7a7817ed2e7bd061e551764","ssdeep":"","tlshash":"1b1165f1f8093365ca7b73db414fc3ab826012d794578301102a55bc2a3fc12e2b4b69","size":1019,"data":"","first_seen":"2026-09-25T07:27:18.891234Z","last_seen":"2026-09-29T06:39:42.922675Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"113a22e1c202593c434eaee62ca2496c","sha1":"3a6267f2b0d1a6da717f320517068b9264f53a77","sha256":"c86b14175b2bd85a9825493aed0c0e25a9cdaf9d7db9ce3cca9e93c225fd2c16","sha512":"68fc153dc92d9a45af97ffc461701099c325fe4ed15cb009da8f8bcef2c581560e89a74d27d1d872c06f22ae10ccd57b02f2df8e17ba52f8ba2c7acb6f734b3c","ssdeep":"","tlshash":"d990021d582835e40d7b66901f5e03ad27770514396a44c02255c0641764d8aa46dc18","size":56,"data":"","first_seen":"2026-09-25T07:27:18.897449Z","last_seen":"2026-09-29T06:39:43.035946Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"cf8a2ce4d016f00bc6900a65aa8deb6d","sha1":"898a1ddd6d39a16ead9411c59de6d0b62a17515d","sha256":"3d47c9fe004a6fae3557de89db9215cb4e3ecdc3896ebef1a088d54b72ad4dc3","sha512":"6edd2afd3efbc3101837b647e8b682e4801ef82514d546e80576267cba21f937a3727f196bd238e204fe6d28b8d4f69b1665c8027178e167114486f0e2a30008","ssdeep":"","tlshash":"84a002bc76c25010829f25a83cfb5885956d44b01025d9e95814d4d59e6d836411ec6c","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.932193Z","times_seen":1436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"eab71244afb687f16d8c4f5ee9d6ef0e","sha1":"07962e32beac4da179b30c06f1c1e71bd220f782","sha256":"fab66aa01347d3f11a16468941378cea495937e5f482e18ea6472681e03d3936","sha512":"a49a34734c9c3765253179a66bf7c8dcb5a6f19d4ca40a2cf9a4d12b0a8528c84552718aceee35b0f02be2db54118d094160e2c27be3c71673ce8a05560fe7dd","ssdeep":"","tlshash":"c710000000000000000000000000000000000000003000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T14:47:45Z","last_seen":"2026-09-29T06:39:42.956415Z","times_seen":1647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"81b0ec11899ef07d10ca2d1e0569aade","sha1":"d7d2ed753eb4470e216a96926be855e1dcbd226a","sha256":"dffbe84328587ce186be0985ac2b4bef07d1cb5f9b4c0e2131393f5ceeb31f8b","sha512":"6062af54bc70bf5ef7889dbd914a0fd7bcdccc1fef4b5421d734a04376deb7ff9a16cf7979bb0b1f95ea04634ad7484ad5ff02a68e65b77a27608a0f7c4fb8f7","ssdeep":"","tlshash":"14a002bab5c25100829f11641ca71c88956e44605015a9e96814d5b56d6d935411ec7c","size":60,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.988028Z","times_seen":1160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/nwgAyqBHFFi2W9LKQghwb3A0rEg5C-dyKchYZGE_VuI.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f5d87614fc8dae64fbe8785300117fe","sha1":"88efb28e35d0b241716526721d444b31d12811b7","sha256":"9f0800caa0471458b65bd2ca4208706f7034ac48390be77229c85864613f56e2","sha512":"f517c28940b7a5bd4d5c53e50451f05194cd86041545edf56150aeff84494375e2c1478847c9cb3c1d4189ef852a249d1e45d8e68c3a134156990989dc3a9c6b","ssdeep":"1536:jSgzM2E4db7olU4og97EpiRvyNVZQP4Due7Yoq3:Yub7olVp977yNVRukYoq3","tlshash":"da5317deb2d173b018f361e1a05f420d63bb95949c88285eb925ebf42e70947907bf39","size":62888,"data":"","first_seen":"2026-09-25T07:27:18.758345Z","last_seen":"2026-09-29T06:39:42.836079Z","times_seen":612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1f2dfa567dcf95833eddf7aec167fec7","sha1":"91f6e575920d2d503d8597338fd1637d580f4243","sha256":"68dbf73d03d3a5107edad3b05676eee240e68c280296e52b6986873c54cef3cb","sha512":"6822fb14678ae06fde746c45e7bdc4401b749edd6c1cbad627b9f2c971aa705ba48dcc6ac4768fb5ae478f3ed4f1a8e90763fe92f587bb847cc6400816433551","ssdeep":"","tlshash":"c71000000000000000000000000c00000000300000000000f000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T12:23:48Z","last_seen":"2026-09-29T06:39:42.93148Z","times_seen":4230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"9dc52560bcaab00691f3d54f85199cb4","sha1":"75dc667f72f489b7683f39064bd2a7d4c4326c9e","sha256":"b99362e1684a7512c6809553c97c764faad09ad15cff848131088f625a374055","sha512":"4bd01848d809df3793ccbe70b9e8caa20be72f7e062733bdbb9ade71248e02b8ab1438afea6f4c5c30a10ba67001b4d0eb209207e942770b52b5bde38271ed06","ssdeep":"","tlshash":"dba002b877c65010829f26a42de71c84b5ad44a05015d9ea5824d5d55e6dc35412ed6c","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.824259Z","times_seen":1333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e6949c200c9f7913697ff9b3a69146b7","sha1":"0a2467ed413731bf0e3c1ebbff41349dbdfad59c","sha256":"1bf08a767ed623dbe03a89f246e3e97527e0fc64e0428baca3f5490afc76e0de","sha512":"51f104a59f9c346b119894d706a4298cac7a8cfab3668740af03a749acaa401477a4b5ec1d1890a2400712fdd372a64eb388dbfbcdd93c0faff63631f285affe","ssdeep":"","tlshash":"ca80000b2e28a0200083302808cf020c80a200a8082a2c0800a000c00c3802a800a82e","size":26,"data":"","first_seen":"2026-09-25T07:27:18.953667Z","last_seen":"2026-09-29T06:39:42.925506Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-30T04:36:25.341769Z","times_seen":351270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cb3f593eee6bf3a8ca2a807055521c5c","sha1":"9552773249da4fe207e8bf1ff0fb9fd855f56a8c","sha256":"cbedd52b0e0c37eb938275525b0805fac444d16cc820b9efc66f43caed324ab6","sha512":"49ab199b0960d927e5c39d7784b1637667196153e4c9aaea18123290fd4733d012e0f9b75d85abd22c27864283eb1f47cc5fa508b26198078e7dc56f1f990240","ssdeep":"","tlshash":"c71000000000000000000000c000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-26T07:05:42Z","last_seen":"2026-09-29T06:39:43.05336Z","times_seen":3044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"68006d1e7178bdaba3ee50c5867f88f4","sha1":"7b60c03e9e59f624296208cc63cbc37fc8979e5d","sha256":"39fb23a66c0e5e29bd8d93a528479614182e454fb31e1267cab82375006f5513","sha512":"13bf97ebe41eecb9d540b38fcb3f09a9592c9e104616129c958e8b4fe788751d9b6f5c52a5c26f503030c28bd3f6f9748c9afe1019b3f3464ffa59b7e8458271","ssdeep":"","tlshash":"0bc02bfd51517394d95fdce0b0ae4d8576290d91300d1c0503accb101f7089c4031917","size":134,"data":"","first_seen":"2026-09-25T07:27:18.82966Z","last_seen":"2026-09-29T06:39:43.038923Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"c1421189c529b47d0591f1ac5a31f9c2","sha1":"4df5f4a0ad98e373433dfe66a76e3757d2019266","sha256":"9b3f326aad3107f5b287dfa61a64ee39dbe6c3586b40a01d8733e9e45cab0cf6","sha512":"4139ef4fe0e04864dea508aa90dc310771e782b1cd8a7af25305e0471ebbed2758c233c7696a93af9c06bc0ef853c7f0d30901eb6bfba873568e64f2c2fe1486","ssdeep":"","tlshash":"e6a002bc76c25110829f117c1da72884996d44611414a9ea5914e8e56d7ea36c72ecec","size":72,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.938131Z","times_seen":1367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bf8b739d8f406deae03cb20e9b217788","sha1":"19993383b4cfb780705a3ff6a3a29ab81a99ecd5","sha256":"b9e17af97339ef3042e2a9f332fe91077e2a8efadfd4cb3090559ab74fc7ac64","sha512":"4006d64b42ff8a84c7e8843f408961c36388ef73579bf4ab48a16410a8a67b133edd3db1d2fd5cd9e96b7f0c043bcc8920bcfa5be2b8dee3f998695bcc6fefcb","ssdeep":"","tlshash":"58900258354160e86597a091111e895956665a422c0462545551c5812e500ea709351c","size":51,"data":"","first_seen":"2026-09-25T07:27:18.861235Z","last_seen":"2026-09-29T06:39:43.028548Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"297ae5b7e56994c927c68953285c6492","sha1":"c74303038e1e417c3507a4f0c76711c2addc36b4","sha256":"06c5e9dafc9c918a560047bb43247f0daeea9f3d47da2ab6ab16e850ba502e21","sha512":"a8ab16464ee5b9e4c01f09eb83157932b5f24b6d7d0bc925da954299190f21e9a146e98504a0bbb72579f16d1e0cbaf3f9890a8050ade8b68f424ca28cef44f5","ssdeep":"","tlshash":"e6a022b830c28000828f00a00ce30888b0ec00200080caea0828c0802c2c838023cc3c","size":63,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-09-29T05:05:43.94901Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"6f1d8ae58cf1149f75e38e1e35be8e8b","sha1":"17b0b083b783f7029ed4913ed8a8fb6d09946ec2","sha256":"98f7d5ea481e5f06faf8be71cbf2ebfc8d22df6faad66df8ffe22596a44161ed","sha512":"fcaaef0dcb7a5fc169a50f7f9dc6387e1d1d4213242858e4dc2a099e869e3d7cb00f45dcdfb511ba813b910d3d05c4c7f4eca5be79a5a53686e00889b0a645d3","ssdeep":"","tlshash":"249002a923ca5400475726a415571c84a06444b05445da85545196d25d655225126b6c","size":52,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.823316Z","times_seen":1342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22c902b1a2f3f509a860003110d6965d","sha1":"0a0570bc89d9a6541b40aab46f6ca7735726fc07","sha256":"0421e12700fe6f05d16a7880d09a5c34dd89adff9dfb922be85d0f0fd0a13fb9","sha512":"2641a58ace1e732935c4789e86797ff3640d014c9648154a08bf7e5091efc012131f0820582fd098de5a036ada12c357f6fc1d5a350d6e95252247068516b975","ssdeep":"","tlshash":"16d02b96a83c11435c0431a6741bc01a0675d08dddc61908042594ab7a227b7acbcd15","size":260,"data":"","first_seen":"2026-09-25T07:27:18.894284Z","last_seen":"2026-09-29T06:39:42.954295Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"218a9ea64fa57e7196a99f65da930c31","sha1":"0e4d04a432f4204fdda62fb7832b424a648f961a","sha256":"7fd297d01ea8eb3ddaff1eeeb811bf789737382a073fc556554f230b9f01fd11","sha512":"1ed302e71d32bea2bdd4cf1c7da4c11849c991dca05d30443a5b0665ecb8abb74fc565254773e54f23e3d96d8571fd68ad15c84e8b8c23bcf60f6ad870bd7162","ssdeep":"","tlshash":"c5a022b83cc20000a2cf00283ce308c0802c02200000acf80a00c0c00cbc830030cc2e","size":67,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.960951Z","times_seen":516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","size":1,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-09-30T04:36:25.391696Z","times_seen":148782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4aae7fd3c815b1cfa3660cb3227a214c","sha1":"4531c0c13ac8462f9dd8f0dff0e13b1c3e150bcd","sha256":"cca00c516ba05df351915a75df4db57659d685c5af3622cedbba3c6b626af2a9","sha512":"c2f67d5e011e7ad703ab55ea89f91fff91b4245f5294cb73ded819757eb158102fd038f24b175c1f6eae717100cd63d9e9529cc90d124cd90a26ab4a1f650d4e","ssdeep":"","tlshash":"4d50003c30003000c0c0003000000000303c000cc0c000c0003c03c0c00f0c00000000","size":11,"data":"","first_seen":"2026-02-18T03:26:52.257023Z","last_seen":"2026-09-30T04:36:25.474524Z","times_seen":94512,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00a08776c6e0a4c084621f949126663e","sha1":"049cd75519cb1dfe1d0fb48cb946e7028d424c3b","sha256":"e912297e6c0c305816fe4ee1b0969d60d9a608ad83adbe9729cc3370c294aa69","sha512":"72ec725881ad1ce0306afa12e927ca797f6cab5e7ce5583ec6840fb4d8558b57262e72a6529775c5a9fcd853e3e12a5a4d61fba2362fa0ad7705d4be616ab0a2","ssdeep":"","tlshash":"2951059a88b6d0c6c4836c29cfaf92793244403bac11dce5bedcd912ffb051ab64d9d4","size":2989,"data":"","first_seen":"2026-09-29T05:03:56.263042Z","last_seen":"2026-09-29T05:07:17.494311Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"ece7936b29ded3a84e3e16fab6974d12","sha1":"9414a87e48e508a51ae8a3e02e67cd4fba776480","sha256":"010b3717109c6b06c079cba6fdd598931c10c034b23d8062fb7a257850196810","sha512":"85beb4f37ce74fd4b226ec155923394cbec8048b2d094a70c0b6a0388010ce700fd2a101dcd38ccf7eafc15d0d2f705d8880f234e6757920e18df0f9cd65dd0d","ssdeep":"","tlshash":"ec9002b521e66420476616a424571c849128587024489d455441e5925d655635215d6c","size":52,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.981777Z","times_seen":1496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"b37fb993934fb9957c6e3dae92c177c5","sha1":"11a50edc8e83dab4cc52476922e91b5d54dca8d4","sha256":"d9fff616c1f8d375a5f9b94dccdde265fbf1311eaec553b6e9eafef13292a20d","sha512":"659b7c9c9ea737fd1c84309275c711c500ffbf9b4fb76d13ea774a997a509308925cb487db25f00e2978bdbb82ac9cfb37eb8b14ff16747e02959801f3588e98","ssdeep":"","tlshash":"43a022f038c220008aaf20200ce30cc0c03c8022000088ef3b00c0ba2c2c83a00aee3c","size":72,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.790559Z","times_seen":1346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"72c75d27e1d2118719ed67f985f2343b","sha1":"e006a00ee43dc6683a35a17fb7fefce84a0bb7b8","sha256":"f1f27f5e5c4016e7c97cdd7e6c72670ecacf75b889627c3fa52440e404b00352","sha512":"e622f222409bdce7927525534545ad3d95ecbd6936f47eacfc2ed7b73757d0bbcc5f553c72402b30f5eda404eadfa04cf80d9a85dca8e86b50c9bbc1663cb170","ssdeep":"","tlshash":"59a002b47ec3540082df52a43dab1884997e446050159ee99814d4955dadd36421dd7d","size":65,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.849885Z","times_seen":534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"333aa20fb0523c45b4281652dba6693f","sha1":"251ab919a8f582675489d99c9cc5820e6f08d249","sha256":"3dadffa0c6c59ec7013584429ac2476cafb01d502a41869184feff9a752db17c","sha512":"421712f375a28e0728477a8c8bcdecb508db5111e6db6d23e214f4352f1ea046b38737b01b8c186cc7b76f7044bb4f5462af4e2988fa6ca6f1b3a3e7f54c977a","ssdeep":"","tlshash":"c6c02bc0b340110883c1981321320614c5ec1c84c110c04083edec3e7a333044d34f03","size":130,"data":"","first_seen":"2026-09-25T07:27:18.95532Z","last_seen":"2026-09-29T06:39:42.999678Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d2da370b61b58106d56f0a2bfd087e08","sha1":"a13ba82c6203bed433fa28d85a2069e969279391","sha256":"ff1ab4c1ef17fe7face3378244b0d14d642fc6cbd355289e26e5c324c2b02198","sha512":"e26f3e5607478a8d05e27445d727f2e5e2a452f155272d416d0db345e4a27fac6f6576e24f9739c5dcf910edfef0fb127914104d95b80081fe94229be14df43c","ssdeep":"","tlshash":"e9c09b4bb21313c791ddd2c1e91f1f5e55d240ca9d541769c7954413c51129148fdd15","size":130,"data":"","first_seen":"2026-09-25T07:27:18.812959Z","last_seen":"2026-09-29T06:39:42.929843Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-09-30T04:36:25.490234Z","times_seen":185461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"04b3870fa5c2671f19224830e69001fc","sha1":"d87452bfc3c8dc0871f12c5ee9fb229487a9b083","sha256":"d6df249c983e91dd7a1a847d8c8c8265923823dee9dd562c1b8c69e3a9264f16","sha512":"a9399abc73872eef47003f77a96be187fa0f3d9e0b507fafe88e9a91c95b4ff9f4b5707bb0d08bdde9a60ac95fc16fa062168d3ec7227dddcbf05a4664960324","ssdeep":"","tlshash":"8aa002b4b5c26040869f51741cb718c4a56e4d64102499e95914d8a55d7d835815dd6c","size":62,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-09-29T05:05:43.968199Z","times_seen":1342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"84c5af313a18d84195bcd1321d6dea98","sha1":"3746f45afa0f0c06fd6bde51f8112911f5b55906","sha256":"3b34a9c0c9933c5b7eaf50ff6043c3e0e87a657e6e3046031680c6b39466fb9f","sha512":"361ab3e019266a9b704d421ed24d6d0b57b4fcd5ee92d6df68c0227ec0adf79f7c5f1d00d580309c459f1e905a59ce9354bbf16eb295f19de32c4d7c7a050990","ssdeep":"","tlshash":"3da022b830c28000828f00200ce308c8a8ec082000808ae80828c8a80c2c838023ccbc","size":63,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-09-29T05:05:43.973285Z","times_seen":582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"ddfffae4fe2a16aa35f5293be9cc80c5","sha1":"c9c5a492409ec7ef646567eb68c88a074a83de2c","sha256":"21ddd146ad4a1100a10fca3ffdc3a1a6d1bbc61eba8aa165db8f1c59c697f808","sha512":"59a7258c0385e39824249e07d63934eb2105fceb7f202029a2fa03efa2d18291b9783f2bd017adad9bae934e16286fc40da8c71ecd1ec6ad93c63f1e8d37335f","ssdeep":"","tlshash":"83a022b830c20008b38f00b80cb30880802e08a08000caee8c38f0f02e2c83c822fc2c","size":76,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.873021Z","times_seen":1061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6c3cc502a5c69c81177697a3ccd76484","sha1":"ac145d4a0bce6997d0f3688a218990f1d1719ed8","sha256":"182234dc9ce857e058396b9e02ca3de52055c3b255cf6981ba5eb06e7a0367e1","sha512":"faa472573408f75dc196c42b53898ef1b8a698a956a4944c4286e25ec07e2a20e9fb1de7f7357bcb1bc87124da3d970b23c6f4fad4ef029da9d8091d8646f78d","ssdeep":"","tlshash":"ffd023b5250d74e59fc673f3966449d50785d203fba11400210544413e5223f51a2467","size":210,"data":"","first_seen":"2026-09-25T07:27:18.866939Z","last_seen":"2026-09-29T06:39:42.966839Z","times_seen":597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9bfa443c116314ec8e469459313cd7ee","sha1":"a12ded21c4f8ff2edd74a137b8af1ad9ad85f9fc","sha256":"4926192e90d1ba546d706bf3d9c09236eb2c62960c97f914501868381c0eca44","sha512":"2e68836a53dc9b35b36883e172e5b14cdd0ff122e21bd3435e9b14442e1ff2d72193cfd6974c8ff8af76c1652e9f9367b3b1cf5604dfcee38b97ea4f2d737821","ssdeep":"","tlshash":"ad0120a5700851d03545959810af11bd14f1ee812c780c5d4bbec5b7e932b69a423fce","size":754,"data":"","first_seen":"2026-09-25T07:27:18.905141Z","last_seen":"2026-09-29T06:39:42.942529Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c31c0d00b3b383d5c438206a6435f700","sha1":"7b866646dbb187454ff36abee7f51bd909fbb86e","sha256":"f8888fa16cf704c2813b9559edf4b88273296ee775641031ef71d79cbd6d08b9","sha512":"abb1adbbc55490bdcdebca2d68e29a014bcc938aaee71870782f48e55d2280bd37587066312125432b18d2734bb760e8a57483b34c64ab6f80d6dc64f318d7a8","ssdeep":"","tlshash":"9e70000aae0aa00000a230200a8f000cc022802000020000000000800c3000e802fc0c","size":22,"data":"","first_seen":"2026-09-25T07:27:18.86599Z","last_seen":"2026-09-29T06:39:42.89471Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5237c13c933e294ec26fd014fb796179","sha1":"40c44ab7253440ef10e8da339a48bb7d4b41b70c","sha256":"3fe76cb0fb13da364614e7ad8aa25d3337c85ddad896e81bf592f2c8c339350a","sha512":"b2c5e643312dd47f60e1ea2a8eb0270e152adf5cf5566c9fb3bd17bf645ddb64d754a78a573ecb7e3082b9acdcaed55f193c52ef2b9b5e92e2caca447bdb0d23","ssdeep":"","tlshash":"19a011802a2222a088232008e883b00c8aaa2a82888c0808002a00002a20823a80ec0a","size":70,"data":"","first_seen":"2026-09-25T07:27:18.828706Z","last_seen":"2026-09-29T06:39:43.015623Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ed1b006f623f50d5c99075987d49a271","sha1":"fe77370ab9fff6b35677345d501cdb5d9db6b1bf","sha256":"94c818c6f3bc5199903c2b300dda3a38ad329d7e4b20d073ee3390ba296c2a63","sha512":"a385a1bd94efd8d41a7b4248d4ffd6c580aab2fad25ce6df45d81980f17e51910dbc1707ab175a5a97862df280f91d1a270f3f43e17a2731075f4b8c914a3d03","ssdeep":"","tlshash":"69b01204c4707444b410a1d72063c044e0d7510326930c54f004c8901fd1e2b941bc4b","size":95,"data":"","first_seen":"2026-09-25T07:27:18.859169Z","last_seen":"2026-09-29T06:39:43.013868Z","times_seen":582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"a90fae74f0d26d66b66ebf06a5bc17db","sha1":"124d90ff5d452afa6e0ec0cc421a3efe603701e3","sha256":"fa5c103fb392b022cf05e808d52e89ac0fa69f99c08f5471e4c7e3296d712f7c","sha512":"0394b77db862269333ab88bd3d9eb52d09093f30ab4bb685169f2c5fa185ecdc455b2b8c383a5f77d3465c931d43b44418c0ec6b2b5539297b1067d69ceb1658","ssdeep":"","tlshash":"099022b02cc220008bc200a020a328c0b02800202800cc00000088820cb00222200a2c","size":55,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.844475Z","times_seen":517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e5d356e4ce690161fc92437cc5aead04","sha1":"a6a8517f6b99a25a68d3e2149e323ae3035c87f7","sha256":"7a32a79b59dfb577ed174c0a3fd95a466dc663de764e7ef2fbdc902b132bd01c","sha512":"08183051a13fcfb37f808586fcd58825da8d01e8c41fa102d4d95eafc8648c70f3a81f30fabee08459269e7fa3b65f48a0cd648a7af763c408a572cb2d3882fc","ssdeep":"","tlshash":"0d8000f280a0aa0c222880000020220b0c022280322030ae202ea0c233a3c80808003b","size":26,"data":"","first_seen":"2026-09-29T05:03:56.370973Z","last_seen":"2026-09-29T05:03:56.370973Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"db93f1c35b844334e2b266951618b4fe","sha1":"874146faa9d8f03ef95deab92baaa0f4ccde9497","sha256":"e4f95d56d90df35eca464869e14c2ff08c7c7cc86dc10a5c3083fc811a3c0952","sha512":"30016b0105f2150d5c0bf803eb7e4fc05e9c16f32a100ac308140d381ce2c8e3df28cf69a54eac971b82d6448306901f714cc630dede718a82d85f06cc20257f","ssdeep":"","tlshash":"c71000000000000c000000000000000300000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T12:10:41Z","last_seen":"2026-09-29T06:39:42.938581Z","times_seen":1599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c2284743fe8a6178f117d584e3091d6e","sha1":"93d24c83d4a695e2a463bf66ea18a3e2147e9148","sha256":"8cf878073f71bf93dd67f56aab913b4a584f5ea15c56ea7030f96b9f26f23a4b","sha512":"7aa1cd340f7dc20e2259c9ef76fc6dd184133548d47ee9cf1c300e8ded20ae3e298748b874bb735dc639bb025be759096e3edfedd1c0396a094748bfe2734cf1","ssdeep":"","tlshash":"28c02bcf30c6da74817d001203179dc48107349f114b808743d040e400174908c1dcd7","size":138,"data":"","first_seen":"2026-02-18T11:53:38.7823Z","last_seen":"2026-09-30T04:36:25.473917Z","times_seen":89654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c62bc4fd3c4e105cb3fb62fb748d59c","sha1":"f6e2d1e74e35ec4c4740ba02e890b98bda11417f","sha256":"9f4a6a370cd350425d8ac08047e7646116468672e99765ca198e6d463ee5286d","sha512":"5cb125ce0b7fdde81c6df58f6e27943a130f0d9e2a366d94ea8ed926da635dfe2b2c5778a14ed99bb35c7b2a48dcd12090cbac18370611d1c0438e1c2621efb4","ssdeep":"","tlshash":"6cd0129b738060e3d797fea709580020c1ef0b8402d2753d42d5d51070fe9ce83461e3","size":203,"data":"","first_seen":"2023-06-16T07:31:00Z","last_seen":"2026-09-30T04:36:25.468723Z","times_seen":199822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"c34cfc18ecab1e47bde22bb17e123ba0","sha1":"8cf8745277c573de32a6dbb34b0a15880f2c6d94","sha256":"1a2513f6e14081b9c5438ac95cbb1bf8bbe7d4e43c84e15ac2afaa18dbda868f","sha512":"4bc398694d0640e705bdeb9f06f5e7540e34a0c77518d6ced65eca6fe43404689769a97e66750383873b02989062b1380278337a836fe19d5c334092c89ee35c","ssdeep":"","tlshash":"16a022b03cc3000082cf00202ca308c0802c002020008ce88802c0a00cacc32020cc2c","size":66,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.8369Z","times_seen":867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dfad8a6d7669d486fd543e950d12a78f","sha1":"0dc5cc18232e8a350f00deb18e1597ffc9fa41ec","sha256":"4fa79922bc3e22f0da1a44ae59335b3bee39e4f5c14b0aca0f7f297a5afbbcdd","sha512":"95754657b3db9764e542cb895d45fced994b9059a530e08fb189887b5670e1cd46b11b1fbca95c61c05d8ad1d222e8ee42fe2f172f07ffe949bc7cff470094d2","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000300000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T09:11:48Z","last_seen":"2026-09-29T06:39:42.932214Z","times_seen":1185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"47b8d7f086a27168f6b3107639db1c0d","sha1":"4f28a57d6264098ab81b1b1fbe67898209d6450d","sha256":"0324df6e8a4c02cb8148933b7079f984e8191a486b962b3101141ea1a3f9b745","sha512":"37eb3b0dbe9dcdd1cc18bd149b63e0f6cf19a0227007dbfd75ffecef9f09b446751e3f50a0485ac046f487a176af625b6507e07f300ceb81da16db41ff7f91b5","ssdeep":"","tlshash":"b8a022f032c30000828f00a00ce308c0802c08a020088ee80808c8e00c2c830800ec2c","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.914281Z","times_seen":1267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"83da6876ed63742f3c71c31603753a8e","sha1":"cf23f92d012808e369beae1d300cc2906e5f0e58","sha256":"889ad399a20b3cfdd2274c0b91f88939d5c977ec2dc0564b55667b30d21aff59","sha512":"fb1d938411a676e6b738eaa1f51c8b1579c672498bc6beaae70a21ce062e28fde906df67f4d4fbb588f952721e47f9afb5128fdc0650e5a8eb22f4d48d589f45","ssdeep":"","tlshash":"0f9002a761c65500479221a414572c849025446154449945684096a66c65122515797c","size":48,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.791297Z","times_seen":1175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8c534dd33e59116e53dc9cb484b19b4d","sha1":"64337a2a5bd813ddd451a536c0afa22c8302f71d","sha256":"b2383d01dc128e1a4f5f8980463f7b9bb3ded0312409d0d0111444e8c90c849b","sha512":"9dd604e5b60361432e7ca4d35facb6fe63adb65285e1d68080c4cdef773b3d30f49e008151efc4feb7a952e0b7a8e9adb8405d835bb2fe4cd72b997ebe80c1db","ssdeep":"","tlshash":"9bd02b8035133fc6fece1585f0835778322580343d518285013fecb115e05c6c4c3e88","size":280,"data":"","first_seen":"2026-09-25T07:27:18.818262Z","last_seen":"2026-09-29T06:39:43.001004Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"70bb1d48a7121e1776174528b450f07a","sha1":"14286615f6ec82e07f30ec0affba3c3b4909d978","sha256":"631660059d14da12f72d31f2050c64f5138837ed241d6e24553d9b2ecf7ad6f4","sha512":"98d2ae53e7363de7a12284f1d26aed5effe13de15c5c37c47f7f9bc9237f0f2d6008248710e9f0f86ef63d6fed54277aaab70cf8d45866ee85f6df6dc61a113e","ssdeep":"","tlshash":"7301204b70e813e26cf126c4a0dfee1c27262141de786a4f9157e23402503571e22c46","size":798,"data":"","first_seen":"2026-09-25T07:27:18.881158Z","last_seen":"2026-09-29T06:39:42.949479Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ee99fb5918d6a1734fe15b545a072d8c","sha1":"16b3d77801fa3e954aab193c2fe75e0946600e92","sha256":"a9036499d5b8513a89629feb1ef8b79a2212be5c7e8a2f4625beb7ed5f513f05","sha512":"18fc12f791ef63a31facb896b59911bfa777453d23e43e7b47405567b56d9a3034fcf1cd26f6edb011fc75c9f6046408dff6c561e8bcae539b91aee096582154","ssdeep":"","tlshash":"3fb012a86d123e0c621f08db35abc01c519f8034c7024c19ba13c048ebe2ace5cb6deb","size":105,"data":"","first_seen":"2026-09-25T07:27:18.822166Z","last_seen":"2026-09-29T06:39:43.041809Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","size":4,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-09-30T04:36:25.332894Z","times_seen":296412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"36488a9d90a65669994498f902c4dffc","sha1":"96172e51fb1c93251746557a52ee85f62cf632c6","sha256":"160cd4582d0fbac35c04fb158973b41dac552b756463dbaf40ddbc052ff28022","sha512":"a5aba4c517abccdd59eb2d609051ebb34a8622624ad0b53cea338fc7b83feba10794d545a58468fe86d4e096ee7cb0445c1dcc68b5b812859af5ffc0efa14b52","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000003000000000000000000000000000","size":2,"data":"","first_seen":"2023-05-30T20:23:36Z","last_seen":"2026-09-29T06:39:43.052715Z","times_seen":812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0c5719927e28837f9df86102950b3450","sha1":"e89278d6a1decac44f5bbe39bde8bf1cef87e46c","sha256":"286571a74cc4c00bbfc8c3e2af198d8e36087195477df4975f9fff08c537745e","sha512":"21b5f04f0c8ef1961a7d39ad5bd11300a493d1380f0b5b5ba3b7a1ccad1be1bb034f11670c8701ded28fca91f74c77b38b91f88a47504b3e65009a2bd61be7b2","ssdeep":"","tlshash":"ccd012f0240491ee53b7634826ab9dc638d270e456c91b958530a0d544706dddad9343","size":196,"data":"","first_seen":"2026-09-25T07:27:18.899733Z","last_seen":"2026-09-29T06:39:42.936371Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1f84b5a0fe495a5b99c7e53738221c20","sha1":"62ce70e3f76c1f60986d5fb83ff65bd6fadfef0a","sha256":"15334b6f501e93bfed1a12e6124a4a34236519d5e578e4c39e0aabdf39183ab2","sha512":"e3d4cdf55b928efe7239fe272b9433f025bdc35b7cf44b65ac2e39c08557de2893f787f3481739957b9968f67664cfad1ec6c4aedaf4032bcf1bf0f6abc420f9","ssdeep":"","tlshash":"82d02390b4c5dc5212b1034e91e708cd635230416541440cf31d972c561d68451e4ec9","size":213,"data":"","first_seen":"2026-09-25T07:27:18.907502Z","last_seen":"2026-09-29T06:39:43.026162Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0b983d4aa8f0053d193356365c5b962c","sha1":"38de0805281de7caaa07df5a03100b57417c5250","sha256":"bc46236d33110bae43fc494dcd8be331af2b8ec91499b4355dfa2a9a03ecab41","sha512":"743dfe7091289f31250c61e240f7c3371d56ded4158ebb8a639391996b2da1dd82275d7669921edc0bc59a6211e66319d20d0e9a979b96b4f4fa2fe16623b429","ssdeep":"","tlshash":"8280000afc08a2a380e330b2202f822c0e2a002ac800280c008000aa3eb032a3003c3c","size":33,"data":"","first_seen":"2026-09-25T07:27:18.830636Z","last_seen":"2026-09-29T06:39:43.02209Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/livestamp.min.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d6370e267b3aaf2045e69eef7ed17a","sha1":"34a700591d34f795a479516b7f72fb2ead5fec5b","sha256":"f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02","sha512":"0b744879a24259e2b930b3d24ab56cb0306f4b06a6656ed483281ce2bdb582e56a91eae8cbdc110436ae810b2c010fa6dc766c31656f12281c34cafb8ee19728","ssdeep":"","tlshash":"7621aaacf284b58519c3a460513f66197791b3bd9d4c8490aa6293d0cf7aa4b713be38","size":1414,"data":"","first_seen":"2023-03-07T01:18:22Z","last_seen":"2026-09-29T19:08:13.575988Z","times_seen":640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6e085f8efeb385f8a82cb225610c0b2","sha1":"00be4ddec5231f2ad893e1be8a93fb9b11e1d201","sha256":"2942e0a3d15570353e1554300aed513dd494aa825dea0edc04ff0bfc8b35cec2","sha512":"cc51729b6fbca1d4ea8fd373ce952876e9bfff04fe937aca5323ce92e5611419493ad73e1664af75bcbe8f7288deacb7e1baa9d1af863ac57a432a79e942095a","ssdeep":"","tlshash":"21e0ab3d2c7040506b9200f880a6f2283d0730204044e803949688292cf0fcaad029c8","size":416,"data":"","first_seen":"2026-09-29T04:49:30.718145Z","last_seen":"2026-09-29T05:03:56.381783Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"75a92bf0b7262ea95aeb905148bbdc0e","sha1":"878ef66813fe4ea27c7a26d305cfe8725b60719a","sha256":"551f05790db1227ade331411938bf15f6eef4de8329649c7d4f40f38c493ccc6","sha512":"648224477ebffcb9bc340f550d5a4f0e49dac46b2a95833fbd4faa0aec48d78d566322363bb443a58de62a9917a0779f2054f51074809815c7401e24558b1bac","ssdeep":"","tlshash":"5fc09247f5b0164b049ae20ae387488c72bc8509463a0e292791a0ca3eb3f9d070e1a8","size":132,"data":"","first_seen":"2023-03-13T22:54:55Z","last_seen":"2026-09-29T17:02:12.399355Z","times_seen":1692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae19eda7b8a3c382ef0cbb4dab66dbe7","sha1":"08a2ccd4d283b5cb8e4cad7cdebe652eab7011ad","sha256":"5fb907693f004e6dee3278dbc62da5cd0c647adf014ead0249d6824690392ee9","sha512":"e6f5a9d5c6250124110bcb6e8459ae247b3819f9bbc0234682f98184b6699ad19f7f70a8c9869233c2e7c5472edc793b5c9799cafc73fd7534e38251866bd41d","ssdeep":"","tlshash":"3fe0e54ff8da32952233765d2fb78410ad1c184fb80ee84c3c8e89c05f3b0085052b58","size":436,"data":"","first_seen":"2026-06-07T23:19:36.539755Z","last_seen":"2026-09-29T05:05:43.780014Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"37f9c9379ec5b2d988ffb7a8840c0c40","sha1":"3f3117fa900665ba921645e93f3378ae8fdae12d","sha256":"37e0805c11e4c17da0a7d80a962bead696f765f99a67caf5b7f2263b0f806018","sha512":"e40f6be04b5ef0c9884638f782118d7b759428a326e79862eb0570b40d79bcdf316e3293e595f76693e0461f9dc4443bfcea40b4104386679619a6c999f5cdcb","ssdeep":"","tlshash":"afe0221335a21182b4af20149fab238005930217c0d7ca033c2f29902f132b37883aaa","size":415,"data":"","first_seen":"2026-06-07T23:19:36.540828Z","last_seen":"2026-09-29T05:05:43.781008Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a3acb6271696ead399119aa7b3726cb","sha1":"697c47ffa02387b3b3cd077e2c785c98557f974d","sha256":"482ec07ba544f66554eace3962ec08472ec7f37d92dfe97562229b8a6a066082","sha512":"929472dd5780606a239300558397b148c2203714595f7cbdad2899e70874adcf5bdd89c73ff389a9d5fd58e95d30b0206ffdc1b55855e1fea3b4429b4e5d6d28","ssdeep":"","tlshash":"59e04f0bd5ae5cc351333c0d420f9421246235a7d4c6d908be0fe3f44fb40548a03a48","size":366,"data":"","first_seen":"2026-06-07T23:19:36.542056Z","last_seen":"2026-09-29T05:05:43.781662Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cfe37808580051874914a41ade1a1ae1","sha1":"a9969c6d2bd2e252d9fb690a4c0fbf90c36336a0","sha256":"814075d9be43efaa2d438ef946b587f5a9400f1aa8258d60c7e54c63f583c18e","sha512":"d334cf7f636be3e078f6bb37a7baae8081a61389b280c23e38553cc269ba9bf8ba57b8fef8d3fb6a54bd8c11c6b357297ca03e48e05f569ef9f45215c44e67ee","ssdeep":"","tlshash":"1af08b599f9eb730d6a9404c893be5a872ed11ae1a1acc42cca9cd1c44b0ece4a4f959","size":572,"data":"","first_seen":"2026-06-07T12:51:34.825733Z","last_seen":"2026-09-29T19:08:13.614963Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdb9212ce10a6aad7a2e54e8bb98a51d","sha1":"85c1e953534788513de70d6a4117e11a5a756ed6","sha256":"b2e123c9723c044c310e03448e953b7449b4472e348d22d5547f151c01259ae8","sha512":"51bb0346c5a0d8d026bd6512f62e4d4b0b176d70f31cf3438af050a576f7ff64bfccfeb176403e00576747e77f9307d07e94a943701bf85e692b7a239fbcda44","ssdeep":"","tlshash":"f001f9475413d17fedbf5124cd9de7029b963d211a1e1765f4dd14488ba013b61d88f0","size":657,"data":"","first_seen":"2026-06-07T12:51:34.827712Z","last_seen":"2026-09-29T19:08:13.615552Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.DV8fl7iVyDY.2021.O/am=AAAAQA/d=1/excm=base,root/br=1/rs=AGKMywFYdK_D4h67Sn156xHeEA5iSDBdgg/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f10c726644a66041c5c521d93891cf72","sha1":"5eef531dc77643aa1c41360c7022b220016af12a","sha256":"ea8609ba7d9dfc90d2763753278c34bb04c16401b7d474880b51164f8d897e8f","sha512":"0078505a845666a1c38e8c8bf495fdddba0f886206e787e50272c785d119565a25e330702f3f7ba6c5410f59312d7120ef7a7dd05158058a00cacb1d8b0df925","ssdeep":"6144:ZBCF8lyu7DCwRfU3VzsbZEIefVdzQOVYIRopwqBN/oVrNNxJnCw0P4qxnAXsGWKO:nN5U3mbZEvNdGOJnCwPqxAXsGWkw/t","tlshash":"01a45dd973a270239296f5a4902f0107b27ba896f44c8c7cf6d8d9c52db494946bff38","size":468709,"data":"","first_seen":"2026-09-28T17:18:53.837575Z","last_seen":"2026-09-29T17:31:08.730055Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ddf7d06802b1027653742e48f17b92ff","sha1":"0b3f7c360551345f482ffb9e937420f0ec629aae","sha256":"8babb558aebb0fde05ae86714740ad4fb1882ab6006e62887d7b2be8a06e2152","sha512":"942bfd2dad882954e446420fdcd65566aa7638a9bbc1473ca8efde8ea5579695f19f52a509cb7c83cd6d4f3071211168bddf83f0a1906ff4a752fe246ba54a16","ssdeep":"","tlshash":"b2d02b943f826bdae0cd2584f44707181a8380162d91228c76332568175c6c943c3b08","size":278,"data":"","first_seen":"2026-09-25T07:27:18.948574Z","last_seen":"2026-09-29T06:39:42.978875Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9283cca7411f549ea24a99366043d413","sha1":"8b80d45a613ad1cbe3d3f9a0372419dee9a9b70e","sha256":"246785ffda42d3b8eb55528b8233d33b53f98d6427134b7dbdaa88913a5e45e4","sha512":"a266080f98d0248bc92e778f40cd2ff9a228117bf72b2806837770432343548839469305dd17d51dc049387662622711a882c7dfa35c07941247f08b00ea0ee4","ssdeep":"","tlshash":"19e07d803f826b9af1cd6788e04363080a53c122bd227b1c7e33a5a9276c68607c3788","size":325,"data":"","first_seen":"2026-09-25T07:27:18.825461Z","last_seen":"2026-09-29T06:39:42.947658Z","times_seen":587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ff3c8475092f0847f81462f0d442bac3","sha1":"f40cac95da43149f1ec6aa12be1d8ac4569c5ed4","sha256":"55a8858418ae42c6e5792dcb5074ee5dba2aebada33b58f5061fe8d95174241b","sha512":"0cd07f0a5be902278341270e159f6ad9da13075eb4423501526bb7882ba2a6fc547e2b3aee4f3321ac5e44d68a6cc71fd5e775da8dbf1bb9d013fd520fe33b85","ssdeep":"","tlshash":"45c012222b95216481d9122bf6278925bdf35b50dd84386bc31850e994b4b51069adc0","size":184,"data":"","first_seen":"2026-09-25T07:27:18.914652Z","last_seen":"2026-09-29T06:39:42.873914Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2db95e8e1a9267b7a1188556b2013b33","sha1":"07c342be6e560e7f43842e2e21b774e61d85f047","sha256":"acac86c0e609ca906f632b0e2dacccb2b77d22b0621f20ebece1a4835b93f6f0","sha512":"f10127742e07a7705735572f823574b89aaf1cbe071935cb9e75e5cfeb817700cb484d1100a10ad5c32b59c3d6565211108aa9ef0611d7ec830c1b66f60e614d","ssdeep":"","tlshash":"c700000003000000c00000300000000000000000000000000000000000000000000300","size":1,"data":"","first_seen":"2023-03-07T01:15:12Z","last_seen":"2026-09-29T06:39:42.918372Z","times_seen":61040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ce7962dbf82ab0d300debc039ecf3fe2","sha1":"3c97d901280acd9cc4a307daa3e6e02c8863d896","sha256":"c9433ae5a3e3caf95132be1735681a1a676db5b36a93ad6ee9e6947dcf3b972c","sha512":"da7342a44b375d77c08e1f40e6763187fb87d0aa4815d33860010c0dea2097e10f1b0c85056f4e8bb187f960f289762c625eb16788635d50b543d274a305a221","ssdeep":"","tlshash":"15b012535816549404e426602882410009c7042807110538630889902774de27418453","size":87,"data":"","first_seen":"2026-09-25T07:27:18.938352Z","last_seen":"2026-09-29T06:39:42.96035Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"42937d0648362caae00c54316adbf083","sha1":"f187cebb22cb0444557b525de5b371e58e7199ef","sha256":"169b5b823c62b64ca7e5f8456a13c8d5d06f4ece522a58bc2b8a784dcf3609b0","sha512":"febf7c719f86810f6c21ba311f2b750b03f8a5fc93aa15c26831fefab8a61b3e816558e2dd39ba0cd65dcd5c8d1c5871e722a59335221a8eed16992286b04684","ssdeep":"","tlshash":"c7100000000000000000000000c3000000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-03-07T23:04:47Z","last_seen":"2026-09-29T06:39:42.940355Z","times_seen":2708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b640f7845a4341a89d25c0ca0f9b26f4","sha1":"5b98b63751f6e77fe954f5b95388d615eb263003","sha256":"3fdecbfeaacc1474406d975d54141cd22c1be7ed72ccf31bf23f5304e2b50164","sha512":"ec2592241ccbd9a0e93c49ad07121af8cb3acb2a4d8fc25e4f4599a1052d1fb51c9ef8538ac383c52e1205f9b6a17525703f2c4d4bd0d69fc090c04f93943066","ssdeep":"","tlshash":"2dd02b38e11c422b26970b4197c2183b05004642dd011d7b2eae28eb7044c9a9a1481a","size":256,"data":"","first_seen":"2025-03-17T23:26:20.961709Z","last_seen":"2026-09-30T04:36:25.430734Z","times_seen":176559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"c716548f4cf58020b7ca072f317809bf","sha1":"c6891eefb270f65c3c832039b78d38ee730ba9c7","sha256":"5f04472b22946425a53b1cef9843e6bff7b3ed4dba183115d0d987dc050d5a7e","sha512":"7cc5312ac8769e218275f152c927773626b157285d8074305581c32a590c79289949ab5cd8adb2477fa4b28d3e9cff31844f1beca40022897b128c69641a76e5","ssdeep":"","tlshash":"2ca012b070c18000424f13292a52084084bc0410101854940c0880555b5a831012ae5c","size":81,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.931507Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"f3df91b988608a9a30a53243147a5e01","sha1":"eac829e03cb5b4f1af7e42e2bf4dad341b53a5fd","sha256":"7c8765164f3c236a04f052fc41511cf443aaf7e8cbe21b9eb9bc9832e8a66093","sha512":"ffb937adfd512344bb1e89278d681fefcbbb935c9367460ca2d1cc91d0bc48f530f9c953ffee1b5ead7363e504e5e12b72e506dc483ba39b674e47c924fd0a22","ssdeep":"","tlshash":"53a002f922c65510575212b815572884942444611444a9855540e9b25c7a23797269ec","size":60,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.978582Z","times_seen":1374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"6265a7adbd89850d71286f295f25e134","sha1":"1dd92052fa66e72856ff6306d818bded1583ea52","sha256":"01a5284a9deed06fd150c9032fda9002f90f51252ecff0416a56f12f1e3a1338","sha512":"0396a0cc36a1ec548a5e1e6e602eb89c1286cd7d074b6336960f6a26090f048c3ff50641d7f26d62ee1494767922655d910c2c3b0b1a9b754e5089aa4e4546f9","ssdeep":"","tlshash":"faa002b575c29008829f11652cb718889d6d447012179de95814d4959d6d935413dc7c","size":62,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.868876Z","times_seen":1224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doubleclick.net/instream/ad_status.js","fqdn":"static.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.178.38","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fa71744db23d0f8df9cce6719defcb7","sha1":"e4be9b7136697942a036f97cf26ebaf703ad2067","sha256":"eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9","sha512":"17fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f","ssdeep":"","tlshash":"9e8000823a082223e8a28088830ae2202c82080002220808c028000020808c380088e2","size":29,"data":"","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-09-29T05:03:56.270099Z","times_seen":5232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e0536cde0fc9661a250cba0a0ec00818","sha1":"2afbd49c2fa13962734f110f4b144ccab8e6610f","sha256":"38f450743c74756c9b176b7b6cc611bc547f42180be73e77c16f5347ee8470d5","sha512":"27d2ea6917b37c174f8b94bb5f57ea4a02dd093a3227a16c8f00c06fd6b13fa4478f24b8cc205da88d98f808f3d3431a0076910b87a9b2f8b6d08e5ecdfd1c00","ssdeep":"","tlshash":"b7a022a0bc8cba0c00a0a8f0380f30cc00e82f820203ccae300a000803f2823fc03803","size":77,"data":"","first_seen":"2026-09-25T07:27:18.947726Z","last_seen":"2026-09-29T06:39:42.980481Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dce0044ad8376ca93e0c1f5c9ff9d5b8","sha1":"14bb8a4a3dd0fa90f7469595036174d0c1f560c1","sha256":"9f7bc946667888df72fe65d4c30c163867833f7da2a48b26602a550256ba8711","sha512":"58d03fd5f036bd7743c299c300231ade9975b08165dd43c69ab5473d6dea885f9dd4f292df66e88fa6665e5c3136498095c2f48edaa6df3f874d2c4dae464b25","ssdeep":"","tlshash":"b9b012536815549404e826702886410009d7041807120538720c49502774ce27418452","size":87,"data":"","first_seen":"2026-09-25T07:27:18.942255Z","last_seen":"2026-09-29T06:39:42.945136Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"65631a9ba80188171463fbb2a63400be","sha1":"af5cd08559b9b4a3b8c51319acd3bc48239eb273","sha256":"1bfb0a3830699fe5c06e95a2dc3a25fd60757cb133a30ea16294200bf7a14e18","sha512":"9993781668be23a1d064d3879ab0eda2173c60b7dd379484b3bac751c46a3d319c4da438a51693004cf0fafd9fdcde753c5942a8efa9f2dcf0a74c27bfa03685","ssdeep":"","tlshash":"5f9002b572c66401875211a5549b5894a0688460184899457544a6935c7542a652596c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.872363Z","times_seen":1245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"fc08cdffca98fa14a411ca0a20e62780","sha1":"97421cbee06a57464c1c59967951fcbbd8d40c3a","sha256":"bb5d92d942025fef292dbe5e2f90e3995b1792ed9cbaa94b31734fc85f52d558","sha512":"5a0b16615f4592320c26dd97b7f37033ec145a50f1d3545e05e29160c483cb9acaeda78593cb90cbbef816db2b11f73f4f87e3bf93b1081b05ffa0040c86ede8","ssdeep":"","tlshash":"bba022b83cc2a000c2cf00202cbb28c0a02e00202000cce88800c8800cac838020cc2c","size":67,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.845222Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3a3ea00cfc35332cedf6e5e9a32e94da","sha1":"e0184adedf913b076626646d3f52c3b49c39ad6d","sha256":"a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58","sha512":"99c426cc0bf3c465f9c4a49e5a6c3d09a43c4f95631776b354be0727f3f65567ae9357c5d55015e2cfbb27ead98e1bb54f2a0f26042ad267a279f0e3a8c5b2e9","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000003000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-29T06:39:43.042446Z","times_seen":52693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4fcc7c50f0e6af35cb8b65fda58182b9","sha1":"4d06328ddbbcace532f0a9deb70acf6b88058abf","sha256":"bc3120958df60848665950144b1f7407f1849d7658272eaba560ff451f78308f","sha512":"9feb62fda224f858319dc4a94ccd757e853cf6258d6d82161b96dd65468f71940808f26de3ba69458e56f88335c90a08c97158af5c3d6bb04ec0353d72e007da","ssdeep":"","tlshash":"01f0e7e196002164836170ed1cf67d58627bdc597510ec04e616d1528934f5d5089d3b","size":601,"data":"","first_seen":"2026-09-25T07:27:18.925485Z","last_seen":"2026-09-29T06:39:43.018324Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/bootstrap.min.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6895e8cd60b62646ce12426015888f58","sha1":"de908c9ed184d74eb525fa7a30449b67fc3a1c14","sha256":"eb795deda8983fa5310627c9584cf3f3b95d272567113500059018b3941cb267","sha512":"f43dfd388488b509a66879608c35d7c1155f93dcec33ca875082f59f35552740d65e9a344a044d7ec534f0278a6bb6f0ed81047f73dcf615f7dcd76e0a482009","ssdeep":"768:tVYe0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:tVc+U2QK+GM4ZIwwoqq","tlshash":"f343b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","size":55775,"data":"","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-09-29T19:08:13.528231Z","times_seen":4732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"601d3a60456c67c202f873986fe96a4d","sha1":"24e2a9cf72538e68f9ee70e69ba260bbb17fb028","sha256":"02b7280cae64aca6acc011dc7ecf048fff672c55d2a9611d06fef3cee78b0ff1","sha512":"22cd30a33a07631c0e07fceae7faf50576e8660c72944cb8bc8539e0ce624317eb07e6eed4dfccce1968fef5c07368c5517479cd217d388de5c4bfdb7d6e129b","ssdeep":"","tlshash":"23a022b0b0c3000082cf02302cab08c0802c00208020ccf80800c0802cacc32020cc2e","size":65,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.982479Z","times_seen":1476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"dcb9a369a33bac02eda756d479dc9900","sha1":"33ce5d30d8db14838c677476ed1153d5e93d3af7","sha256":"2bdfd3d78675666844ea4836d11ef2572ded36d162ef22a05f72ec931ed6778c","sha512":"8bdf76bcf17b4306e5b58de1918540e2f1720d83731621100ba982e59eddca2b5401922ef91c55eb4fa8240e37e6faba461ea7761c6bfe010a5df288e5ed488b","ssdeep":"","tlshash":"a9a022b038c30000828f00a00ce30880e02c00200000cefa0808c0c00c2c830800ec2c","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.807378Z","times_seen":1274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"34cf08bd31357ba3d476a0b487f76f1b","sha1":"cae1e0c549b63cd0157e2cca1f4819e4ba01d9c7","sha256":"d3099870f89e70abf6710eb67b2ee3f7378a2c9aab22022cdddb183bfda86e97","sha512":"9277c93e5bfa99ce85543a03c3e2b10a188cb1d6a70c83707f63e10f06a60bc5c50b44cd2c3782b190b9e3949a356e70e292d739f6d54d604e0571c2cb49af3f","ssdeep":"","tlshash":"92a002b575d2500482df11641ca759c5957d44601014d9e99814d4e55e6d835421ec6c","size":61,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.878937Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"09e8b8ef2b02ba79594baea8ce0ccd6c","sha1":"6444fe45f649007e3e49796e74659e74406d5883","sha256":"5d31c37235bcbfe40c67c68ff19e8fa1d0e501d7b6ff0c795313d72e0b61ba63","sha512":"ebca98478bb543bc07d5d78d2a3ce7641761eba34ad7abf9657eb9d87561a2e438ed5df1fb8382a2be0ce11c3e08884cdfb64b1c7873f086d838a00a64389796","ssdeep":"","tlshash":"9e01204b70e813e26cf126c4a0dfee1c27262141de786a4f9157e23402503571e22c46","size":796,"data":"","first_seen":"2026-09-25T07:27:18.909956Z","last_seen":"2026-09-29T06:39:43.021051Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9f502ac14e14405587d798139e860b5f","sha1":"b267cfc679f39f2d95f9d3fa41bca0eafb931aa6","sha256":"39d2483e41bf71db160191d9a148b4bc26c0739e732727e37be0f18bdc8cabca","sha512":"f5bc3d4834c9c4ed165d49476795fb1170fdc577b58fe4b21dfc67cfb4f6eebf045a3812ef48a2f15758e790ce7e111cf9dbd9ffcc3438288c7340e6eeb7661f","ssdeep":"","tlshash":"b1c022ccbb3e600d9121f90031f84e46cb4125ac4407ede3a70128b4448180aca1f406","size":194,"data":"","first_seen":"2024-08-23T10:18:17Z","last_seen":"2026-09-30T04:36:25.36951Z","times_seen":185987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"a7a51ff3fa8a29204c4d6f1686a1c22b","sha1":"d7608a8be17f92d72c171e6f38269dbf8c1e66ba","sha256":"21d2e086a89a2016fb290f67c6a5cb3bb70088e30a74a1f304a4829f52114c22","sha512":"b548be0874214fa3594d056d58da019370c7fc0ed95153006fa09821d75de1d9e5a4f1faaafbd40f5eae936f19b2692259c588d555659f840e0f678600ac701d","ssdeep":"","tlshash":"f49002a9b1c69440475651b4186719c4a0254864145599455540d5925c7d4229155e6c","size":50,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-09-29T05:05:43.835287Z","times_seen":1341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"c8e619dfe4897537d5928090e3eef1e8","sha1":"e5eaf81982427555a29c0b39303dba0d4f034fe4","sha256":"92c40f0e254e242a63e528e55805daff7d6452cd2e5e4b287af39bb80ac86f37","sha512":"41a803c588cd6e8eb60604f36f64b9ad296d7716782a6423e521a7252c3cb593ea4b99bfadb497567207df88b56b668e8cb00c13aa0d45c3a59999e928341f83","ssdeep":"","tlshash":"2d9002a661c65400475211a414675886902444602844da45544095e25d65422521696c","size":49,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.975905Z","times_seen":631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fe6bd2848be0b5c53d5070b69a8f1e8a","sha1":"f5e88636bce1701c46a3d2c3cbd74de10912e572","sha256":"e650e4875e28d2440a5849b6e0c8a39137c9df2087092378b60e1b6a184e7de3","sha512":"eed51c75bdd9826e3397846eeba499603bb3bf037d7d91f53de189bd040161abe3c32367ae0d0d6313f21a673f06073b275b334db8c79ad35a341e3ee4c809a6","ssdeep":"","tlshash":"66b012536915549404e426602882410005c704180751063ca20849502774ce37418452","size":87,"data":"","first_seen":"2026-09-25T07:27:18.890251Z","last_seen":"2026-09-29T06:39:42.934895Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"c46f95bd1ab9bf89746108cdd87d66c9","sha1":"de2affdc75440e298768ba0b2a23778a596bd963","sha256":"2eed8da773f8f48aa85bcce28a3d357486a64abab736fac54a2ac32e1cc710f5","sha512":"0175a732bdb8edb3845dbcdb1a2b4a73adaff993c2071d6e44b1b982e1e96c9dce5aea04e4d720f35e9845fbd2b7fc2730fed447b91bce18b5482e18dfa9fa5e","ssdeep":"","tlshash":"fda002e92ac65650475212a465573885a07484711888e9955840d9b65e7e02691269ac","size":58,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.917726Z","times_seen":1383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"9c180274b38bab326a9aa0aec6f805b5","sha1":"3ac187849cbb83f9e835a7f237e124e5905897ae","sha256":"02a97ebd114d6cd1a59b4a751cbd751199a497b17135e6b63630d902c590f6be","sha512":"372519ca1a7efaf27144abe853b222d5ee5e856a0d4fe7ad11d66d9b05f34859a631d0b7e61ce9fbe2c26366a258cd8e5415a4d4a9777194bcd32dd4f40bf3b8","ssdeep":"","tlshash":"6e9002a661c65808475222a414575c849024447418449a45584095925c654226115a6c","size":49,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.904076Z","times_seen":1204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e1671797c52e15f763380b45e841ec32","sha1":"58e6b3a414a1e090dfc6029add0f3555ccba127f","sha256":"3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea","sha512":"87c568e037a5fa50b1bc911e8ee19a77c4dd3c22bce9932f86fdd8a216afe1681c89737fada6859e91047eece711ec16da62d6ccb9fd0de2c51f132347350d8c","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000c0000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-09-29T07:50:42.770042Z","times_seen":66359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ae41a6d38b78679b4675941ff0c0c92d","sha1":"622622d945d980980dbd8829dbe7e779306d7173","sha256":"a61555e7cf631236a3a2befa0d7048a735a5e732f4ed997cfe9eeb477ac2b823","sha512":"ff9580860f50dd236f95bbc065e84b119ddcbb8416dd9699ee0f0d6dc88c989a73c6a348671d1e6e64b019e1fe2df238ff932fe660843c0e2c2e15888b9775ea","ssdeep":"","tlshash":"c710000000000000000000000000000300000000000000000000000000000000000030","size":2,"data":"","first_seen":"2023-04-25T20:42:43Z","last_seen":"2026-09-29T06:39:43.050703Z","times_seen":1333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"67ef42108652117f94834f8552e763d0","sha1":"f215e89f0007253d252e2c4a6c721e1fccebe6d1","sha256":"bd950312dddc8d85b369c233f05760a104d0e270cd945f272dea1e6f67e13f0f","sha512":"40d544644d780fd7720cf0c592662a03cfcec5dfec0d2e9c554ba338620338e6abc6bc0567a1db1fe46a399fe106c2361f035fcf0fb1d8d668393ed734d33e36","ssdeep":"","tlshash":"4bc0228c3a30280040f88b22a4af4eac71bdb0864604230c00b07a300ca201188e49e5","size":185,"data":"","first_seen":"2026-09-25T07:27:18.872087Z","last_seen":"2026-09-29T06:39:43.0513Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"40af5dd5ec3f3c92c469876ecc3eaef3","sha1":"84b3b9023fc664c0df0936d0cbbbfd7e9e998ad5","sha256":"b97a305725fb3c2a78921d7490c99430a1aa8ec0651a4725ede41f8f7d86ce55","sha512":"c95ac2b2418d94eff4a44dbe8768c9a19f6b74309ff285a9f73426456a1c62f91007957d355dc5bbdad396efd4038a96488359e5b72beaed37a86b613f7ff2be","ssdeep":"","tlshash":"4ba002b4b5c26040829f51b45cb75884b56e4d611024d9ea6914e4955d7d835815dc6c","size":62,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-09-29T05:05:43.922421Z","times_seen":1343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"b6701e8ade2624ff9e3b19f2995b4c13","sha1":"b2ff6e69ac79cb2b2cea3069c75a4e4a54a2af8c","sha256":"b6594e0be17f8980e5e3e4d2c6a80e450390eb815df9bfe77534728151ebb47e","sha512":"6cf2e3b2b5cdf5f2e437244f15fed2578b3648ad5907983f033368929631dc74c189aeccc6ae8b7f75fbc599e8898f75618e09d246ca5ed5f199442e20964533","ssdeep":"","tlshash":"48a022fc32c22c2083ef20200ceb28c0ec2c00300028a8f8a800c8a8cc3e830802ecfc","size":73,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.965281Z","times_seen":1405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"24d3c0b3d9ae37cee478753d3a8ec384","sha1":"237fd03da6752cc4024ab80963ce25bab3be27a7","sha256":"3f1e0fc26b50554dac1bcb4ad7d600f1f842f6e241a41c85f598fb19553d9a3f","sha512":"29994344bf8c205fac4458f2deeb4f674b58c87d78f1b07f1a3bc2894a9124d2f4b97a1aa46d1cfc70291133434d1958cba03b7444642d31c359129316184e3d","ssdeep":"","tlshash":"2f9022e822c20000038200a800032888c02008200000b8000000c0b28c3c0228022aac","size":56,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.953338Z","times_seen":1363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"94938198be92619a49cd3eb45dd652b1","sha1":"923f8c99906392f64074ba78d31dd21b6ae9f018","sha256":"d04c61e0e1954955b8f2fe74e1c8f86c4c8a809085a6defbd1fd3a7a6c2f3bc5","sha512":"b74b693e106317ded18d693b26646200079ec43ef3175f6e3b6ad97a9b32609d221cb3293d2c1fd0dcca4a87b96f67841edb035e2b69b4d1efc07e787b15e4a2","ssdeep":"","tlshash":"88700008bc282a0202023aac00ab0088022280820c200c802080008c883800b000380a","size":25,"data":"","first_seen":"2026-09-25T07:27:18.932696Z","last_seen":"2026-09-29T06:39:42.907292Z","times_seen":589,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d48a24ae9672ee573050e4d3aeeebe4d","sha1":"8f8c4d27852980a1ec5a8b1aba30769001314ec8","sha256":"53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255","sha512":"02dd385ce15083c89617859325e29ce885ae235c8c5be416828066dcb5db78e69229802d87aaf759224e2656ab4c23bf1740ae1d357cfdb57ebf78ab77488921","ssdeep":"","tlshash":"43800020202088288888200b20308b8abaa0a228a83a2000a08c8e2cb822e80a038820","size":29,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-30T04:36:25.452071Z","times_seen":198778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-29T06:05:19.109891Z","times_seen":9682,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"ba0daf25202bca06f94af7da9a1f12d6","sha1":"015b76c0cd73c232fc2cdae161505b8a85b653ab","sha256":"2fe05dfce343ff79e08b1327869c3810f452f2e0f463aac0c83588fa3e9c76f4","sha512":"55a01dfa1c8a6ca38738b032ccc296af4c236373b4b6ddb0301a430174129385466536ae42c86f9c910d47f5ca2aba2a6a59a1307610cc7ad43d22cb57e7e117","ssdeep":"","tlshash":"5f9002a621d65500579211b4155b18849024446028449a49644195925c694329235a6c","size":50,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.829457Z","times_seen":1317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"43ca6baddc6ebf2b1142d7a000ff099e","sha1":"b8b4ca5bd94a1684616c4376e458bcb1781fb99e","sha256":"36075c7b78b048e3f06b003eb35a3465e8b3c49deb25739876ae3ced3adfa297","sha512":"37c1db3602eda6f95ad49fcab4f8eca1cfee9e2b2aedda090f6c25e3ae77b407c0b391f513e60fea92337976f005075e624b4d8f570b97ffc9d860ac8d247c0e","ssdeep":"","tlshash":"71e07d903f826b9af1cd6788e04363080a53c122bd227b1c7e33a5a9276c68607c3788","size":327,"data":"","first_seen":"2026-09-25T07:27:18.936213Z","last_seen":"2026-09-29T06:39:42.91459Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"d8bcf14df70f441f678f9deef2090673","sha1":"4409996af1d40ad8f702d67dda1f4e20ef8e0aba","sha256":"f10a4c7f9d5894a49bee6d9f74138e614ca77df2199c71c5493efd8ae729c772","sha512":"bd1b6fba89e82768b453684cd8befa49a2bd53ef032e610841fcc7cccc6fdaf038519e16822101c1a8134bd3ac4a6ded590b30930f3dc6e8bd4e9d48b451b0ab","ssdeep":"","tlshash":"fba002b475d25010d29f11642da75884966d44601014a9f96818d4e95d6d835417dc6d","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.974689Z","times_seen":1450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"1ae2638fe717dc1a9721c2516d6cc8f8","sha1":"da474776ace698e8eeadff08461b33750dd8703b","sha256":"1625c3753219abc041367797b87805459044bee4a7714afd7cb75b5773d03b1e","sha512":"1c29b333c88989708394cf468d5cb8921c6effc2fbdc60fe4e1d4e5b7c10a14c70fc2b5148fce4c1ff2aa869c84187c39a1d4641ebe2b4b90df3c09cdfa4a3a4","ssdeep":"","tlshash":"669002a525d75825475611a4149729849028846014459f555445d5d25c690329155d6c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.989882Z","times_seen":1285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b2680da03cbda079067d2a7f8bf8d613","sha1":"d68a9da5a64676900d5440feccadfc85c7a969f1","sha256":"18effb700fabecf594454282e64814712382a489e57068cc846c71978dcef392","sha512":"77fe29b7fb0a3518962c736e30fbac753da1ebcf834a59b22b23cb55370a80c5a9bfe75a60ac3ec8fc52f2a01a89b41f6d92e8f27950c5734fc626a81ceb06ca","ssdeep":"","tlshash":"91c02bc0b340110883c1981321320614c5ec1c88c110c14083edec7e7a333044d34f13","size":132,"data":"","first_seen":"2026-09-25T07:27:18.856289Z","last_seen":"2026-09-29T06:39:42.976288Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5d43ef05e57cdeab7895fe8a3b6ee014","sha1":"19671e4e00cc9b5f8f6a6167c1ea8800ee539aeb","sha256":"b7893a0611b91f5fe47ce3889faf375eddbda47517f4e44c8c338eef6d2c41e5","sha512":"535346ebfe272e052e64dfa1845da29662c36e84fa5a946e52dcbb2cf4d894851a102180fb1c04603f86ec920d89fdfb62c1ddc14ea81ba4cec7d4723ad5598e","ssdeep":"","tlshash":"8db092a4a20c0b5812813919ad2b06e950e42704f82994884ac0ae2548e0a41568ead8","size":116,"data":"","first_seen":"2024-07-19T01:23:55Z","last_seen":"2026-09-30T04:36:25.343624Z","times_seen":201212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"e95011b6691877ba4351cbbbe30854e3","sha1":"aab00b734135458a8a6d1338cd82434ef3ac4e21","sha256":"5fc6eddb606a607734a27e7394d136b0ee28b0b30b72e11273947de31f7118c5","sha512":"5b471a8798c385b39a1c2c00896d5293da959c22eca99e77afe16ea54f525ef6b029d1ad72fec50554c1ede893cb870bb74327e3b46eb2e1f5f15fd90a9a9eab","ssdeep":"","tlshash":"e2a022b030e3200082af02202ca308c0822c003000008ce80800e0800e2cc32020cc2c","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.971773Z","times_seen":1498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.DV8fl7iVyDY.2021.O/ck=ytembeds.base.St3vnT6AlO0.L.F4.O/am=AAAAQA/d=1/exm=base,r78Drb,root/excm=base,root/ed=1/br=1/rs=AGKMywG5hJcxmKrm2sS9LxKJK0WcM0SPAg/m=cwx9N","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3ea56ded08b65e0286bd6bd148bb966","sha1":"e1b60209d236afc312bd6bc489795d4d8975c435","sha256":"b16abc07f264a77e72de0e21684ad2f360a28579df97145fa326e5d5d52241f5","sha512":"c1518873e81b4bcaf2fb4081d178db960ba6f1042dae435fa0774cdffd5c05ba697c8100f5c776ad57b78cb9f45309baaea8d95b9e182dccd7e938f6d0b2913e","ssdeep":"768:kkhQDzwd4ZQiA/xI165U+8H16KMA/q4g5jqwkx4eTDZvFZr527eZuj2oDBvIdQ9f:kkhQFZQiUW3x8ui+vvqwc96et","tlshash":"2e430ab431b27570d367b638c2bb9880b56ea413d3946871e4078b5e0dfe8d07662f6e","size":58597,"data":"","first_seen":"2026-09-28T17:18:53.843843Z","last_seen":"2026-09-29T17:31:08.631396Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"be8dde07a965336854641f1fd83937c0","sha1":"22c4aa8122abc2e88d8a18c5da08718356be9994","sha256":"dff90ff670bbd615233549419396f4a2421737dcb895a0896a671e4e6a732a59","sha512":"71549171f78fd959345e8b27774ae5c5e1145d9bbd0100db06f8e5960c64f20d3b2c9b0bcb2f7da094a152b7212b92fc3caa53c503f0a18899cb7b5fc7920d0e","ssdeep":"","tlshash":"e90120a5700851d03545959810af11bd14f1ae812c780c5d4bbec5b7e932b69a423fce","size":752,"data":"","first_seen":"2026-09-25T07:27:18.893164Z","last_seen":"2026-09-29T06:39:42.939823Z","times_seen":587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"509da45f31dd243bf39eaa167364b707","sha1":"ec6e82443a18990f49c4bd840036a868477aee7c","sha256":"16cbdf8c370966f2a21ec12325dc836edb4635095c8d9bf09a1dc4f20c4ce870","sha512":"e7d6a45759db0170379f325bf4bd84d31ec896671c91271812b14dea979bdc6535af6ed19661a140a97b8f8bf4204bbfb6e25aef7190b5d94e799dd20867c88c","ssdeep":"","tlshash":"90700008ae08a00000a230200a0f000cc822202000020003000000800c3200ab02e80e","size":22,"data":"","first_seen":"2026-09-25T07:27:18.962883Z","last_seen":"2026-09-29T06:39:42.9079Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"91169ddddfb838cbb8e36350ba1d8e33","sha1":"fbc2f8afa8a3542058456dc839af06d84f7421d3","sha256":"64ae838cf70a387d3195141922e911d4a4da65b213da43a880d46cb0bfef1b9c","sha512":"ebedffc3a63db2637e7812eb0f1ddf401f9e1cda9090450db4d378ede88f781299b71a15de7c174633b37c3f1d02317cba62c8f922ba343e56c61584dac5fb1d","ssdeep":"","tlshash":"9dd023c0b942502c05f1c93a11332405c8349c70c91c87738215f60da4323050f67782","size":208,"data":"","first_seen":"2026-09-25T07:27:18.83507Z","last_seen":"2026-09-29T06:39:43.012839Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24857f6c19dc470e6d746078c5c36fe5","sha1":"54a31508e91df8cea92b227d1a51caa59541d0e2","sha256":"2295898b32625bc95871441717f1e45e369ff7d4f45c175fdd3be3d67d6681b2","sha512":"56ddd4afdf69650c205c45ccda1f12e0568b68f859012f6542641112cc74fb20a29b6bdaa9aecfeab78d261a97bc807c8a9d1ecadd65bf2c78dc5fa557635119","ssdeep":"","tlshash":"18c02b5020546de84e2d0cc1a00440082069194087434848e90a405873e087846053ef","size":136,"data":"","first_seen":"2026-09-25T07:27:18.885199Z","last_seen":"2026-09-29T06:39:43.05204Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"e3055a143912b6911fc03c02cf5719d4","sha1":"4b01dd1698e5df4de8e4e5e8764502bf8702602e","sha256":"12ad6157baffaf39a7be4682b0c93f21ed36ec699a1159362d26b4008209b585","sha512":"a557ef75f200b1f154e5e3a1460dba04bfde9527df888cee1e14c38cc4d09d52c81e2179df8c4544b79040baf14329fde76e44c29cf13395264937fb295cb8fc","ssdeep":"","tlshash":"aaa002b875c3540082af11a46cb75c8595ad4c70501999e95814d8959d6dc76451dcac","size":68,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-09-29T05:05:43.937447Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bf9f11656f0c84350ed7be0964c67399","sha1":"58d6ce8d4d37e011d9a91eda08456a2a3495ad11","sha256":"b975756db0a6bf3d882d4d45ef5562e8be2b6bf82be14a14d83999250ddfc727","sha512":"86de7f5acc27c5741ad0ebe557382003dc8719768752eb855d347059b6bbd0db8a465a1a32b563f03fed5ef74602feaa59304ae7d8ca2892d83fffe4457fb02d","ssdeep":"","tlshash":"8ff041b4fc3c417080a0ed35454332a09d81e196aa0a0d8ab075cffa9832423b0e14e7","size":585,"data":"","first_seen":"2026-09-25T07:27:18.864095Z","last_seen":"2026-09-29T06:39:43.049639Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e4137add2dfe45e078e7f076aec84df","sha1":"0cf81c47abad8b8dc52569f7edcc1b5b2d3511f9","sha256":"270826d41d0a807d41e14d413e764fd30dab7a7bcd1e478ea94b9e812671042b","sha512":"2d9549247908aa1e413297b102adb7814a3beea30f010e0d345a37e80644d5111be52be01aafc07f63be9de2c46c634f678757df8eb2dfe1f2a16d4c9fca09ef","ssdeep":"","tlshash":"c7100000000000000000c00000000000000000000000c0000c00000000000000000000","size":2,"data":"","first_seen":"2023-04-01T11:22:45Z","last_seen":"2026-09-29T06:39:42.91907Z","times_seen":2453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f8ed8caa7b637b2a3e9a94d5c767d053","sha1":"3c7ff087b4af1df8b2464610a75817e682349126","sha256":"0bc9e2262a2fbce64d7bb7c846b99904031e1f7a8496b571cd10e7685db261e3","sha512":"ca76ed62f028f0d07dc1e3e7e4df6119c3c5034f3f0c4b04e279bf38eb8921e9bf9f6f287aeb26c0ede7775cc65d628aa86092294c0f02195ffeba1166ef4bdd","ssdeep":"","tlshash":"e5f041b4fc3c417080a0ed35454332a09d81e196aa0a0d8ab075cffa9832423b0e14f7","size":587,"data":"","first_seen":"2026-09-25T07:27:18.892099Z","last_seen":"2026-09-29T06:39:42.944406Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"6f9984a7e2f2e03dc65bafd5fd5648e6","sha1":"f059d8fb0badf0996ce805421eff7c2ae23535ad","sha256":"f67c8d014ac734ab0d5d1961dd3d09b66063a1678e1a1a735c73ab2bba06631f","sha512":"06ba88cdca54d0dedb6db7879236bfcc2f8fc2f9442f72ce76991f9d466e2bb5881433c8d7b51b492f5354b1d77cb9b77001da8252aa17e38da63aea5a3b6db7","ssdeep":"","tlshash":"c89002ed22ca5400475726b415971d84906444601445e985645096d35d658225126a6c","size":52,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.949662Z","times_seen":1342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"422dee4553def98dcb52d7b187d0360f","sha1":"f4538ece203bca9b44dfba46d677e513464af3c8","sha256":"feede039a62cda888b00602ad51e4c237863fc9fda2b8256a1043654fc3b481a","sha512":"331aee6ffabbca36555f05bc61fe44bed68a98cdd599ad682763089239023d5f9f585af6281a14a0613018298974718276060698aa7e1514949210e11a095239","ssdeep":"","tlshash":"b0e0c6f207302c89b0e318e2cfcf8c8c586a08b88d860c3f02da835221aacfb0200809","size":344,"data":"","first_seen":"2026-09-25T07:27:18.84618Z","last_seen":"2026-09-29T06:39:42.921563Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2e9830aa32e9c3c22296566001b1d9f2","sha1":"75e12f40850fb8ad926896f5cd53f21dc94d0952","sha256":"b026490576469fe4866f3aaee09a8c540f1d8c5bcfe3ba9a409e0d5860fc83e8","sha512":"00847d730624ae414fe01824f73a81601e5def9c4ed0e7c395fae7d616fa60ba6029d6314d9694989e276cf198f0c0c15bc8deaf04848769fc1ca7ee1dc53454","ssdeep":"","tlshash":"9fc080d875485992716a715cf483f808335dc4e1227d1005ed6af25c03747ac1065f5e","size":167,"data":"","first_seen":"2026-09-25T07:27:18.836018Z","last_seen":"2026-09-29T06:39:43.019082Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a931635074a5017da74948b67e16c76f","sha1":"a6799582ad16a7c1ab8221c166268130df6691d2","sha256":"1fb437ac78114eda813a7c4d5771b6d3aa34908a5ca3b743d5eb5c79088cf82c","sha512":"7c96bb515bdba9ad60854b433d24e77982a321dd7ca71599fd8f79acee580802f56829a5dbb7f64932a51ad50d18a9438251a6ad8127ad2b2e332811033d2c7b","ssdeep":"","tlshash":"a5d023cc3941f262d06274b9041704dfd173384a1e1cdf4184154875667c5d9407f4c4","size":206,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-09-30T04:36:25.476906Z","times_seen":216580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"183e2e810aff9405ef12dea8191e3312","sha1":"77ad690ebaea050d02dd4151e0db9fd8c8927d30","sha256":"7a2021ff5afd4bedd3b30f48d0fe64da919272414695c6106634f82aa558f84f","sha512":"604e405bcfa5edb222ba4819a19c74535be1b459a26cbbb8c95c0485bd0b9088885b9a5c97d0be6673d327f5d9a70dd4c85fda7d406ae191dac57809e5538cea","ssdeep":"","tlshash":"63a022e220c238000b0220a008c30cc0803c8022080088cf3200a0b38c2803300aaf2c","size":60,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.975265Z","times_seen":1344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a0f044fe909b2b76b20115e2633f715b","sha1":"27723334540a403e684ba7472b5adc50df6698e9","sha256":"98bb75b8dfbd279cfbdba3befb7c507d34267ea2263a358d9de267b9cc17fd1f","sha512":"a0066bc886d5c220db5572f8ba194f8e5f7e485929ad4e266e8a9f119ffe91f092fb63d26a18b20a24d6242be38ed7770166add6214ba1212ffaa4a87e5c3afd","ssdeep":"","tlshash":"59a024415cf3340cd5141430300f014d000c7f34cd47cd03c011d44405700115407107","size":72,"data":"","first_seen":"2026-09-25T07:27:18.917823Z","last_seen":"2026-09-29T06:39:43.017502Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0c81873825e1012f52ce1c7c9aef9146","sha1":"8f862327f1e092a5766f31ccf10bbf6b8c421409","sha256":"8490f798b3a207af0064e4fc3ca072a9f4fe07ad0d7282d8fe81c72f874550c9","sha512":"0fece0654297be12fac191746cf3c893a3452884fd96c4ac5c3944a3a9e40a4423f0352533767f096bc828f33bad4a6cd9c7a3605830e109348348472a4ef2e1","ssdeep":"","tlshash":"d9700008ae08a80000a238200a0f000cc022002000020000080000a00c3200a802e82c","size":22,"data":"","first_seen":"2026-09-25T07:27:18.823365Z","last_seen":"2026-09-29T06:39:43.000337Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"09f2d25b96753df8c8d96c0a6baa0668","sha1":"c191899c1ab5feecf5dc65984d95316eb3559849","sha256":"e249d1ca5ae4eb2a1d751767ac074817cd2de9aa3f6a95d21983a090782ba055","sha512":"b8920e1b7255f1cc995c75e8d77243d0c5be9cd5d6add4990822e5628c8d43437f7acea435479eff022ecaa562324d8e1523bbb5bfc545d56ff3b71557053194","ssdeep":"","tlshash":"00e0c238ab44d8df9937a8e38809a8683dcecfd6ee0d142749200840922ba47734847c","size":297,"data":"","first_seen":"2026-09-25T07:27:18.912974Z","last_seen":"2026-09-29T06:39:42.951641Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/jquery.form.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","size":43811,"data":"","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-09-29T19:08:13.529896Z","times_seen":814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"71345c2d8b9fe09fb7a5f35c28d72b34","sha1":"d73039a4a8a2becdf973df5aafd9526c6da8b248","sha256":"89fb8e080feaa10ec0d2ff9789b9dc468790e9d545f82b8bd5bf09bc93f944e7","sha512":"f7dbc806dca2a35168c71a234b6b65c155d4dde3073d709b7b503c9d06fb0eb38443a56c022d3fc7d7ba13962ecae74f6186399b65a2479395205f58295a477f","ssdeep":"","tlshash":"f8700008af08a00800a230200a0f000cc02200a000020000000002800c3080a808e80c","size":22,"data":"","first_seen":"2026-09-25T07:27:18.957589Z","last_seen":"2026-09-29T06:39:43.049014Z","times_seen":587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4e1c2801999ae138978af34fdfb42b48","sha1":"6713a62638b6227462474d9b6772145e303f23de","sha256":"25efa1a3dcd738fd3bb65631ad5c6e7ede979c0d87b3445d81a9f1b6cd1970f8","sha512":"fdf8f6701c39a8f64b30c61043dcc160aa6feb29db4d4f9b9b49c34319c2ebae373fc4a0f32248fda281e57b195a206fbea94d3ff9ce18dd52c07f0dab516174","ssdeep":"","tlshash":"2de0c6f207312c89b0e318e2cfcf8c8c586a08b88d860c3f02da835231aacfb0200809","size":346,"data":"","first_seen":"2026-09-25T07:27:18.930533Z","last_seen":"2026-09-29T06:39:42.981241Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"eb203893f7b9c47da3516b9e08ea0f73","sha1":"7a0b91e444122b5e22c39cab0a137ed0842e2eaf","sha256":"640cf7dc5d1d9afce18443203ddfa9221f50e405b9d3b20255a223f4e9bd0283","sha512":"ff326f6478f437a33db624ce58a76d3e192d7346686d945bb489cb1258ad04d4920df735d09e7c6b5e36b8a43c7cc8d9de31a6d8a49e628acc30d23bf4a7b83f","ssdeep":"","tlshash":"def0e1dcca411258ea6b2a21bf439c4dbd72b064a244211041d509f30fe19fbfc5cf23","size":583,"data":"","first_seen":"2026-09-25T07:27:18.941178Z","last_seen":"2026-09-29T06:39:42.964527Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5e6b31071e17bc60215a462d18b06ca3","sha1":"6599203384961086c068b36fab5505457bfcadb8","sha256":"2b0bd97913aec94c261fbed94c3e055f5bc453e2fc67ad7df127d9c803107f55","sha512":"ca56008bba12393242da241c83046490f7f27b65ce62fa10e7470737d50456762c84f505a91ad2679989e1f48556cbc0d99d8c7f4a64d87f6a4006c236c9e340","ssdeep":"","tlshash":"e7b012185e2a2504490e01d414c7815c127721110f8b28002c43d08c73f09db6446d17","size":108,"data":"","first_seen":"2026-09-25T07:27:18.950587Z","last_seen":"2026-09-29T06:39:43.040231Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d526f1c8ef6c1e4e980e2b8471352d23","sha1":"ecefd9afc594eb6420e5f27c391b0ed6fa8a3d8b","sha256":"5b19c951ebe8f742e862b55f328711a6095b19a859e0e610f24b2e8257637f62","sha512":"b5e4c41141d81a7cbc90e10d6b7ac481c898e995740c8eda2c3f3d6056f9785010b644d1b487d6c42872d6243aa72933690a88eaa830aef68b4903a9549bf538","ssdeep":"","tlshash":"c710000000000000000000000000000000000000300000000000030000000000000000","size":2,"data":"","first_seen":"2023-03-07T16:32:05Z","last_seen":"2026-09-29T06:39:42.941481Z","times_seen":1724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9d0137bffa0f20d5e8e9f54f2c84cf0a","sha1":"39edf6d919f82b9692a2edfecc78427a82567c42","sha256":"269d4d56785ffc82f3ed05d8ee3b84fc18d7474663ddd06c6fd285165190bb19","sha512":"0b8b09f13f8fbeb3546c08a3501f4060ba8e5f762722ffb1a53be6d0e297abaf9719d48d50cac29940e403702c66627187396b8961aee26586ac934568af2ea9","ssdeep":"","tlshash":"db50000000300000c30000000c30f00003000030c00000000300c0cc0c000300000000","size":10,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-09-30T04:36:25.328839Z","times_seen":193703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"4a60e3001a666fafa4f35dd077f3a60b","sha1":"5858814301ccab2ddb98e4525190f405dc64db4d","sha256":"abe82312563cfd513f2b04eb5a73320353517044bb069a85f5b41c48772332aa","sha512":"77cc23ca729304f14d6e8862384fc4dad358bd2c71e53b2b7f331fa460544f4f6c3f22ff0fae962cc42c7ae889bb2b7ee3c6a992aee7afcbe70ada52134cd077","ssdeep":"","tlshash":"469002aa21d65500579211b4145b1984902444601844994d644095925c69432e235a6c","size":50,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.860756Z","times_seen":1314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"8816b30ac0cfa706905b552a7488a1d1","sha1":"82e6028b4b99e9a0e3a393d70173471cc4b02530","sha256":"37efea63959f823eb7a65b730a7d113f2fc0246c5459cb00b1ffb6f0f8df9667","sha512":"ebc0bea7e6a3d6ae5cd959e7261f676e85def1b238d17d1848cee8f979a2e2d5e4d8b783cd853c9be293107decf05932a638f96c9da8054a8def1470cee39c1c","ssdeep":"","tlshash":"13a002b876c2a000c2df11655caf58d495ad8460101899e9b918e5965d6d83d552dc6c","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.797709Z","times_seen":1239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2fc80abcd0f7b6c768a7f64a09f79c5f","sha1":"d4c4f917629a5ef6bb6d784945250f3f56511f12","sha256":"70262b78756127c53a51cc5da24d81a98a61dcba9fef44aec35bd5e7ab453b69","sha512":"8fa8978c8063224dcd7566655a048dfbef5a5de7d13d0ab1cc04306863379f0c9c68575fb5d69ee36f1885bd7c260b2916373d703674bec5791970d0ed30c807","ssdeep":"","tlshash":"59d023c0b942502c05f1c93a11332405c8349c70c91c87778215f60db4323050f67792","size":210,"data":"","first_seen":"2026-09-25T07:27:18.860219Z","last_seen":"2026-09-29T06:39:42.945882Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"80fcd632dc2558177aaf6f8f5cd57678","sha1":"8e166fbfcc1cef48e4018c0b1b754abf75392caa","sha256":"493ea0b6bae201e248b0572cb100ed90de9a348d96f9b9c498131475e43676ad","sha512":"afb4c9d4ea0908a28b102d05445b203b2efd92356d1f29892ab6ff0746b658db2fb32d2631c45d4f78d9b8f77ceec5f47aa6224552503084af13b1d87bb4dc14","ssdeep":"","tlshash":"c710000000000000000000000000000000000c03000000000000000000000000000000","size":2,"data":"","first_seen":"2023-06-27T05:46:35Z","last_seen":"2026-09-29T06:39:42.892292Z","times_seen":3299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"7d99b23e9e9b5600837f0afd9d209cd5","sha1":"9c0d77cf54bd8c58d70acc808323910406b09652","sha256":"9a223e450f5cc6b4437c7de1f29a225a4348995faa541c8607565b02413b9a4e","sha512":"dd2e08f0300f10b4551436c3982a381bcce7d7d320642c368688473981e03580659e29e1f879db3330163e204eecb622aaa0aee044eddef3a578edd849bacfda","ssdeep":"","tlshash":"679002a521c654005b9211a81467188591254865548499496445d5926c7d1229156d6c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.930755Z","times_seen":1481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"2efccd9846db8386590c71ab1775f72d","sha1":"88d57904906464ee5d38992931c0653087ad029d","sha256":"ab18f1aadfb36b3e80c5782fa8185e516eb14f6227d2acfaef2b876539fcd57a","sha512":"822dee0a45e5fc8f4c9882c102cfccce0ef9faaf126557dd784b4922511c923aa5539f0dff206aa77d9b3ec795440bab9c5a62de8a9f705a6b3ac841424f873c","ssdeep":"","tlshash":"aca002b5b5d2510092df11752ca718c4956d4860141499ed6814d8a56d6d835d23dc6c","size":62,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.875653Z","times_seen":1295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"175b74eaac9724bdcb6f5a22c1029f85","sha1":"de6a261ea3a5bbc8af9f334a7bd10745df93d6be","sha256":"621a626704ffdf48f17dccc172bbfbd71f9e867faf9c7bceb97e5a4fd923c17e","sha512":"70a3fc3a8353d2fe9caeea4129addcb47931c94b391890b66e777e452db14824702e0712263999cfe3f28be666fdccf4c31919f371bfa4e7e8413944e0c2f504","ssdeep":"","tlshash":"c6c0228c3a30280040f88b22a4af4eac71bdb0864600230c00b07a300ca201188e49e5","size":183,"data":"","first_seen":"2026-09-25T07:27:18.869642Z","last_seen":"2026-09-29T06:39:42.934187Z","times_seen":587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c198bc89a4e346bb001e99acd7094348","sha1":"c01e8a39d8d9e2f3f01576071961d3a9d0871d59","sha256":"8704a01a73fa56816fb473d937190aa74b3e8ba54b92c30f8c80c1c50823a5af","sha512":"e20353839643491d8965635d478468eabcae2af961f346a14db70e37d6241fd062963c195cb80ed2a80ebe7170276760b6adadb6509f192d10b8c2aea21d1036","ssdeep":"","tlshash":"c7100000000000000000000000c000000000000000000000000000000c000000000000","size":2,"data":"","first_seen":"2023-03-07T14:13:32Z","last_seen":"2026-09-29T06:39:42.953292Z","times_seen":1319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fa2f5238686846bd3cc42faabb61ab4","sha1":"b133678ecdc8f921cfa80dffca1c2ec73779e19e","sha256":"3b6780b7a3c10b18471e1c017f98f062b29f802491382ecd44cfa7f2e8f93d0f","sha512":"1c5eeb42da10a0032a41afed4e61088673eaefcf4e42df7a42897aab5a7ebcfc33607815fdaf6477948b78cff08b552c87f7204b33bbc9a4eedc34863fa4ee43","ssdeep":"","tlshash":"99f0dcdff0c627f0285c34d04e6a18a9440b42185c96a106180767b0c3825c3c6cc87a","size":472,"data":"","first_seen":"2026-09-25T07:27:18.952598Z","last_seen":"2026-09-29T06:39:42.8747Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"0127b7d2a451660bbac7db22a58f150f","sha1":"d39a580d402f4519f72215251ebe5cadae4c6400","sha256":"e8440c91af0d97cbc7e78d0be454f9af13ba485aab1915302c1ec572539c4a90","sha512":"ec989a2b1fe0b07a98c1375e84f80b056163c970a91fab1e7ba47f43503a6eb1904a93d54a2056ebfc16914d40f2ea225f598e02c8a166ce951c008ece9fb968","ssdeep":"","tlshash":"0aa002b575d2510092df11b52da71884a56d44601414d9ee6814d4955d6dc35823dc6c","size":62,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.984033Z","times_seen":1319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"91323d54b00864474ed61c2be5e18e67","sha1":"ae038ce1bf8b640b48ce3983824e467230296cf6","sha256":"73c3d0adf34b891b2fcc95e4272d9a059675352b0ea2b9d213036edef61624c6","sha512":"916ebca7a0baf11dcc3d914092678c1ec765b4ceb2c5496953526ce2785a9b34f2532246c60ce458d7107643116228bd1891fe08718821002759be1e3a6059ad","ssdeep":"","tlshash":"db9022b022c22000830222a020830880e028802828008c02800080828cb00223000a2c","size":55,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.950292Z","times_seen":1018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9dea4fd1e31479fbc4179ae4f4c25dbb","sha1":"2dfe3d20604a9258d8d3a621203f228b096dd380","sha256":"7720bffedb94f90216ac81240aeb2e6eed48cb5ff2303c7da9c84629a4d7a4f8","sha512":"ebc98dfd28c0f5ed64efe8dd8bef42ade8d6b2459bbafcb735d600772b40262cb024304828aab4b89bf3e1c689f8f760782cd8b0062b57dc3b028d6cbdb976b6","ssdeep":"","tlshash":"cbc080c47642655853c1541716232110c5dc04c9ec1440514b1dfd69f5713054d3a792","size":163,"data":"","first_seen":"2026-09-25T07:27:18.911156Z","last_seen":"2026-09-29T06:39:42.973484Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8b44dec95d7da0e6c0ce75b8502ecba5","sha1":"ab7be9b1e571828a0f60380b85e78a603aa22315","sha256":"736693bc82383c80ab654abaf5e4ad2db7783a5d6c5589e5c981e11713f7477d","sha512":"c558260163400ab1818d12e9fa447d386357f046f80c3cc81045896015e8f2f0fb45370ef65ea18784c13c51de55bdaad63c4b8d4fd8484ea6e45832dfbf3088","ssdeep":"","tlshash":"24e07d21a00275d227ba80913557bfac064e1230d62338881210b6aca632cf2013e56b","size":304,"data":"","first_seen":"2026-09-25T07:27:18.945199Z","last_seen":"2026-09-29T06:39:42.937716Z","times_seen":579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"03f17e2741dd1d321dffb95e536762e8","sha1":"00baf784755b159c20503202da75f3ce4163d1c0","sha256":"83631958c6fdf8e4cbd17fe654f91a4c3806ebd25e9f6996e59a59d8365ca327","sha512":"5055731acdebb61d7122b06418a68aa7e2d1253f6d548976e18d48ae7f140dc5e2f0be9441a9d60d9c02b75edd5cbed1cd41a5a69b251f1e07855f53688ce0ce","ssdeep":"","tlshash":"17b012e86d041028d513a834bc1504486eed5ad107277c543413cc15b772c6b3ee684f","size":103,"data":"","first_seen":"2026-09-25T07:27:18.921529Z","last_seen":"2026-09-29T06:39:43.039586Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3e4f51770644fad459c2a92b898f2f4c","sha1":"2cfc32a420783608d8ff28cfb97ef124480caa2e","sha256":"4d478fdc5930f297a06e28bb3045adaf2b22e98b6d90d39026f764155792e038","sha512":"a4d6151bc95ae53446b1bb73120a4da84166287e97f5089330b9f26d65b6705d420c6a356fe372a09260be7b6c175a9858d9e3e59dd56e3aa3db609f6f547bf6","ssdeep":"","tlshash":"ebb012653c94154068002619ad3b000004c7701c636a2d0c300008943f6156dbc49f2e","size":96,"data":"","first_seen":"2026-09-25T07:27:18.876047Z","last_seen":"2026-09-29T06:39:42.96201Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3eeb510a24541a242fa876d6b1be7cb3","sha1":"116dced006ee3fafac3056dd4e5cc052713c3f87","sha256":"609acccd5bf85b3f5fb85812c7d35cd3c572d0dc0b61285e1fe158705c252d1e","sha512":"03558bc3aeb87ac6b9dcdfbad7d0d534cac8b6583ef18c995f0d8f479914de66438c762661ee3a3110994b569d5886f513c21e12e95b3c53696e1128765e1f8d","ssdeep":"","tlshash":"ae7000282e0aa00802e2f020080b000c8032880020020000020000c00c3002e802b808","size":22,"data":"","first_seen":"2026-09-25T07:27:18.949524Z","last_seen":"2026-09-29T06:39:42.950794Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"68f9864041e1e7d9499b9e779514e1ef","sha1":"05ac263022248bc27218f69aed947a0da0205c09","sha256":"620d6b5dcc3bb9624f5c609ba2dc51c7355135ea105eac61dbd1af8441d898ca","sha512":"d9775869488b788ede17670bffd4c6394d83e3ef00e7d10bbdcd59a0a1f0b77f47c16129afd42c64f15e05ecb32e865c33d64077b1823d6312aff96f59b52454","ssdeep":"","tlshash":"24e02dd0303e3c122b880cd28e05d902c18ee0808d617dc64f77c90c1f4748a424cfa0","size":335,"data":"","first_seen":"2026-09-25T07:27:18.86217Z","last_seen":"2026-09-29T06:39:42.996969Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"09b743dc6690dcc13288a5a377167fdb","sha1":"30a3755f061b33f1f9d7357f63925660fd078ce0","sha256":"09b8a3a59e60530c364ec297c2371216d2b007229a9a678e12f960a8b6888c98","sha512":"456b133f4150b6ca4b6c82644d01f1b0d86e60fa9b263c00c9a096874657c4328f7dd43970fb526fa80f5857720db5de2574c868d19eef8c9a9ba53873f9db5c","ssdeep":"","tlshash":"989002b521da5421d75211a41d575884902445601444a965944099965c69022523596c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.940946Z","times_seen":1451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7dd392e40d42eaaedf0bb34d96e1f895","sha1":"d2756d77db3becf494cb4fced183800bcde997b8","sha256":"d1eef6b6e884ad072a37ac1bccb8f1f559a92374f83401790bd52a53e46bf1fa","sha512":"628b5cf380ade5895e212cfee939b68785138eb53d58c3d89e5a0bc574076f77dd68004ec82ccb13399dae8a34d9a61a8dbd33bfd89685f31fa1cff2098af00f","ssdeep":"","tlshash":"c71000000000000000000c0000000000000000000000c0000000000000000000000000","size":2,"data":"","first_seen":"2023-04-11T09:30:01Z","last_seen":"2026-09-29T06:39:43.038226Z","times_seen":1766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bae3f90cb000352645e35fad60da411c","sha1":"00023f94c170125b979cb1914925d06ab1abfbce","sha256":"1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12","sha512":"d83d07979674822b4c966ddcb3bd4feb84830834e1f9fb255774ae237056cc357599e3aab9c6f47242aada2148a65c9ea11c859b1e8f550004535cc363fa02db","ssdeep":"","tlshash":"03800000203008388088000f3032cb8afaa0a22ae2322800c8a88c2cb0e8f80ba28838","size":35,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-30T04:36:25.332303Z","times_seen":194760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f465da03521180d47c811a98c793a2d6","sha1":"9b76105ff4c8bb84cd630914d772f4cc73df0155","sha256":"e8183224e440eb4578fd87c4c47735f9ede4c43b1c6ebbdcd7033e98aba6a009","sha512":"b10685b1bf88080c98cfa2493e4c1734797a6ee17e9d59ddd7cbd685a9596d4c908ac2a12be9ea2aed3f6ac67ced98f3c6e76b1882f6c0731d1dd60ae5de4156","ssdeep":"","tlshash":"7450000000303000c0c300000030300003000000c00000000300c0000c0000c0000000","size":9,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-09-30T04:36:25.410417Z","times_seen":194361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-09-30T04:36:25.445641Z","times_seen":184317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/popper.min.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e58cd01528ac4394af369c152c17bc2","sha1":"9496922c892ea80e86d868c4509610d61a1f2847","sha256":"587c080125b135d29a931ed371e50ffc1a9641831c1087de2cd74532815f4560","sha512":"0e7b227e2dc4a8d7410da7fbcccd531bb3f4d151a29af485d50094888ff172859d2336c8b0fa3959fda4e7223c3d630a0589debaa204c1450299b4132c02b5aa","ssdeep":"384:fmQkLrwVOQzirVyKnxRs8gB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdO/:WLsgQziJp3MDb5OxHOxvYD73Y5vQzyL3","tlshash":"2292b3cc3294b06643ab91a7a0af960eb2339875610e9410f19df2d97c30ef9917fd79","size":20973,"data":"","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-09-29T19:08:13.513818Z","times_seen":7793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8dd55f3d69ede715c9977e2e7c2b52b8","sha1":"0c2a3c7b4d8d18b9594e9ad5addbf5e7b58f7428","sha256":"48b69eeb0fbe691aa95ab3e29a8c6d35b687a40ec59b434d2c5fb84c1d158e63","sha512":"c5da12d8860fee523131521fd4639f5b2fcb81035b4d116f0a409a3ba0a8857da48d89a4442710b39dad685393a25f48f77727022293caaa00f2429dab9037f8","ssdeep":"","tlshash":"5af09e9ff6150548d3e6f271da1f221436df5154ac0915c5437eeb7007b0953443195d","size":488,"data":"","first_seen":"2026-09-25T07:27:18.960293Z","last_seen":"2026-09-29T06:39:42.994552Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"66a3fd552ff168e39d5727f3f5a07f71","sha1":"7c6bd8a34f27442cbd48e7fae0a79a134d3d3ef2","sha256":"4cb2087056cbacec9259a388f12a7e889ccb907e97dd17b53f8facd383187e70","sha512":"ada170799b63ad3b2530e6107270a3cb0501cc0f1fc56d65fbab761623286f7f0d7d0a85512b170aa65af403fea8584fd8e3573871d066e2dab9b2054fb4d416","ssdeep":"","tlshash":"74a002b575c2540c82df23641ca758c4956d4464101499e99c18d4955d6d935411dd6c","size":61,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.959799Z","times_seen":1200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"78b982d2a3cdab8743ee32dc230aa9a4","sha1":"8319953800ad7abe2627be4bc68a6acfba26f133","sha256":"ea9a7bb6c11c87f055963caffcc7d14be6ab5636ee468964894c7ceed6b0121e","sha512":"54ee99e3258ab4ac329831132e6b9c6f4c4481e2f64d7515d0b1566a4583274e587fbcd609fc2faee55a7b04e0b8cefa3e3472c5c259e153d7a48164394c38fc","ssdeep":"","tlshash":"570123afa1e01224185288d90bc7429820f550a86f464ccf65d153ed497828374f7f02","size":657,"data":"","first_seen":"2026-09-25T07:27:18.857442Z","last_seen":"2026-09-29T06:39:43.037533Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"85a6d7f36901d57655e43ccd00b17924","sha1":"528cb31c2c4620267364b102a1ba15f7b150a108","sha256":"dc2c89614b90ec7aa0c9de6e642ffab3caa4c7c5824c9cdc5229354f249fadaf","sha512":"92e490a94853ac589cdc598dd16905de0c06a99a3c8027e60ab9bc96d949e96f5de88684e0b765d606a64525c671b5b8742d472cc5da33c2a0ef4af447b189c4","ssdeep":"","tlshash":"58d0a7c10806f462021329c22886e01d1079e69135420f0d3841664c54b5f1be77d81d","size":217,"data":"","first_seen":"2026-09-25T07:27:18.8152Z","last_seen":"2026-09-29T06:39:42.958551Z","times_seen":597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a58ff4842533d9e53dd278bc0406536b","sha1":"87f945fd8496c3bff2bba092e2792b4e4ae8e96d","sha256":"fbb830d3b8bd168698979ec4173b4b9eb007be7a165da9e7fd65848c34b31bd8","sha512":"2ddce1a501e52d7945f56f83bf81923d5efba91e7539207e0315d637432b8c60664f838736a586252c91b0ecae1622b0da068a4ccb809ed8ff8da9d2f98339f4","ssdeep":"","tlshash":"bcd05ec0650a6d48962f86feeddbe91802f87012a943a948702ab8c578abb45d859928","size":266,"data":"","first_seen":"2026-09-25T07:27:18.944256Z","last_seen":"2026-09-29T06:39:42.974925Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4cd91aec44f94bf7504b0eed7a70b0b6","sha1":"a33bba8eafef9755447b5d44db38d2864c12ef62","sha256":"5967cda1a00b8b16688a6fd4af46bb6426b081ea14f390d789c824224b4023dc","sha512":"8eae53b0bca461f888d2399721561695915bc636a05318e573ad3eea53298037203f82d06ffd13aae8f43aa8a8f8210ddea98ce935c052d26a9b6e522c1bdb17","ssdeep":"","tlshash":"dfc09b4bb21313c791ddd2c1e91f1f5e55d240ca9d541769c7954413c51529148fdd15","size":132,"data":"","first_seen":"2026-09-25T07:27:18.918858Z","last_seen":"2026-09-29T06:39:42.979677Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/slick/slick.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","size":87157,"data":"","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-09-29T19:08:13.522866Z","times_seen":803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"ba29556b026f273d7a70c058aead19d6","sha1":"2612cb57faed7520df879e72f9ff4bef2aab91c9","sha256":"8a03a467bf8684a46c870d4342e1c9d47c27f3675167aecda508485a7bd01808","sha512":"62c3ad010e2ae930ec6e03713fb8c63f084fdbcb153fe0c003d8b817fe4a3bad5a3a95e0e90dd51b392dc81d2442251fdfad02e247712b2dfc9cfbe44287c501","ssdeep":"","tlshash":"7fa002e922c65404a7d311f814671a859029946255449ec99454a5e66c6d0269227a6c","size":60,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.868245Z","times_seen":1508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"40286c984e0fd59b419d75a87cada0fa","sha1":"8fb875515a6a96844db2e2e38c8cbc07d4c78222","sha256":"b1bef410e7f1ef8c4c51b858b25226aba05c2b97a53e29cdc7242c1b65cb4812","sha512":"1db2d7344d641dfef37716fde725ece2a4450140c45cb1514549328e0b040e0656d0c6f51edb84d09d02b2c580a8e681c1a5f050ffe8735a826d94a04494019a","ssdeep":"","tlshash":"5ba022ee22c22c20030220a0008b2880a82800300c08a8202080c8a2cc3e03280228fc","size":61,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.942886Z","times_seen":1416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"906c0bb2e9b51f853d5cdedbb6037638","sha1":"80dcf0212bef8c279550e0bf05adf851ab2f225f","sha256":"e742729f844da1c42da861cdd6fdafe8129fb04ecf5e070e5cb87ace7a525bff","sha512":"8d9d92741d0ef70c3cc9377c87cb2d3e9bcab1491024fb3f2e15ab9dc123157b97e4f61c4e8c10959af07f00b2917e268371f6f1fd0430868de5d05fea9430fb","ssdeep":"","tlshash":"419002a621d75540475213a5246798c49064446014c8dd89544095e26e651226316aac","size":54,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.953955Z","times_seen":824,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-Ci3sulf9.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eba624c042df6b9ab614a422c182dc2","sha1":"c66297b197c51aa94b92a9066905bfa42e2e4c8e","sha256":"42d5bb3c366ad7621e46bc942f3009ee1ea1452c905fbbdf4f1d5c3f3220d09f","sha512":"3ab1e42fcdcbe0766b7f5eb07cb796550733ad5fc7dd65ef0657fe4fdb3c73fa94ed5ad19ee8111146f92dffbe72c2c9efb42c5eaa247f449db0050510d21682","ssdeep":"384:FNtFT88tMPdBgaw5O+mvRan7/AKsDoKzwA3Q+crsbUzgfTtQfQIeI+:FNtFX+dBgaw5O+aanrkoKkA3Q+cwbUwx","tlshash":"da72f9741210743f712fac492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","size":16028,"data":"","first_seen":"2026-09-24T09:31:55.036956Z","last_seen":"2026-09-29T06:05:19.179389Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"081b1f3a41c98110994e1b45a4a886ee","sha1":"0f91e9beae97414416930ea959a27870845dd508","sha256":"042ac5b8da4052545d4b28fe223994711495be3cdeeb8a1f3e2a9d7d8bbae87c","sha512":"d382594c26c573e9ddae21676f49ed0e905b10f16dec79d6c49fb1b70a5690953c8bb358bec3d916760482b78c341a948c77b2abb1d46cb29049bf473ff9bdf5","ssdeep":"","tlshash":"c7100000000000030000000000000030000000000000000000000000000c0000000000","size":2,"data":"","first_seen":"2023-03-07T23:10:38Z","last_seen":"2026-09-29T06:39:42.977552Z","times_seen":1594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e358efa489f58062f10dd7316b65649e","sha1":"8efd86fb78a56a5145ed7739dcb00c78581c5375","sha256":"e3b98a4da31a127d4bde6e43033f66ba274cab0eb7eb1c70ec41402bf6273dd8","sha512":"99f97d455d5d62b24f3a942a1abc3fa8863fc0ce2037f52f09bd785b22b800d4f2e7b2b614cb600ffc2a4fe24679845b24886d69bb776fcfa46e54d188889c6f","ssdeep":"","tlshash":"c700000000000000c00000300000000300000030000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:02:51Z","last_seen":"2026-09-30T02:34:35.422353Z","times_seen":67451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6659b433c267accf7b15aea142611e04","sha1":"ca3ff211c0b56d9053fff98f2bb598beb21a41b4","sha256":"e1b0f62320870331ececa8ff65032db047fb81d11ee90df54c0f375816602925","sha512":"25b7c769ce26cf2e245d6ec75583ab2e177395f15f737b55ef02542b35e10429310492742d377c20ec7ea90012f7660ca6e3d0d4da5dca7ee3618099055d0335","ssdeep":"","tlshash":"b0d0a778b1445cbd1e2e87e3a8a3ec4851eed1ce990d40095168102056b7cd4f768c65","size":252,"data":"","first_seen":"2026-09-25T07:27:18.874525Z","last_seen":"2026-09-29T06:39:42.981848Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"43be7d282d770bce277feb010355ac8d","sha1":"c0558bdd74ce17082d2e00b9416ee76d9fd4b688","sha256":"d5c340d6d8a2bb320e7f71394c0f93aee05e2346b385c6eb372ecf8970a3eedd","sha512":"a3edb371289afcd0935788555863cb449c888152e27e2a6c73f28da06ab342c257952491b0ecca531cdeecd7137465b414f3a65de0030409843f110dd6b1779c","ssdeep":"","tlshash":"4d9022a230c20000038202b0200b0c80802808202008cc000000c0822ca80230200a2e","size":53,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.959017Z","times_seen":1483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e5d9d1367ef87421e4ebe775a4f81106","sha1":"f92f3922a6099432aa9927d130e269f82a4ce45a","sha256":"36b2ce1a71249b03f8a423eaa0ee327fa8dd54485d802ff4e31128cad68fa0bd","sha512":"546d2cc0b4b70a40b1650a9a5f08ae15c8fd1d17806ff4cf3f49446117252544483c3ca553a4e46a397cfe573a19727c1f85de77f717e29d661904fa4c34b092","ssdeep":"","tlshash":"f7d05e5b957c1bb147eb3a496cc7c5cc3be0889327081ac687b73c808211ad3c8905b4","size":255,"data":"","first_seen":"2026-09-25T07:27:18.963907Z","last_seen":"2026-09-29T06:39:42.919755Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d767bf576b7c492be2b24599bc8a7d9e","sha1":"fa167a7095387b006625d8dbe0abafb7c10e6402","sha256":"44265f1a7650dcea41fea327637e73cac058d8963b0d5ee349655ecd064b38a2","sha512":"acdb5dee0f1f7e072b14ece25d656fafd76d431f5e027b8a9858b5fef6f4d5fa1d5e6809d28a7a590d1846c080947888af62a9e5c8eeb9feb4ec0311db451520","ssdeep":"","tlshash":"79d0a7b95a192094456143d5190ed41d24c651137f402ccc651a143808e7881756e83c","size":230,"data":"","first_seen":"2026-09-25T07:27:18.877114Z","last_seen":"2026-09-29T06:39:42.992032Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64d8c858156192a16a990983d35fb3f9","sha1":"1ae03179ebb040c510ecf6f785c0002f21932433","sha256":"bdfd55577f7056ab007e88fcfe9352e9805fc05f504131193cbe81c001162fd3","sha512":"e6c8b62010e24ed3c7a59b3d92aa3165bc2270274b755e8ecee06a238fe29682b08510402a6e8b7b3f85027d7e403447ed4694ec2bc43c136d5c0f1cb1b3f23a","ssdeep":"","tlshash":"cd60000c3f003000000000030000cc30c30cc3c0c0f000f3c003000000000000003f0c","size":15,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-09-30T04:36:25.489163Z","times_seen":181076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ab-h6dkmuVc.O/am=BACAAQ/d=1/ed=1/rs=AN8SPfovqJUGAW4ETDB67pGIfxn-HD1wtg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e07202748f52b275a366dc765dedb884","sha1":"8768bb00ab50be7dda6103811f5cf3ee6b2a11bf","sha256":"9561c041bc10fdca6bd46059bcf9ab2c596a4251efe7260a00979ce2ab0663c7","sha512":"d550d20f48c2998189902c4aa1c7707eaa0ae68b066848cc8efe56806c6f8efb636713a0f66f7aea54dde10af65856ea6ddc0cfef77456cfd5d4feacba13c7c5","ssdeep":"3072:mL9aWR+K+zPZCPzb+bk1fRz62/OlDcpBi4unoLd+X9hcxBZoyZR:NzOzvVwIuTKB","tlshash":"c254e8ddb29670b79363f4a5513f004ab13b68a5f8484dacb288d8e26df4909417bf7c","size":292791,"data":"","first_seen":"2026-09-29T03:06:52.258789Z","last_seen":"2026-09-30T04:22:25.095069Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"6930bef807afecc775295b5da8a57f67","sha1":"29c118c456f63796b21cac7d9a68cbe723a6c20b","sha256":"b15123a642347808a7fb6b683f38f32b856433e84ca861565c44849e1b29c547","sha512":"dcc100ae2f598baa386884d26c439b53b1690cb4946a86bde4e0a35c604fe23ef9edbbe0b0578b6cb4febef2495698c354e1f5a04dcc483d639d1a8bfb05d474","ssdeep":"","tlshash":"9d9002a521c69408475211a524671888956444601646ad455440d5a29c69162512597d","size":50,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.920817Z","times_seen":1228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"deeb2e2536ada26166c8bfcf13c3c006","sha1":"408c404bcb05a9d4b1dded9b593e066aa324be2a","sha256":"8abd60db6e0615e782b4ba972e7b218829f4f51c577be1b15840cc53116594d4","sha512":"35f3b5fb972ac0d691ae6fc8182ea76439e47281fcd047bdc35c67e5e85db46c6750906c6e84764b0e75d2c2e19c5c24cb6d85ce5469a901bd3fc72c04b5ace5","ssdeep":"","tlshash":"5aa002b5b9c29000829f12653ca798c495ad44601098d9ed5815d4e56f6d835535ed6c","size":66,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.78833Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"f45e1456d2ecd86a182e2cf354e69a79","sha1":"7f3f702a34d5a6717007eceef792d574d50703c0","sha256":"46e64f09ebef69b0805a90291373ed61c5a9fea7e22c41d2a1898df45b29cb79","sha512":"d4eafb7a3776eb4cd103e3a3234852f4c65df59046364c6ea29532207e3573eb7712fa9a059edc2448cff0ddd8dfca42cd03d80ca8fb1e2bf344809442d2b40d","ssdeep":"","tlshash":"a59002e52ac6541047d252a425571c849439486024489d45944095925ce55335215b6d","size":53,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.869784Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/bootstrap-select.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b04d645561ef0310c7918f03ae43fc9","sha1":"9a6ae4d0aae724a7e032d8d505d9b8816477d739","sha256":"186e4c2c470e3c1c76997b7a4dfd0f618b38311582e0578db05ccada6fd43c6c","sha512":"1a5e1405749a94daa777e7f0c96bfea84d27c174228e8a6f546100325144e133efc430bbd847813d3e8c1223efc15fc927922c337ad61f6cff03106070c6e569","ssdeep":"1536:o68KYv2GWk/QIkzliZEkZe38kykPDpcLmLV2+DgwetQeMT2pY+0S9hNtmk09F3KQ:A7uKbQ0hNM8KmI","tlshash":"e3b3945925a6113582ab30ab4e9f5048b539811f9d06ed283cac93cc6fd4d38a1f7ff6","size":111455,"data":"","first_seen":"2023-03-07T16:17:07Z","last_seen":"2026-09-29T19:08:13.585301Z","times_seen":711,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.DV8fl7iVyDY.2021.O/ck=ytembeds.base.St3vnT6AlO0.L.F4.O/am=AAAAQA/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywG5hJcxmKrm2sS9LxKJK0WcM0SPAg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05dc6b8d9a7e13ea8b6c02e77f5351a8","sha1":"365dc1919aec9976b7be93990e4684774c90ce5e","sha256":"b1a2576a4b564088f58d469f09ebd160b44c0e4af410b1ec392d0651b3c0acc0","sha512":"b93cd52e47ce5f56322fbac999b95ca679f6595d650d873a0110bf40b0b23773add2025a061473c4e58a86a289c94184117b2dd3fd06f1fe43b338e812ec2f07","ssdeep":"12288:GDjrh0EencTyXGld16WDVcIm4zDSG8UvCeoBJjlXc7WPz6/wWXqkZTNvl6hkTeu4:G5WlrS1ajXswO0gFvhvurBiYtR","tlshash":"fa158df0b35231b5d107fd66b8b78003b27f5912e108196cf0a2ae9c56fc9986e77729","size":896423,"data":"","first_seen":"2026-09-28T17:18:53.824345Z","last_seen":"2026-09-29T17:31:08.625135Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8754fbe73fbc5cf32eafc0c22fa0f82a","sha1":"74fe7d74544c922cfc6fa56f0d356eb4224ab540","sha256":"214aa642dda15ad5ecfd40148b560e04a9dcd66fa6f1f46905569be641afcf03","sha512":"0c0f50b05bd105b7ea0b91273221d9939d5f18a2638db4fa9e70e6b2cd9f3edcbd001c009a4f52a0ade76506b7acdb045134c50a4497fe9c3009424221ecb660","ssdeep":"","tlshash":"b9d02bc4f30438ce10b6f1c2140a500801e7d1a64f4a1449513fe4f469b2d21a64b99f","size":272,"data":"","first_seen":"2026-09-25T07:27:18.831594Z","last_seen":"2026-09-29T06:39:42.983931Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f3c84facf91422599834dce7ec3831ef","sha1":"0284b28e92698e1936a37d8da036905838239733","sha256":"1f0ebc426961e45bc97ffdeec433010567f7f5c73705cee328532c4a1a741817","sha512":"6d42bd106a8e90806768178a18e3396cc14a934c822472fad9bed126ce4c3a016d7ee9de24bd1f4d3ec68db2c5ecd247a5a292eaf632af7acedb24f771fb5892","ssdeep":"","tlshash":"be80000b2e2aa02c00c33028080b0a0888a202a00a0a0c08808000802c3800a808b82a","size":26,"data":"","first_seen":"2026-09-25T07:27:18.926543Z","last_seen":"2026-09-29T06:39:43.005186Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1d6992e6e291c06c9e8a1a0db81c8792","sha1":"0d89c43bf25a7acef951a345ad4c4ba5572959c8","sha256":"65536922ec529c515bea13eec8aae6df7c2a1fa5c9a985f8e4f82f3289155210","sha512":"e7a8a82eebd29975b2f30f1f737c268707fe2dcfce26c2b38f1089cff06c89519009542f086df3284e0df44ade512d2c325ba4ee9f27347baeeac46642d14ae6","ssdeep":"","tlshash":"b5b092c1f2802271904ec8c675327b29f2f26bc1290625798661ac9aa82075d08fe922","size":118,"data":"","first_seen":"2026-09-25T07:27:18.882081Z","last_seen":"2026-09-29T06:39:42.98777Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96d66a4d9708fdb6dd5597f3bbc7d624","sha1":"e10a66fa8a836f6f948941262b70e1fc928a446e","sha256":"3cabac574ada654802fc1c4518d870f0791a9a3ac31371677e75fb683e47ce89","sha512":"06c25bc4dba52367cbe19252c1a013e1714a198141d139939944422266aaaed60ea3953c5d0f890a7f9ce7887c5f2a4cbb47173d06f829d50ac33f6f353c015d","ssdeep":"","tlshash":"ebd023cb729c1114574337141eef0448bc64b4d70dbc941d8649581058011ede03aecf","size":195,"data":"","first_seen":"2023-03-08T14:47:45Z","last_seen":"2026-09-30T04:36:25.406926Z","times_seen":216616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"d541184c411d2e0ff266f06e5c983a29","sha1":"ac1d9fe0ae9c0a031a63b30825249f03bb6aac89","sha256":"f42dcf5b668f506b276e257a406d7ce854a47c9d672138b93764ba07801aecb1","sha512":"17b06446eb79fb694812b37fa5a1cfae3d4858f9fb762db01143fbd49964cdd775698b6ea44af15d84615945f3a25e10ce22b124b8447a2f99bd4272d462864b","ssdeep":"","tlshash":"bf9002a561c6541047d221a424571985902444605444ad455440d5925d750625615a6c","size":49,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.952728Z","times_seen":1454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"d55fc08ca9c174cac15eb7ecf84faf1d","sha1":"0dffe543ef9a50936679ad13145e24e0ac48c28b","sha256":"6efcfc2434fa7f1ce4d66b82f44e66636b0823af5f8291f4bc25598a1882b7a6","sha512":"e4d1f5d1206c6271e2a0b2c3a6a284d11437b08b64ccf4a0b058819ebbed544dfca8b03898bd9a3e674c3bf699c710e966a66d751a7c0e730c0c219861afa6d1","ssdeep":"","tlshash":"be9002a922c65410475325e428ab5885d12444b01454d9c5544095e29d651275116a6c","size":52,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.989266Z","times_seen":1442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-C4Ptsyox.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b36d702e3e683b008b927b0c9b96bdf9","sha1":"ba9cc05993bba55735f2b82da0acb0831b437f4e","sha256":"f48e6ef3e5251ec45c426e1a44d7bc9bf044833a5a7eb2a9e7ab9237cbaf8c0b","sha512":"460d078654a42b5b6feae064b44e20a4c73d3d520253af8ec9d22113dbbce26c12009f1674cda006a3102fe4cdecf5a86eb47c45cf7d119b549422a84ecc8b7a","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY9y2KQgcu5UUxtvmB0:cOEIqXrP3nJwar/KqvmB0","tlshash":"c6642bc57290b03543d791a6906f1109b33a5c18580d812cf269edf67dbaec8b2b7fb9","size":322001,"data":"","first_seen":"2026-09-24T09:31:54.987317Z","last_seen":"2026-09-29T06:05:19.010952Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3846bddbbf8ab2eb27146a26cb32750f","sha1":"e81f7a3850393a0bf45e6fc6b3d1fe134efed5a1","sha256":"55852e07d3b760160068b4f9d28922af063bc210f62bce07216871793d5fb744","sha512":"ba2162472016bdaa6700fb5dd2934456ed9085d44d965478ae6981793956772dfcbcf2d4a07f34e23b71171740658e4d53627cb4491f3fd84a6af33511fa265e","ssdeep":"","tlshash":"c710000000000c000000c0000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-11-11T09:04:38Z","last_seen":"2026-09-29T06:39:43.009232Z","times_seen":3239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"09668632101792930478356810163433","sha1":"c5f75ce57f50799ba00676cd9ab68b2222762046","sha256":"9a18967a4d3b9ee2ecfe269f7a7fa1dab94e4e43bc2c12cc0dbd749802a88900","sha512":"857013749cca5b591bc7d48aba7130db1892cf7e6e3481b56f4a196daa4330138dcb8c007f2a2f70282ea473e8dd53e4bdfc42d86d9e994a65d0510f99e6f5a0","ssdeep":"","tlshash":"68d02390b4c5dc1212b1034e91e708cd635230416541440cf31d972c561d68451e4ec9","size":211,"data":"","first_seen":"2026-09-25T07:27:18.880216Z","last_seen":"2026-09-29T06:39:42.940929Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-09-30T04:36:25.344125Z","times_seen":278709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"944d2896e7dc5f3a66a8332ae87da261","sha1":"cc221d79fc5df4bca02b21b609c1313c160f2584","sha256":"8f07d0b8e2fdac6af75119abf15888e37005ec4c39d79538347c1cf4c7d4347e","sha512":"653da3a6dca93dcbc4360b171e05840de4d80b805985b806456d985d565bdfe17e4336528d03cbdfc0032a5cde770dadaaced91d43260ddf5dd7abc1c662f4f6","ssdeep":"","tlshash":"78d02b943f826bdae0cd2584f44707181a8380162d91228c76332568275c6c943c3b08","size":280,"data":"","first_seen":"2026-09-25T07:27:18.92428Z","last_seen":"2026-09-29T06:39:43.0597Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8eb6c0c430fcf9d1085e10e644c2b339","sha1":"07dd515cb24e6d12414075c05472185b21005e68","sha256":"52de8d047cad06b4061fe5ec890399f9c50a5ca975cf2e175f1f0904f18fbb60","sha512":"bd0b37d214b905daaf06dfd5bed290432895e6abbb26aaa88a0f6898b2afab7d4ffec83243b9034eebfe6ae363448b6c56df3849329bf4184d038a7337833d7d","ssdeep":"","tlshash":"7fb01248368448c51875b852dc07240805f770405e2c41885614f38437fcb237083e4f","size":94,"data":"","first_seen":"2026-09-25T07:27:18.920568Z","last_seen":"2026-09-29T06:39:42.974342Z","times_seen":582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"4b232bfc6555aa0968f0b03a1147db77","sha1":"265169aa7bbc8e04149911aa7748305b92b3c749","sha256":"43cca2b68bcb03104c9dcfc3da786d94b9b59e61a39564539a124549d0a00c3b","sha512":"d0b991eed7f049083566c71c465706ddbe4ba7b27a0360ccf280f281176510a0eedc491dc4e6793ed5c5603c6ba8424d34748629ee0a2d81e28eb437b0d3503a","ssdeep":"","tlshash":"3ea022b832c2a000c2cf22202cab08c0c02c802820008ceac800c0888cac838300cc2c","size":67,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.923366Z","times_seen":980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7cfaaa95aaaf57d7610c883c180791ce","sha1":"f9ba86d9c1346332b4ecd1795da88a5d381ab601","sha256":"b06d4a825dd4a52c33ac71ae002f68627141ddc0aab815f966842e2a75617022","sha512":"1f9d263fcb765492d86e8b4a78489bcdf4f256a477ad1a00cc6a3ab26b4324599fb8fd3858bd07dfae6145da9c43abdaf7710e7a52fffca1dbe62386372d79af","ssdeep":"","tlshash":"52b01214f3d22db077c46978e31fe70d65f6984082d82e4099b672a26f36689c05aee9","size":107,"data":"","first_seen":"2026-09-25T07:27:18.896443Z","last_seen":"2026-09-29T06:39:42.969033Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2cc43ad532377e05783b919d86a896d9","sha1":"69e00bdb15ac21186c8d27764e6311759ba5b99b","sha256":"007cd5f5a967155b6963ac5de46c369ee23237414c3f576b4197fe46229808ce","sha512":"404182f4b51a22a4a35e58480d372a65db2465803ca23913e379199413edf84fa74dcf0f92026d8561dcc35bdff981cb98a38c8f50ae05f7224e5c7b42b30c92","ssdeep":"","tlshash":"2cd022c93c4978d20279238888ba01f7e2fbb8dc78068b40c32442002a3ca3a5464402","size":199,"data":"","first_seen":"2024-10-31T11:08:50.83142Z","last_seen":"2026-09-30T04:36:25.400815Z","times_seen":167133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"221335ae20cd9d88bb0f074caf700325","sha1":"caa7d3bb305d5025cd4c09615d0f3c121e2457f4","sha256":"d29fc4c10ed2cc05ab28d3876aea305350891b72a6c01e4e6ce98db9c6403533","sha512":"106dd5dc1062186336891f0b04ade49591bebc176cb02187d783b4eb6d2d2839d865e14dbc0fca69a8908af5dd96a05c8177d293a4fba278f9fa1e1a41cc32bc","ssdeep":"","tlshash":"7c9002256f09110294350d135308750322448e3b0752cad4e1d25f146e8d8111bc5602","size":55,"data":"","first_seen":"2025-10-07T15:56:26.002292Z","last_seen":"2026-09-30T04:36:25.500168Z","times_seen":7281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"319f172c2a88588789e740378bb94ee3","sha1":"a7a43429197a9c9c0fc3ff25c9b981bbc1053bc8","sha256":"76b717c4a5710863d4e158020cf7cde94013b60dffe5919dfe143a965a952953","sha512":"0b24956ab3f5a501f88add77688d796e2029997385ff73cd378e012ac9af38b001fafc8027796a8e3c68a5d9c683d2a27a2885b55ffce4b4b0b51c92deef50a2","ssdeep":"","tlshash":"c79022f83c20302000002230802f0038e2032bf3c080008280a28c2a2c3080a08c2208","size":56,"data":"","first_seen":"2026-09-29T05:03:56.461767Z","last_seen":"2026-09-29T05:03:56.461767Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/coingecko-coin-price-marquee-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c943d4422dad6300bbaf689c2211180f","sha1":"4cf78792b3a9dddc6f2ee8219bbfdd213194f144","sha256":"d8d3d9a390c75f612142118d3281d85b95cb50e84c2f6d9438daa83efa8e2437","sha512":"c5516ee60fdc9e900036dec072c7c2de8d01dcfce22fc901048697428c43604ea8dd8d907abda960ce8aae5201ec7f649300af511c8bcccac469a9541f0d9d4f","ssdeep":"3072:/uPfvYNJshGWDSBttCWINmVZrnPodE5rUzpI4Oz:XYBctCo2c4Oz","tlshash":"bc34198eb6c0f19947b693e9605f394ba77d28fc68884380e972f4e5587e05c6132f6c","size":230974,"data":"","first_seen":"2026-07-05T23:38:03.171209Z","last_seen":"2026-09-29T05:05:43.771617Z","times_seen":449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"846ab4709f9337ff2b36bd24d7cd974e","sha1":"13db26e3e902e5fa7d5757a72c3a2cc887ec4aa6","sha256":"5d59a43569c5dd4a08a9aab5713449c99dce771632fcc7cde6190b6b88b31844","sha512":"c0fb6d145e403c5417ad25e9741be5ab1df45fb6c1fa950a152caf47debd3cd3024ad0f54fe5dda4e27a13ae2c5926f09c39b9e9866b6d26e271ff805d641a73","ssdeep":"","tlshash":"3ba022f832c2000082cf00280ca32888c82e08300003a8e80800c0a08e3c830803ecac","size":68,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.887272Z","times_seen":1361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dd7536794b63bf90eccfd37f9b147d7f","sha1":"ca73ab65568cd125c2d27a22bbd9e863c10b675d","sha256":"a83dd0ccbffe39d071cc317ddf6e97f5c6b1c87af91919271f9fa140b0508c6c","sha512":"32b1786eca2b9f815b4c52b999e2b34dae877a86c00e8f745e7ac23388665c0703a947085bd7f975c5210ffab9b5a8f3931ab40b26cd7bccc4d7690cd19a4277","ssdeep":"","tlshash":"c700000000c00000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-09-29T06:39:43.002241Z","times_seen":57888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2fdbe6b3e5bdf9e0017f0259ff2a1dfc","sha1":"054948035e1dd49dbe40c1e9ab32d0afe9be09f3","sha256":"57110486a14e0334c8b016e395cfcc608b335d2ae5ffab04511999bb8a470242","sha512":"6172233bcb874ae122e56ac39e80c50751bdbe69c704158bac2a85f291b2a383b153d172869b70f7cb34c368c800f43c83380e270510d2b4134a792ba00eb5e6","ssdeep":"","tlshash":"93c080c47642655853c1541716232110c5dc04c9ec1440514b1dfd69f5713054d3a7b2","size":165,"data":"","first_seen":"2026-09-25T07:27:18.883167Z","last_seen":"2026-09-29T06:39:42.967981Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e213815f8e0b9954f8d43e3a59f8b742","sha1":"563796cb191f082f24fc52b017905533a0ceccc5","sha256":"842c53eb438fb28e95c14d32423b0fe01bf557c9e623b684b19663d497bce97e","sha512":"b5bae6d10c35f01992dcc33c3f24a7cee7ac0fb56cf4a9e79453d213297ffe3b8e6e4b3eb7de9b1d10a5ca2638e81ac3fd3e66e6d76d157a75163ac7caea4f89","ssdeep":"","tlshash":"ad60000ffc0c330000033030003f000c003300000c000000000000c00c3000f0003c0c","size":14,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-09-30T04:36:25.370103Z","times_seen":213877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/jquery.min.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-30T01:45:20.134195Z","times_seen":146061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"20d929873393115727c4b824aed08ef1","sha1":"008f1cc30b1125484ee15f8e4a33798444683398","sha256":"f0d68ed36335cbe3b3fb0f48d3a75aad1191e6852d7fc28d0d9b12825ca49c43","sha512":"3a107a1860f2e6093a21ebcc999fb94beee3d3b077d8ead80fd417a8ce6e1b6e66b47b4005e1c53b720da9cb0d9ca7fbe0a262534ff039d718c08da88f33f088","ssdeep":"","tlshash":"c3a022b832c20008e28f00b80cb30a80802e00a080008eec8828e0e82c2c83c822ec2c","size":72,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.789761Z","times_seen":1501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"7e3d013340acc0540fc46cc272494c5c","sha1":"71c759a7f4f23a21bcc55f281898509f1831f569","sha256":"b81c500f2f018a205dd441034f08f9545a03bb7024497d45379b358565096694","sha512":"b77feb3d325fb103043acb0cb6f8275a8506a951fd8cc6e47a94016ede67b22895efbaa1d439941b81d537fc241574aa8fcd6f1c309f530d2deee34afb0a132e","ssdeep":"","tlshash":"139002a922c65510475215a415572c84903848602448be465440d5a25c7902291269ac","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-09-29T05:05:43.865067Z","times_seen":1358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"816e8e9b5f7e96dba001a42cf8735a77","sha1":"7d17d6f45e835f8289e3995df1a99cc93ea15a5e","sha256":"ca67eb2fcc9ee8a223e120d735b8add89f3c39f505c5e0d7cdebbad334a45be4","sha512":"1635bfcd9601e2aa226e721990cea32aebe32e93db059af75e4c31f342f9b6c1ad72b8dcea7c391648c121ad23f31814106f03468fcaba41203ade59fdf6c1f1","ssdeep":"","tlshash":"bcb012536815549404e436602882410005c7041807110538a20849512774ce27418452","size":87,"data":"","first_seen":"2026-09-25T07:27:18.900995Z","last_seen":"2026-09-29T06:39:42.893183Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5c244fde4e6f1ade71beed5c11edb59","sha1":"6bc634a7f8505a2ce340807aecfa1e50c2a578b3","sha256":"d561924e4295103128924509bbe71b3eed6625592d75ba3cc35c365189d6081d","sha512":"6ed66e7a246ab961cedd150553b6a9aa692988813dd4ee30c8b7d78d80bb8765a828112c6860d08eb382cae34e22bdd76ecda5ee1c9c7ee25a49b1d2639474f9","ssdeep":"","tlshash":"966000300c000330c0000c00000c0000003300000000003003000c0000300c0000000f","size":13,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-09-30T04:36:25.355036Z","times_seen":183345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"14d62be9d305a4a309a289f0ad00ee67","sha1":"75697bee5394aec4671f137a74406ac78b628985","sha256":"91eab54ab5b80be5242ed7b58923e3b798c4e8c2c34f767937be780d0b3170a1","sha512":"0841ba98892d5e908a9e6d3ea17660af6de95a69a599329197a6b69dd17d1d703bcd8a9f2ddcc8aaaf81f49d5852e62b1e62582dc23d6354ab2b3534443e4e2e","ssdeep":"","tlshash":"0c900258354160e86597a091111a895956661a422c0462545551c5812e500ea709351c","size":49,"data":"","first_seen":"2026-09-25T07:27:18.959325Z","last_seen":"2026-09-29T06:39:42.913071Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96d66b810c0f0bfa4ace95040ebb8947","sha1":"593af2e5b0151b27d803603a7b9ac02d46fa29eb","sha256":"4d14507ff336b1b9efb5d77142cb1c5c8034d43f90e2ca1bfec6715afb5ca1f7","sha512":"331fcc7840231d89662823cabee174f2cf24b998ed537a5741da2e3f2549382fdbad065e335112fbaf4349af693abdf703383e7b7e9c1794cebc2b65b81406a1","ssdeep":"","tlshash":"bed02b9035133fc6fece2585f0835778722580343d518285013fecb115e05c6c4c3e98","size":282,"data":"","first_seen":"2026-09-25T07:27:18.964834Z","last_seen":"2026-09-29T06:39:43.040859Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bda12d72722f3828fdf818c1583ea3f2","sha1":"2024ceecbd2e0d1d39db254b4f3b4fa869bf183f","sha256":"eccfcb828567967a760642a350007a5b01a2c68b8b9ad3d9b624b547604a0901","sha512":"19aceb177835ff3ad7506e9d700e96cba68f9894c9c88c58af1a94af56270540b8cdeb2f8153d775ee72ed7f0c1a1b9598f6d176966b96a1f25414b873befe79","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000c00000000000000000300000","size":2,"data":"","first_seen":"2023-03-10T13:42:56Z","last_seen":"2026-09-29T06:39:42.983255Z","times_seen":3479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5ce8cac8fdbae47fbdffa6d2c9ca94d2","sha1":"1e53e118ea2d3a433cc0fd3cdc90c3f25043c1ba","sha256":"9745d326ff0ce2aa5d4dd272adbca63ed00473fd5c95518ca1968e7cbba537ed","sha512":"2212e0ae1051f5ea3fc9674de3ef437151f6b9cd286e0a4dd377ab1e1d450b23acc0fb586ac476aa200c3e93ab8a04e9916e7ad874a31f18c8300784fc1d9e42","ssdeep":"","tlshash":"cdc0c051792c24800cb93ddf348ec03c83230a431c130400144410c81ff2e538c3ce71","size":191,"data":"","first_seen":"2026-09-25T07:27:18.946133Z","last_seen":"2026-09-29T06:39:42.984629Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"[CoingeckoCoinPriceMarqueeWidget] This widget is deprecated and is no longer maintained. Please visit https://www.coingecko.com/widgets to get the new version of this widget, which features a new design and better performance!","filename":"https://widgets.coingecko.com/coingecko-coin-price-marquee-widget.js","line_number":7,"column_number":63396}]},"http":[{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/coins/markets?vs_currency=usd\u0026ids=bitcoin,ethereum,eos,ripple,litecoin\u0026locale=en","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.131Z","timestamp":1790658156131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 17:41:37 GMT","end":"Sun, 29 Nov 2026 18:41:33 GMT"},"fingerprint":{"sha1":"AF:2C:42:9A:79:10:B8:27:14:C9:00:42:5D:31:6A:C2:E6:36:52:D3","sha256":"E1:48:0D:AE:71:35:F2:0C:8D:1B:58:67:01:07:1A:9F:9F:40:1E:A9:80:CD:29:A0:0C:EC:4C:75:20:A6:EC:40"}}},"request":{"raw":"GET /api/v3/coins/markets?vs_currency=usd\u0026ids=bitcoin,ethereum,eos,ripple,litecoin\u0026locale=en HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=4,i=?0\r\nx-cache: Error from cloudfront\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncf-ray: a4286fc40e7056c5-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvia: 1.1 4f3b3e4960def083f12c206ccc1d9d5c.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Ha-QaF15O7E-O2aB5qnBt7rj0USYHrUh_jDTk_VPOWLiKUrD9GbpAQ==\r\nx-amz-cf-pop: ARN56-P3\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":919,"size_decoded":987,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"90a755a5074a53b55e6ad1683d2f281f","sha1":"8c113ce8dd2e113e96308b170ea3a61e7f6a7362","sha256":"e105f514ea1b01205049ae0e4c6d7a00af07d33744360a2680a3112a9c6b4024","sha512":"a6476802f538020436394df781ab93a99d25be0faec8055c70cb0d2f84d314c91b8e0d9a20a3fcdac042d00b237e09884e1cf32136a3a5e695703ab379318b73","ssdeep":"","tlshash":"b611eb6fe45c341351437119ef48db786a35527bd6b1419c60f6849e309b3e8c3ea1c0","first_seen":"2026-09-29T05:03:56.23943Z","last_seen":"2026-09-29T05:03:56.23943Z","times_seen":1,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":18,"dns":0,"connect":9,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/slick/fonts/slick.woff","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.378Z","timestamp":1790658156378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/slick/fonts/slick.woff HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://envoycore.click/temp/custom/slick/slick-theme.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: font/woff\r\ncontent-length: 1380\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"564-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1380,"size_decoded":1758,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 1380, version 1.0","md5":"b7c9e1e479de3b53f1e4e30ebac2403a","sha1":"af91c12f0f406a4f801aeb3b398768fe41d8f864","sha256":"26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc","sha512":"976f6e9d65859b1a5e3bbd426441e6885d1912f5694f40e2897b10f46b3bd0c7d940f7917a6050d6bb8cdeaaa5e5f0332391d3d398f6c21ce27299dfc7036911","ssdeep":"","tlshash":"cb21a55dbda5eb19fe9ed376738497e1bb1e849db2a20246990e2e3db280040a880655","first_seen":"2023-04-05T04:33:55Z","last_seen":"2026-09-30T01:36:09.643027Z","times_seen":26494,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.116.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:37.746Z","timestamp":1790658157746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1890\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1890,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$pDs5O19RAAaRV968sVfeojr959ikSIOnAEABEArZ1GlcHvYJtZ44IgD5Vn0NpLxkFPQPdjZqdjolfQDDSfgS8dgv5T-r4225ubK0Wwc1xK5Iql_kd4c51gTNngAAAUjOAAAAEPQBB-IAWb1rQSYyNk1Lvz4NUqDVlPThnaPnj_rZWppBPZzBTCZjy5SPAJ06rBLTlXt9LQMdd5AoQi_t7Nnvr2vH_pEUDivEoWszLqAg-MlcrAyKKGpTDJOY0ynHIpF3BQSunfN3b-OcVgO9TRst1ReORkzyKN3rC_emdILa7eMeTK_vjC-OPMD5IB0MCOlZwtEvfPsR4PcsfvgqaFBBgNXkR02VC_DzD8Q6sTxHTKE2PvO3WOEqenLri2-eVhhJS4lBE76T5YxmEMUW18nNkjjwcY0viMoKLZ4ZpFjlQEdKN2FaHH0uic4B35_XEUgE7pPs6XWY_Z3fatubiRKOcWNLodQZYfCOZ5VZ98mILALL41Ur_22mFK4da1wBLSL6zyKa8mHH8NwLAdqwo6KPi4QmFhlKeABG327BFbB2SXhGKn3XpDZ_8vg_G8TcfAvAx-iCyFDg6i0vVZELw5YuW1k29Gm8nxjh9p6OHkUZukcOPXIYleY2e01lkZpBIF7paj-SQDW1Us_mKBm1oTaGT9C6eaC5bojkM_AuzE9CO_agXAp3OoiC08POQY7Y26R51fcMxKkGQLMG2zm5IFfoOX03TOLzwtPlM1jlsl-jnhEM7XQTiIIraAgIkwh1GWu41lFeg-NnKYxEpJnPlCWT75pmEO81HcGzqBF-h_5ZJafGCgymUxRNO80bjhCCcNe5Nv4E_TPUwPzTbVTL_pyAr0R0M5jWfE4h157jzWjrtNMEVgiCP2c5WHwInAvD5c5xFsTgKZV2-mvkcvDL2OOzJpigTJ6LnxtHk6yYmlYT4W-Ssi7QF6Y2Ez3gCA1Y1keK_L1uqCmRwlLwC40z7C2--bl1ljQgYdYkK2f1iHdATDc_U3NNlVqb2wu9bSVBoz4l0ehM6HFqZw7earNSZAOkEaTdd_NtG3gOxOFFzeGA5aymKrvKaAGuV7o1rG0Z9w3vr1nsqUOnZK3JkKFFwLrgvy1tT7raHPxsXqdMv4DERfaAlgr2wNAMvNZmSCLBq8_TWPye0735yHI1dnQnI34kKIGfqgBPbjYVCTGm9y83rhiRiJHrq7Wuj1FEjdQvmQnJC-7cG268r0NJmo6cUBXSlmmWhCzJt7PaL70Rz9CUfoAU_U7NiHpaBdXA4SK4Zdv_H6XqBcvN8T4g2hnBtD9npYdtVzkHFy3u_0e01nkkOPtmi1oLs3yyzmWx5IsKTDD6PlYxXHzNJhBKDlt5shBIJa3KWUOeONIJ0Cv4HjgJCgp0mZpzUXWBnbD1Mam9EABf_Z7_9jFh5pVV0BBdCSzuiq85AyZrLWMifjdLXfOrm0QzvUPQXg234Dm0QOBA3-iPgVNmqtgCwsdyAtW0YGturHmWRsfYE-As20J0VRufTSZbKBRWECB8t01yCXVr9WsJkC5JhyJwv4-VBuQ6hshDiXL3R6yQv_fZAPyUVyhf0NaIeqoJ2ynPaWelcjOxWZQt_v2nv9gzeHkipwgHyhqC3IlNkXA0_oql_vX7pD8ba-3hBsSDo5lF2q-WmQ4NrJOsT0HXftX_DzMOuYuc1KZktFd3YihGTArCsNDrOUolW0plxC-Otx7c8BIuED9C9qjMMjgbEqyOziIZDFViKN1ZFQp2bP-ebIsM8_PntX35gTx3SfsF-YpkZylN9CUVql65JBWzJoFID0U_BDBNb_uAtrRSOgdogsHPWbzC4BpXIgfc-Irm5EpN8T5IDHxp4o5rbA\"]"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Tue, 29 Sep 2026 05:02:37 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":662,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"db76504de2941f32b63f3ab3b07df673","sha1":"d088168537199590a38c753ca132f515456cc692","sha256":"ccb69e0a7cb6a7feaca237b0b8347bdae6ccaf52ab8c464b7fe6db5e341fb86c","sha512":"f8f617218c7f8a8c381a115a6ba92590ef59967669c97687fd5e07d39d36cfa7f541f5b6320dea2c15e984015933718b340f24c90f92b733d2bd10c367a3666c","ssdeep":"","tlshash":"48b01200fcec06bb7d94438027b4240240409ad5636f0731a5975640e7124430d6a25c","first_seen":"2026-09-29T05:03:56.241692Z","last_seen":"2026-09-29T05:03:56.241692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":1,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.795Z","timestamp":1790658156795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 21:40:11 GMT\r\nexpires: Sat, 25 Sep 2027 21:40:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 285745\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":1361,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-09-30T04:02:09.215937Z","times_seen":37489,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/cannabis-legalised.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.830Z","timestamp":1790658155830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/cannabis-legalised.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 930888\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"e3448-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":930888,"size_decoded":931271,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 3421x2280, components 3","md5":"f55e2332080c6ca5b67439ab15811e30","sha1":"8a61a7af5f8d96d2bd6af1f43f13f672f608f510","sha256":"ed936bcb16b618378dc87b1b26af543bbc3664ac748d2a50996e4dc73aa63338","sha512":"a92172a0bd59b7681686640bbbe19b15a1ae503fb29b3a59ac8b0fb604d84a8ea759e5d42a7868d7ed12b3b38a0892380d57843fe673552845e39a9b8dd3f6b9","ssdeep":"24576:DJY81E/P6hLJIgGKclCawU7UUXngziBeDsUp6tGkHXq:DSfAJIgRaw+3gxp6HHa","tlshash":"2b1533747e46cde3d2e92a823059061c736efdb6bd1b5a08362640d166c3587fe9133e","first_seen":"2025-03-18T04:27:57.403157Z","last_seen":"2026-09-29T19:08:13.521372Z","times_seen":562,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/nwgAyqBHFFi2W9LKQghwb3A0rEg5C-dyKchYZGE_VuI.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:37.129Z","timestamp":1790658157129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /js/th/nwgAyqBHFFi2W9LKQghwb3A0rEg5C-dyKchYZGE_VuI.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 24208\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 04:33:05 GMT\r\nexpires: Sat, 25 Sep 2027 04:33:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 21 Sep 2026 12:30:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 347372\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62888,"size_decoded":25019,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61640)","md5":"7f5d87614fc8dae64fbe8785300117fe","sha1":"88efb28e35d0b241716526721d444b31d12811b7","sha256":"9f0800caa0471458b65bd2ca4208706f7034ac48390be77229c85864613f56e2","sha512":"f517c28940b7a5bd4d5c53e50451f05194cd86041545edf56150aeff84494375e2c1478847c9cb3c1d4189ef852a249d1e45d8e68c3a134156990989dc3a9c6b","ssdeep":"1536:jSgzM2E4db7olU4og97EpiRvyNVZQP4Due7Yoq3:Yub7olVp977yNVRukYoq3","tlshash":"da5317deb2d173b018f361e1a05f420d63bb95949c88285eb925ebf42e70947907bf39","first_seen":"2026-09-25T07:27:18.758345Z","last_seen":"2026-09-29T06:39:42.836079Z","times_seen":612,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/css/main.css","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.784Z","timestamp":1790658155784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/css/main.css HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 7503\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"9a16-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39446,"size_decoded":7933,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"3e8b5a8c85460cffe614029b6bfd67e5","sha1":"1e67df76af6402c86c76818555c3871aca4c16b5","sha256":"f208eefcb0c1eb9704eadeb8e5abe4eb720bb31569fe6713e1cd3743171227a7","sha512":"79499baa50afa59a08597b6a31a1c7e7f805b6db2b9b8ac6101d86f9ca67acb4118a7d3bfe90c95b16af02b8ac5589bdbb64a11f94f5158de93dd9a2041b3f03","ssdeep":"192:C/JTy7m+XgmQ4DFcDwDFcDWDFdDlXds3I9hoa2TAsD6lyHSXmtGsd0+NUCcHNGXt:BaaYjDBjhUCNQ1jzecPGX2fHd5Xedb","tlshash":"54034f9cda1621037237dab867e20756fb6400a3cb02016cbbddb2558ff45a88676edd","first_seen":"2025-04-22T02:01:38.824126Z","last_seen":"2026-09-29T05:05:43.764888Z","times_seen":199,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.121Z","timestamp":1790658156121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:53:29 GMT\r\nexpires: Tue, 28 Sep 2027 15:53:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 47347\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":35740,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-09-30T02:20:19.436833Z","times_seen":10425,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":68,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"63.181.39.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:37.308Z","timestamp":1790658157308,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://envoycore.click\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: p+JhfVMdX+3elRwCjbgbyg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 29 Sep 2026 05:02:37 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: HTe/C6n6OlrlvozaB7YwBmFHl5U=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T04:35:38.282382Z","times_seen":18732258,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":70,"connect":89,"send":0,"wait":22,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/storage/app/public/photos/D94XcdxgUNrvuKQeXHi1cimuGF56iQ1V2iSnXpk0.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.817Z","timestamp":1790658155817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /storage/app/public/photos/D94XcdxgUNrvuKQeXHi1cimuGF56iQ1V2iSnXpk0.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63131\r\nlast-modified: Thu, 24 Sep 2026 14:03:22 GMT\r\netag: \"f69b-65c3b10082b55\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":63131,"size_decoded":63512,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1520x506, components 3","md5":"2e391a6ad98bfdf840efcfd932e7f846","sha1":"c9ece02f2cdfd64e0bbd8f045596ce4d710145bd","sha256":"00abc3543ca112cf0ed296d4be3c6f1a69dbed5dffef89e7d033ef72362baa4f","sha512":"0dc9a8b76bf91eed4957a6ba522932bc108526c5f36ab0c55ec29c7150209405db7fb138633dab6b6851d0a030a0a49de8b65117c99f7684d07867fa81193685","ssdeep":"768:x+XW8E1zC8AcB2yCgPMptuAOxAt46FTqbsyTS/RK20I8arDJNUFXB4hDUarjCH6y:MGC8AtyHstuylqblS/s26sSFx4lxZ4","tlshash":"2e5302ec422351ccf9274db66bf29e05e5b92319c0be04a182d78f0bd94fa0d703a21d","first_seen":"2026-09-29T04:49:30.489008Z","last_seen":"2026-09-29T05:03:56.247743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/v3_0473660.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.822Z","timestamp":1790658155822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/v3_0473660.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6493\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"195d-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6493,"size_decoded":6873,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 128x128, components 3","md5":"79516e0e08ecd4f26f179e82549f2f89","sha1":"f6038347935fb667021cb58791368b43fffcc8f3","sha256":"97a3df4c61f939660a54cfbfb1ac77cc7939b88ea38d2574c324ec85e422ade7","sha512":"d439d49ee43be35e9a52984b8c20f3ca9dd2c85689db9d0ceb9208682409db3b80abd489030deb42664f4561a5ca98c665b86ed1508848d868ff667435f97821","ssdeep":"96:XmZEsqS7Wn26kKX9aufHJe9+0BzgrZqk+a2aenqhddfmHTD/mZU:XKUS95DufH89IrZpfdKua","tlshash":"2bd16d636f329f81d9faf8f8420ad817422cc8d7a927bf4b5b390955bd738b14b42065","first_seen":"2025-03-18T04:27:57.420628Z","last_seen":"2026-09-29T19:08:13.537299Z","times_seen":506,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/forex-investment-sm.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.826Z","timestamp":1790658155826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/forex-investment-sm.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 104779\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"1994b-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104779,"size_decoded":105162,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"6d151c71ab3804dd08464df134c5eb5c","sha1":"f61ed4d743c8ac0234e6f658bbe73fb8ac49016d","sha256":"1b96f6c6d53f390d0364b45bdab190e4f66e357e1648023acf2dfa6f0de3f3d9","sha512":"0c092a4e518ba544cf24b6fb50371b794c42c30c8534c09ac58e197cc5e9d57370d3834d717d8aa3ec1680000616d3ee9bf175941fcdf1fb17ffcf27042d2b59","ssdeep":"3072:ZvsEfdDR84g4acvSPqKdLJ3r9VfCyb9CwxX5:Z0uR8IacvSP3dd3rOOX5","tlshash":"e1a312754d4f85c99ee1473293d48db20fdd8d615b80cb69ba2e60aebd72826e407b30","first_seen":"2025-03-18T04:27:57.381676Z","last_seen":"2026-09-29T19:08:13.588326Z","times_seen":565,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/stock-investment-sm.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.827Z","timestamp":1790658155827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/stock-investment-sm.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 187318\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"2dbb6-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":187318,"size_decoded":187701,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"fc3e76cae0486fe2182e9580e7870ff0","sha1":"8b0885866f9dc0e6c22b63835c1be191ca0fc918","sha256":"26f8d247ea6b71c8e25a3dd239601cd0e4689f69cbec277e8e8d94987b7bf8d1","sha512":"8b7527cf0d06984371195bff3b27aae5c249bb7e83b72fd657a6a66aaa1a55932a6eb7eaf83b64895ded0ddff7748894360f3dfbf2fdd1245e03be804982744a","ssdeep":"3072:Q16tfXP9p8hwE9OwLVq8bOd6bDhD5ZLiB27bJWJ71aXaZktAO8tc:QufPLW9BtO6ZLyaEp1aUe","tlshash":"e20423408f34a8ce8aff9375bc26c202d258b9994e20feb7f02485e57cc59ee2547e44","first_seen":"2025-03-18T04:27:57.412829Z","last_seen":"2026-09-29T19:08:13.539454Z","times_seen":567,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.DV8fl7iVyDY.2021.O/am=AAAAQA/d=1/excm=base,root/br=1/rs=AGKMywFYdK_D4h67Sn156xHeEA5iSDBdgg/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:36.684Z","timestamp":1790658156684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.DV8fl7iVyDY.2021.O/am=AAAAQA/d=1/excm=base,root/br=1/rs=AGKMywFYdK_D4h67Sn156xHeEA5iSDBdgg/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=22.YT=rVfxr06H7f1OtqGm21uzjrsEbehXBbbnDq0NaZhnukpIDssuYHLpilXK3hK-fUnBX33mKM71eAR0NTjY0O6Qw6_ggt4LTNgy1EuyXmD51b17haLuIBythNQx4heVrHb0_SnaiT4bc_Yhz2zcF-78WE-zrNoFs0zsaGIYBcbh4irYMzoDg0NzHAG_OBwDGInSnP_vu1_6CurCWvwZnjhRU83MISjN7GjTe2G-faIACxeZRG7edNQL8T2xQyyMmhEwApbB4e_pyNf5AW07sduK7m3aJSBZlUBXQOX9JjyZdoiZua_M-5RaEKeNrunTTZsmpKewSEQNHi_6FkeXIen5Ww; YSC=g9IepxQLdOk; __Secure-ROLLOUT_TOKEN=CMeY-df4kN_6RhCKws26gZOXAxiKws26gZOXAw%3D%3D; VISITOR_INFO1_LIVE=2XFW6yZMAZg; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYg%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 159268\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 12:48:12 GMT\r\nexpires: Tue, 28 Sep 2027 12:48:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 27 Sep 2026 03:10:06 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 58464\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":468709,"size_decoded":160181,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"f10c726644a66041c5c521d93891cf72","sha1":"5eef531dc77643aa1c41360c7022b220016af12a","sha256":"ea8609ba7d9dfc90d2763753278c34bb04c16401b7d474880b51164f8d897e8f","sha512":"0078505a845666a1c38e8c8bf495fdddba0f886206e787e50272c785d119565a25e330702f3f7ba6c5410f59312d7120ef7a7dd05158058a00cacb1d8b0df925","ssdeep":"6144:ZBCF8lyu7DCwRfU3VzsbZEIefVdzQOVYIRopwqBN/oVrNNxJnCw0P4qxnAXsGWKO:nN5U3mbZEvNdGOJnCwPqxAXsGWkw/t","tlshash":"01a45dd973a270239296f5a4902f0107b27ba896f44c8c7cf6d8d9c52db494946bff38","first_seen":"2026-09-28T17:18:53.837575Z","last_seen":"2026-09-29T17:31:08.730055Z","times_seen":79,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/coingecko-coin-price-marquee-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.791Z","timestamp":1790658155791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coingecko-coin-price-marquee-widget.js HTTP/1.1\r\nHost: widgets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: qdG2E7yuprzpD92tmuQTHsg9WLeSp2GAwFbdpwF/9TG6OqrOcrw49t0xAy9Ru0CuvBXrKO3HxYfGer2Z34j64aw/9qIl8DZg\r\nx-amz-request-id: VXPQAT8JR3CV0BYQ\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 03 Jul 2026 04:41:16 GMT\r\nvary: accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: pUfu3vFk32PoX9Yh9wO6PBDW1nhUzKSO\r\netag: W/\"c943d4422dad6300bbaf689c2211180f\"\r\nserver: cloudflare\r\nage: 114993\r\nexpires: Wed, 30 Sep 2026 05:02:35 GMT\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: a4286fc1df5c712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230974,"size_decoded":69869,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36129)","md5":"c943d4422dad6300bbaf689c2211180f","sha1":"4cf78792b3a9dddc6f2ee8219bbfdd213194f144","sha256":"d8d3d9a390c75f612142118d3281d85b95cb50e84c2f6d9438daa83efa8e2437","sha512":"c5516ee60fdc9e900036dec072c7c2de8d01dcfce22fc901048697428c43604ea8dd8d907abda960ce8aae5201ec7f649300af511c8bcccac469a9541f0d9d4f","ssdeep":"3072:/uPfvYNJshGWDSBttCWINmVZrnPodE5rUzpI4Oz:XYBctCo2c4Oz","tlshash":"bc34198eb6c0f19947b693e9605f394ba77d28fc68884380e972f4e5587e05c6132f6c","first_seen":"2026-07-05T23:38:03.171209Z","last_seen":"2026-09-29T05:05:43.771617Z","times_seen":449,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":22,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ab-h6dkmuVc.O/am=BACAAQ/d=1/ed=1/rs=AN8SPfovqJUGAW4ETDB67pGIfxn-HD1wtg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.084Z","timestamp":1790658156084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.ab-h6dkmuVc.O/am=BACAAQ/d=1/ed=1/rs=AN8SPfovqJUGAW4ETDB67pGIfxn-HD1wtg/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 101578\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 02:33:03 GMT\r\nexpires: Wed, 29 Sep 2027 02:33:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 28 Sep 2026 19:51:53 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 8973\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":292791,"size_decoded":102437,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2553)","md5":"e07202748f52b275a366dc765dedb884","sha1":"8768bb00ab50be7dda6103811f5cf3ee6b2a11bf","sha256":"9561c041bc10fdca6bd46059bcf9ab2c596a4251efe7260a00979ce2ab0663c7","sha512":"d550d20f48c2998189902c4aa1c7707eaa0ae68b066848cc8efe56806c6f8efb636713a0f66f7aea54dde10af65856ea6ddc0cfef77456cfd5d4feacba13c7c5","ssdeep":"3072:mL9aWR+K+zPZCPzb+bk1fRz62/OlDcpBi4unoLd+X9hcxBZoyZR:NzOzvVwIuTKB","tlshash":"c254e8ddb29670b79363f4a5513f004ab13b68a5f8484dacb288d8e26df4909417bf7c","first_seen":"2026-09-29T03:06:52.258789Z","last_seen":"2026-09-30T04:22:25.095069Z","times_seen":38,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":2,"connect":29,"send":0,"wait":30,"receive":78,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-C4Ptsyox.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.856Z","timestamp":1790658156856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/shared-C4Ptsyox.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6ab4ecd1-4e9d1\"\r\nexpires: Fri, 24 Sep 2027 09:27:50 GMT\r\nlast-modified: Thu, 24 Sep 2026 09:26:41 GMT\r\nx-77-nzt: k5xnCDRpaVfANfzDlK5/thCgegcpwXtPNU09+RjN5+Mbe1vlPkWY8aJIjFPeA5gcYusTIhE\r\nx-77-nzt-ray: fdb54123fc4cb8ce9146bb6aecca1833\r\nage: 416086\r\nx-77-cache: HIT\r\nx-77-age: 416045\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":322001,"size_decoded":107698,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"b36d702e3e683b008b927b0c9b96bdf9","sha1":"ba9cc05993bba55735f2b82da0acb0831b437f4e","sha256":"f48e6ef3e5251ec45c426e1a44d7bc9bf044833a5a7eb2a9e7ab9237cbaf8c0b","sha512":"460d078654a42b5b6feae064b44e20a4c73d3d520253af8ec9d22113dbbce26c12009f1674cda006a3102fe4cdecf5a86eb47c45cf7d119b549422a84ecc8b7a","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY9y2KQgcu5UUxtvmB0:cOEIqXrP3nJwar/KqvmB0","tlshash":"c6642bc57290b03543d791a6906f1109b33a5c18580d812cf269edf67dbaec8b2b7fb9","first_seen":"2026-09-24T09:31:54.987317Z","last_seen":"2026-09-29T06:05:19.010952Z","times_seen":82,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.126Z","timestamp":1790658156126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:53:29 GMT\r\nexpires: Tue, 28 Sep 2027 15:53:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 47347\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":35740,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-09-30T02:20:19.436833Z","times_seen":10425,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":23,"dns":1,"connect":47,"send":0,"wait":31,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.348Z","timestamp":1790658156348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:53:29 GMT\r\nexpires: Tue, 28 Sep 2027 15:53:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 47347\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":35740,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-09-30T02:20:19.436833Z","times_seen":10425,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/proccess-box-arrow.png","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.368Z","timestamp":1790658156368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/proccess-box-arrow.png HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/temp/custom/css/main.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 16334\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"3fce-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16334,"size_decoded":16714,"mime_type":"image/png","magic":"PNG image data, 1490 x 263, 8-bit/color RGBA, non-interlaced","md5":"0dd316e116e17f7d7517466f824ce9b7","sha1":"4543ef53c6fa9fe6e4a3247e3549a2558d9c8178","sha256":"70a4fe15a5bd83d6c6be718edd76d79f376a2ec053ed4f145c10a89f7722ca83","sha512":"6d7a588326f88ddfe15a0ef2f0c114793a7be74c09c1ea24cbb69dab07a37f1ebcc108da1968f8a8f04164b2d0110d1d75e649545b83ee998b30fb9e2b1fbf20","ssdeep":"384:k+EBl/lCSqJz6KOG3QgdziFeKzU6Cb0HC63jjfLy:k/RlCj/BRBigKzU6Coi63jDm","tlshash":"a972cfc7e09f1c32dd446a7af0fb1f57b694478e0a6041717fadcd6518239486acbc86","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-09-29T19:08:13.486141Z","times_seen":576,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/storage/app/public/photos/QVHSlofq0ceYBXt2I6GZV8MQc0n6v3KaGZYXHgAI.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.774Z","timestamp":1790658156774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /storage/app/public/photos/QVHSlofq0ceYBXt2I6GZV8MQc0n6v3KaGZYXHgAI.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63131\r\nlast-modified: Thu, 24 Sep 2026 14:03:22 GMT\r\netag: \"f69b-65c3b10082f3d\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":63131,"size_decoded":63512,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1520x506, components 3","md5":"2e391a6ad98bfdf840efcfd932e7f846","sha1":"c9ece02f2cdfd64e0bbd8f045596ce4d710145bd","sha256":"00abc3543ca112cf0ed296d4be3c6f1a69dbed5dffef89e7d033ef72362baa4f","sha512":"0dc9a8b76bf91eed4957a6ba522932bc108526c5f36ab0c55ec29c7150209405db7fb138633dab6b6851d0a030a0a49de8b65117c99f7684d07867fa81193685","ssdeep":"768:x+XW8E1zC8AcB2yCgPMptuAOxAt46FTqbsyTS/RK20I8arDJNUFXB4hDUarjCH6y:MGC8AtyHstuylqblS/s26sSFx4lxZ4","tlshash":"2e5302ec422351ccf9274db66bf29e05e5b92319c0be04a182d78f0bd94fa0d703a21d","first_seen":"2026-09-29T04:49:30.489008Z","last_seen":"2026-09-29T05:03:56.247743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CoaqmBWZ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.857Z","timestamp":1790658156857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/style-CoaqmBWZ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-8d76\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k2sb0zHtrmqxa8hsviGLGDnJcLpdhOXRuGODodRgt/wbc4arnGi8921VrbmzqO2qbH7CLVM\r\nx-77-nzt-ray: fdb54123fc4cb8ce9146bb6aa8d12d33\r\nage: 1196537\r\nx-77-cache: HIT\r\nx-77-age: 1196537\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36214,"size_decoded":8228,"mime_type":"text/css","magic":"ASCII text, with very long lines (36201)","md5":"d67581c9b3003d85736b4a54c38a6f38","sha1":"0ada53753b0d87201b854a692e2bafd682b99811","sha256":"f849d090665d31e2c158996956b91a47ca60d0beb614a0ee17b25d3172636a86","sha512":"f7d871280eac56430f11bdeea780dd2d1681bea7347a9ef71f8977455147ac51a86ab59e2d5b9379677debd38ea37f726fd75207f250eeb57cd3013e70710c3f","ssdeep":"384:F8fY2l09kg7Tc6/WYtGLadKzSVX8Kj6+iZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM09kgTcCWYtG4XicrNSN56DwQ43","tlshash":"06f2966daad9093dac23c179e3f8e58c911af5e5df3226daf74239008ac17ff0986514","first_seen":"2026-09-15T08:49:00.636328Z","last_seen":"2026-09-29T06:05:19.040445Z","times_seen":285,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:39.902Z","timestamp":1790658159902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Goog-Request-Time: 1790658159883\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgsyWEZXNnlaTUFaZyjsjO3VBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYmLfAgrcAjIyLllUPXJWZnhyMDZIN2YxT3RxR20yMXV6anJzRWJlaFhCYmJuRHEwTmFaaG51a3BJRHNzdVlITHBpbFhLM2hLLWZVbkJYMzNtS003MWVBUjBOVGpZME82UXc2X2dndDRMVE5neTFFdXlYbUQ1MWIxN2hhTHVJQnl0aE5ReDRoZVZySGIwX1NuYWlUNGJjX1loejJ6Y0YtNzhXRS16ck5vRnMwenNhR0lZQmNiaDRpcllNem9EZzBOekhBR19PQndER0luU25QX3Z1MV82Q3VyQ1d2d1puamhSVTgzTUlTak43R2pUZTJHLWZhSUFDeGVaUkc3ZWROUUw4VDJ4UXl5TW1oRXdBcGJCNGVfcHlOZjVBVzA3c2R1SzdtM2FKU0JabFVCWFFPWDlKanlaZG9pWnVhX00tNVJhRUtlTnJ1blRUWnNtcEtld1NFUU5IaV82RmtlWEllbjVXdw%3D%3D\r\nX-Goog-Event-Time: 1790658159883\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260927.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 989083694\r\nX-YouTube-Page-Label: youtube.embeds.web_20260927_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1790658156809\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C700%2C394\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 12934\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=22.YT=rVfxr06H7f1OtqGm21uzjrsEbehXBbbnDq0NaZhnukpIDssuYHLpilXK3hK-fUnBX33mKM71eAR0NTjY0O6Qw6_ggt4LTNgy1EuyXmD51b17haLuIBythNQx4heVrHb0_SnaiT4bc_Yhz2zcF-78WE-zrNoFs0zsaGIYBcbh4irYMzoDg0NzHAG_OBwDGInSnP_vu1_6CurCWvwZnjhRU83MISjN7GjTe2G-faIACxeZRG7edNQL8T2xQyyMmhEwApbB4e_pyNf5AW07sduK7m3aJSBZlUBXQOX9JjyZdoiZua_M-5RaEKeNrunTTZsmpKewSEQNHi_6FkeXIen5Ww; YSC=g9IepxQLdOk; __Secure-ROLLOUT_TOKEN=CMeY-df4kN_6RhCKws26gZOXAxiKws26gZOXAw%3D%3D; VISITOR_INFO1_LIVE=2XFW6yZMAZg; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYg%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12934,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260927.01.00\",\"configInfo\":{\"appInstallData\":\"COyM7dUGEJ_PgBMQibDOHBCBzc4cEParsAUQ-MSAExC9mbAFELCKuCIQrtbPHBDT2tIcEK_40RwQmY2xBRDBj9AcEMn2gBMQyvuAExDRiLgiENut0hwQtqTRHBC-irAFEK3e0RwQ9-jSHBDa984cEJ7QsAUQ8N7RHBCHrM4cEK6JuCIQ4YKAExCZr9IcEPva0hwQ3rzOHBDM364FEPb30RwQtNfSHBDjh7giEOfr0RwQvKTQHBC-hNEcEMu_0hwQ8bTQHBC-tq4FELjkzhwQpKnRHBD16dEcEOzN0BwqaENBTVNTQlZELVpxLURNZVVFcFVDbkE3NUZYYXZCdUVXdi1RUHV3QU1qUVUwQjU4QnNnVHNxLWtMTXFDc0JBT1R6QU8yNUFia2hSZXN1d1BaMVFYZExKeUxBLU9mQkFVRkJBTWRCdz09MAA%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\",\"windowWidthPoints\":700,\"windowHeightPoints\":394},\"thirdParty\":{\"embedUrl\":\"https://envoycore.click/\"}},\"events\":[{\"eventTimeMs\":1790658156819,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156822,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156825,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156826,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156826,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156826,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658157036,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658157037,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156460,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156290,\"latencyActionBaselined\":{\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156379,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156460,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156470,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156345,\"latencyActionTicked\":{\"tickName\":\"ndnss\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156346,\"latencyActionTicked\":{\"tickName\":\"ndnse\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156346,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156378,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156354,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156378,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156671,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156739,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156660,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156724,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156659,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156701,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156660,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156716,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156660,\"latencyActionTicked\":{\"tickName\":\"rsf_ecc\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156693,\"latencyActionTicked\":{\"tickName\":\"rse_ecc\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658157042,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658156808,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658157046,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658157049,\"latencyActionInfo\":{\"serverTimeMs\":61,\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1790658157076,\"screenCreated\":{\"csn\":\"mHPzv3xFjD_o9bsF\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"bEa7aoXXF-_9xdwP8q2TkQc\"}}}},\"context\":{\"lastActivityMs\":\"15\"}},{\"eventTimeMs\":1790658157077,\"latencyActionInfo\":{\"clientScreenNonce\":\"mHPzv3xFjD_o9bsF\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"15\"}},{\"eventTimeMs\":1790658157077,\"screenCreated\":{\"csn\":\"iREMiVY-HKvYAHdS\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"mHPzv3xFjD_o9bsF\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"15\"}},{\"eventTimeMs\":1790658157078,\"visualElementHidden\":{\"csn\":\"mHPzv3xFjD_o9bsF\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"15\"}},{\"eventTimeMs\":1790658157078,\"latencyActionInfo\":{\"clientScreenNonce\":\"iREMiVY-HKvYAHdS\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"16\"}},{\"eventTimeMs\":1790658157078,\"visualElementAttached\":{\"csn\":\"iREMiVY-HKvYAHdS\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMIk7DOuoGTlwMVkZD0Bx112SuBygEENN9yyA==\"}]},\"context\":{\"lastActivityMs\":\"16\"}},{\"eventTimeMs\":1790658157080,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1790658157080,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"18\"}},{\"eventTimeMs\":1790658157104,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"PA733J4tZ409Ibo3\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"42\"}},{\"eventTimeMs\":1790658157105,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"44\"}},{\"eventTimeMs\":1790658157108,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"47\"}},{\"eventTimeMs\":1790658157351,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"289\"}},{\"eventTimeMs\":1790658157352,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"290\"}},{\"eventTimeMs\":1790658157354,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"292\"}},{\"eventTimeMs\":1790658157356,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"294\"}},{\"eventTimeMs\":1790658157425,\"visualElementAttached\":{\"csn\":\"iREMiVY-HKvYAHdS\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"363\"}},{\"eventTimeMs\":1790658157425,\"visualElementShown\":{\"csn\":\"iREMiVY-HKvYAHdS\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"363\"}},{\"eventTimeMs\":1790658157470,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"408\"}},{\"eventTimeMs\":1790658157613,\"visualElementAttached\":{\"csn\":\"iREMiVY-HKvYAHdS\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"551\"}},{\"eventTimeMs\":1790658157614,\"visualElementShown\":{\"csn\":\"iREMiVY-HKvYAHdS\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"551\"}},{\"eventTimeMs\":1790658157614,\"visualElementAttached\":{\"csn\":\"iREMiVY-HKvYAHdS\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"551\"}},{\"eventTimeMs\":1790658157614,\"visualElementShown\":{\"csn\":\"iREMiVY-HKvYAHdS\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"551\"}},{\"eventTimeMs\":1790658157614,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"f5xVm3Qzqi51qPRT\",\"clientScreenNonce\":\"mHPzv3xFjD_o9bsF\"},\"context\":{\"lastActivityMs\":\"552\"}},{\"eventTimeMs\":1790658157614,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"f5xVm3Qzqi51qPRT\",\"clientScreenNonce\":\"iREMiVY-HKvYAHdS\"},\"context\":{\"lastActivityMs\":\"552\"}},{\"eventTimeMs\":1790658157614,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"552\"}},{\"eventTimeMs\":1790658157614,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"552\"}},{\"eventTimeMs\":1790658157614,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"552\"}},{\"eventTimeMs\":1790658157720,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIDw==\"},\"context\":{\"lastActivityMs\":\"658\"}},{\"eventTimeMs\":1790658157723,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"661\"}},{\"eventTimeMs\":1790658157881,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"818\"}},{\"eventTimeMs\":1790658157881,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"820\"}},{\"eventTimeMs\":1790658157883,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"ECk_OPUq-bHUyaVO\"},\"context\":{\"lastActivityMs\":\"821\"}},{\"eventTimeMs\":1790658158723,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAABydQA==\"},\"context\":{\"lastActivityMs\":\"1661\"}},{\"eventTimeMs\":1790658158725,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"1662\"}},{\"eventTimeMs\":1790658158725,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAADJAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAAAAAiGAoDCgFvCgYKBGFHSWYSCREAAAAAABiIQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAABA\"},\"context\":{\"lastActivityMs\":\"1663\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"bEa7aoXXF-_9xdwP8q2TkQc\",\"clientCounter\":\"29802\"}}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Tue, 29 Sep 2026 05:02:39 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":381,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-09-30T04:36:25.31782Z","times_seen":291475,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/flaticon/flaticon.css","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.761Z","timestamp":1790658155761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/flaticon/flaticon.css HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 665\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"c25-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3109,"size_decoded":1093,"mime_type":"text/css","magic":"ASCII text","md5":"ea599ea4d42d8857576411a32ca71ad1","sha1":"9a3f3981a4d5d504c8dd78eae45e57d047ba3ed5","sha256":"5392f32016b9330f52883b8c33216665f1d5704d7824690ffc905842391568c1","sha512":"5df631c177a112132ae79305062ccc47b0f80c1d9723d16962bab79a1c3578173a8204c1361068e95eeb3a9ffc9f30356f15858fc2957280a58504ba5c9cd90b","ssdeep":"","tlshash":"1b51f554867e4040e7559b881f9f7780a768b02fcdc49c09b2059f6cfee19ad83c1aec","first_seen":"2025-04-28T01:39:11.855739Z","last_seen":"2026-09-29T19:08:13.574318Z","times_seen":587,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.117Z","timestamp":1790658156117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:53:29 GMT\r\nexpires: Tue, 28 Sep 2027 15:53:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 47347\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":35740,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-09-30T02:20:19.436833Z","times_seen":10425,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":68,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.588Z","timestamp":1790658156588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 08:23:32 GMT\r\nexpires: Sat, 25 Sep 2027 08:23:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 333544\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":2516,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-09-30T04:02:09.19357Z","times_seen":93458,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.794Z","timestamp":1790658156794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":717,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-09-30T04:02:09.202753Z","times_seen":102488,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":2,"connect":48,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.DV8fl7iVyDY.2021.O/ck=ytembeds.base.St3vnT6AlO0.L.F4.O/am=AAAAQA/d=1/exm=base,r78Drb,root/excm=base,root/ed=1/br=1/rs=AGKMywG5hJcxmKrm2sS9LxKJK0WcM0SPAg/m=cwx9N","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:37.359Z","timestamp":1790658157359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.DV8fl7iVyDY.2021.O/ck=ytembeds.base.St3vnT6AlO0.L.F4.O/am=AAAAQA/d=1/exm=base,r78Drb,root/excm=base,root/ed=1/br=1/rs=AGKMywG5hJcxmKrm2sS9LxKJK0WcM0SPAg/m=cwx9N HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=22.YT=rVfxr06H7f1OtqGm21uzjrsEbehXBbbnDq0NaZhnukpIDssuYHLpilXK3hK-fUnBX33mKM71eAR0NTjY0O6Qw6_ggt4LTNgy1EuyXmD51b17haLuIBythNQx4heVrHb0_SnaiT4bc_Yhz2zcF-78WE-zrNoFs0zsaGIYBcbh4irYMzoDg0NzHAG_OBwDGInSnP_vu1_6CurCWvwZnjhRU83MISjN7GjTe2G-faIACxeZRG7edNQL8T2xQyyMmhEwApbB4e_pyNf5AW07sduK7m3aJSBZlUBXQOX9JjyZdoiZua_M-5RaEKeNrunTTZsmpKewSEQNHi_6FkeXIen5Ww; YSC=g9IepxQLdOk; __Secure-ROLLOUT_TOKEN=CMeY-df4kN_6RhCKws26gZOXAxiKws26gZOXAw%3D%3D; VISITOR_INFO1_LIVE=2XFW6yZMAZg; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYg%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 15815\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 12:55:59 GMT\r\nexpires: Tue, 28 Sep 2027 12:55:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 26 Sep 2026 05:08:11 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 57998\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58597,"size_decoded":16727,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14304)","md5":"e3ea56ded08b65e0286bd6bd148bb966","sha1":"e1b60209d236afc312bd6bc489795d4d8975c435","sha256":"b16abc07f264a77e72de0e21684ad2f360a28579df97145fa326e5d5d52241f5","sha512":"c1518873e81b4bcaf2fb4081d178db960ba6f1042dae435fa0774cdffd5c05ba697c8100f5c776ad57b78cb9f45309baaea8d95b9e182dccd7e938f6d0b2913e","ssdeep":"768:kkhQDzwd4ZQiA/xI165U+8H16KMA/q4g5jqwkx4eTDZvFZr527eZuj2oDBvIdQ9f:kkhQFZQiUW3x8ui+vvqwc96et","tlshash":"2e430ab431b27570d367b638c2bb9880b56ea413d3946871e4078b5e0dfe8d07662f6e","first_seen":"2026-09-28T17:18:53.843843Z","last_seen":"2026-09-29T17:31:08.631396Z","times_seen":69,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/slick/slick.css","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.765Z","timestamp":1790658155765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/slick/slick.css HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 565\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"726-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1830,"size_decoded":993,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"68a281f599d6a4fa5e8cab54bc5f59fe","sha1":"515cb38cbd76ebee91d05f7544758f4eceaac07e","sha256":"1b786863757c336ef237105e2560e02e2e54b90781ecafb63732662caffe4cbb","sha512":"e001ba8f09719604413c08ad5aa641cc9a5fe286c2d049fa0e86e12972f3d0a72e2cbbb9322734766aaad2fd892ba98c8cc5c91a290da36dd9f36995fe861857","ssdeep":"","tlshash":"2e3119dc0152c5d68b3384444fd38649eeefa0930c241698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-13T11:05:16Z","last_seen":"2026-09-29T19:08:13.593935Z","times_seen":908,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/bootstrap.min.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.772Z","timestamp":1790658155772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/js/bootstrap.min.js HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 14551\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"d9df-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":55775,"size_decoded":14989,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (55494)","md5":"6895e8cd60b62646ce12426015888f58","sha1":"de908c9ed184d74eb525fa7a30449b67fc3a1c14","sha256":"eb795deda8983fa5310627c9584cf3f3b95d272567113500059018b3941cb267","sha512":"f43dfd388488b509a66879608c35d7c1155f93dcec33ca875082f59f35552740d65e9a344a044d7ec534f0278a6bb6f0ed81047f73dcf615f7dcd76e0a482009","ssdeep":"768:tVYe0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:tVc+U2QK+GM4ZIwwoqq","tlshash":"f343b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-09-29T19:08:13.528231Z","times_seen":4732,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/livestamp.min.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.781Z","timestamp":1790658155781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/js/livestamp.min.js HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 654\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"586-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1414,"size_decoded":1089,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (520)","md5":"e1d6370e267b3aaf2045e69eef7ed17a","sha1":"34a700591d34f795a479516b7f72fb2ead5fec5b","sha256":"f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02","sha512":"0b744879a24259e2b930b3d24ab56cb0306f4b06a6656ed483281ce2bdb582e56a91eae8cbdc110436ae810b2c010fa6dc766c31656f12281c34cafb8ee19728","ssdeep":"","tlshash":"7621aaacf284b58519c3a460513f66197791b3bd9d4c8490aa6293d0cf7aa4b713be38","first_seen":"2023-03-07T01:18:22Z","last_seen":"2026-09-29T19:08:13.575988Z","times_seen":640,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/investment-consultancy-sm.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.824Z","timestamp":1790658155824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/investment-consultancy-sm.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65789\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"100fd-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65789,"size_decoded":66171,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"bce108b1f6b7e457c17fd834671653fd","sha1":"8ea5a9e514d2217ae81b6ac406f5cdbe4d0a5fcd","sha256":"80e141a0b2e918793daf5d8c6d43f95ae0d4bc3f479c0cfd816fda3bc1df1731","sha512":"547db66a7a8b6c16dc4b58d620d35d92b5b85d587886aec5c70efa6a24ea42725e9b0640cc9457915b1cd3d6276019721b0702e782a0a02baa5a0e5f4aa4a793","ssdeep":"1536:k/3s0Q2NUrGnNjKB93VoWk7SogjepsipU8QpHXaTPAA:WXNUrAjKBBwSoIxpHqTf","tlshash":"eb5302457cc037d85ded036191ab578b2fb35390e5a2e356baca724c572ba3ced03892","first_seen":"2025-03-18T04:27:57.402289Z","last_seen":"2026-09-29T19:08:13.549239Z","times_seen":564,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/slider-mainbg.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.364Z","timestamp":1790658156364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/slider-mainbg.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 82942\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"143fe-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":82942,"size_decoded":83324,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x730, components 3","md5":"039468794089e95ad715cae031648be5","sha1":"e8938bf54dda55d865849dd8b1313245f2261ed0","sha256":"02dfb50024fb0c935d552f003c96f65409a5e6092010b74fe1f3b08d1b5f309f","sha512":"61d01e7cd7dcc988705ff19d6e0ff8fe5c47f8cacfb5e054e1720859f2c04cc27a1f90d10527853aa2168b5f150ad1cb6ce9a24f8399de64834194e1c55d0b29","ssdeep":"1536:2cm23K8MTTSc2erxQ1DzUGDfA190SgLpWP43uco/4Z:xvaTSqmpUGDI190SAuct","tlshash":"bf83f13bc74f6b92d2eb1732c9c397a8af55a4b0e152010a966d813fbf6d7d66e07001","first_seen":"2025-03-18T04:27:57.416294Z","last_seen":"2026-09-29T05:05:43.768554Z","times_seen":496,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/row-bgimage-3.png","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.367Z","timestamp":1790658156367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/row-bgimage-3.png HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/temp/custom/css/main.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 30335\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"767f-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30335,"size_decoded":30715,"mime_type":"image/png","magic":"PNG image data, 637 x 321, 8-bit/color RGBA, non-interlaced","md5":"4fb3f9e980052107dc63d209f3e3a4e6","sha1":"42e7058bb8018444ad63b60822f504673e83b084","sha256":"e15aaf1d7e0e6d01a65f5142340ae08db269c646596baf9e8678b951014718f9","sha512":"858a60b8f5ac9b069638816288c901df10f578dbae07b45f8ef2206364a93a2a05d82516858f4c5f51a7e83a02a6d51f088e09ac6d415a0807f0212dd5fa7a75","ssdeep":"768:IdVL1Bg91o2uFmlwsGPKNL6aFpq9jsbr8EbQfWB3B:IdzeHo5FttU6SpmjQr8EbS0B","tlshash":"4dd2f13398b29448c01de0327b86db13067f4bf0ca59fa56677124723525764cf6bd6e","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-09-29T19:08:13.497183Z","times_seen":565,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/css/intlTelInput.css","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.786Z","timestamp":1790658155786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/css/intlTelInput.css HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 3672\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"70c8-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28872,"size_decoded":4102,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"36ad59bd54fb93f8e30e3273470b91f1","sha1":"687880cd4146a6841f427ccf8f7dc38084996db7","sha256":"67215ee6059ca860b0c9947f70b739ab8cf2c53ba74d7ab1aa950cbf84fa7c2b","sha512":"d9a968bca0889c579b40efbaf1fc6d6f9fddcd48f80116f33693da9de3bee54ec1a56fa59b4e50a6980371be72e6de645d85cd0f162392c5e4a13daf4be19ed3","ssdeep":"384:9QVEnIft6NOMiac6LHvybiRF6y+CV5mxX5Yl:9jIft6T","tlshash":"d3d24c25cb603409b13bf372e6a04782eb37102be90246acb3da7d55dfa50e455e2fe1","first_seen":"2025-03-18T04:27:46.827076Z","last_seen":"2026-09-29T19:08:13.567477Z","times_seen":592,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.yandex.net/website-widget/v1/widget.js?widgetId=ytWidget\u0026pageLang=tr\u0026widgetTheme=dark\u0026autoMode=true","fqdn":"translate.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"213.180.204.194","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.134Z","timestamp":1790658156134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"translate.yandex.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 24 Aug 2026 11:26:12 GMT","end":"Wed, 27 Jan 2027 20:59:59 GMT"},"fingerprint":{"sha1":"53:9E:CB:5E:1C:FA:1B:26:FC:CD:63:B4:F7:14:31:CC:6F:F7:82:E3","sha256":"AC:A4:93:03:78:19:5E:90:37:18:4E:59:2F:06:E0:B9:91:06:F8:18:8A:20:CA:F3:D6:6D:6B:66:78:2F:9C:2A"}}},"request":{"raw":"GET /website-widget/v1/widget.js?widgetId=ytWidget\u0026pageLang=tr\u0026widgetTheme=dark\u0026autoMode=true HTTP/1.1\r\nHost: translate.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bh=YOuM7dUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; _yasc=XNQKc5V+j4VLEIVClDFXsT6yitBqbo6RU78a9l3h5u/OmDs/6CkWygkbbnK0CYFzV/0NRw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 429 \r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T04:35:38.282382Z","times_seen":18732258,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/slick/ajax-loader.gif","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.361Z","timestamp":1790658156361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/slick/ajax-loader.gif HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/temp/custom/slick/slick-theme.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4178\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"1052-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4178,"size_decoded":4557,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-09-30T04:02:27.738539Z","times_seen":47380,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/imagesloaded.pkgd.min.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.782Z","timestamp":1790658155782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/js/imagesloaded.pkgd.min.js HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1810\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"15da-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5594,"size_decoded":2247,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-09-30T00:47:07.640264Z","times_seen":25173,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.789Z","timestamp":1790658155789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:01 GMT","end":"Thu, 03 Dec 2026 19:22:00 GMT"},"fingerprint":{"sha1":"CD:07:3B:50:75:01:24:0F:C7:C7:3C:64:23:AB:79:7D:38:72:95:D1","sha256":"67:AA:6A:7F:90:26:22:7B:D8:F2:CD:2D:6B:33:8A:1A:63:D8:27:4C:52:08:D6:BA:7B:38:CC:54:84:C7:82:7C"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-BUCKET=CJcB; Domain=.google.com; Expires=Sun, 28-Mar-2027 05:02:35 GMT; Path=/; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-BUCKET","value":"CJcB","quoted":false,"path":"/","domain":".google.com","expires":"2027-03-28T05:02:35Z","raw_expires":"Sun, 28-Mar-2027 05:02:35 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-BUCKET=CJcB; Domain=.google.com; Expires=Sun, 28-Mar-2027 05:02:35 GMT; Path=/; Secure; HttpOnly; SameSite=lax"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2989,"size_decoded":1712,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1824)","md5":"00a08776c6e0a4c084621f949126663e","sha1":"049cd75519cb1dfe1d0fb48cb946e7028d424c3b","sha256":"e912297e6c0c305816fe4ee1b0969d60d9a608ad83adbe9729cc3370c294aa69","sha512":"72ec725881ad1ce0306afa12e927ca797f6cab5e7ce5583ec6840fb4d8558b57262e72a6529775c5a9fcd853e3e12a5a4d61fba2362fa0ad7705d4be616ab0a2","ssdeep":"","tlshash":"2951059a88b6d0c6c4836c29cfaf92793244403bac11dce5bedcd912ffb051ab64d9d4","first_seen":"2026-09-29T05:03:56.263042Z","last_seen":"2026-09-29T05:07:17.494311Z","times_seen":2,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":2,"connect":28,"send":0,"wait":125,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/jquery.min.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.768Z","timestamp":1790658155768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/js/jquery.min.js HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 30307\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"1538f-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":86927,"size_decoded":30746,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-30T01:45:20.134195Z","times_seen":146061,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/css/animate.css","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.784Z","timestamp":1790658155784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/css/animate.css HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 4767\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"13053-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":77907,"size_decoded":5198,"mime_type":"text/css","magic":"ASCII text","md5":"91cc40989e5e96e8d6bddc0f19598441","sha1":"77b5378a2b4bfc120e52782dd869aeab7efe2fd4","sha256":"6b6b686ecaa56e02ec5aced95541a03f922f599b31f1b4cd429ceca824a6e669","sha512":"90750a22634147d99cc10d6ee1120bb6c889982eaee77f5b82445aa5f1ab6f05db90fc5f6a9933017bdd1a7ad3bb76e518d5c73c25f4925ae513bcc0661afe8c","ssdeep":"384:oNuKu1Lsg9unuFl3lH/4/0uJuDqDxbe3NxdV2PVriTKIZQMcLcec:oNuKuWg9unuLuJu9KIZQMcLcec","tlshash":"80732fad2991108456638a1d83df5e68673ce573181aacef73c2488fcf8bf6857c9147","first_seen":"2023-04-05T10:43:58Z","last_seen":"2026-09-29T19:08:13.511226Z","times_seen":24850,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/imager5555.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.823Z","timestamp":1790658155823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/imager5555.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12520\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"30e8-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12520,"size_decoded":12901,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 164x164, components 3","md5":"a09f123688ddee8c4e9c7547561a758d","sha1":"640721b8ac50bb159d54fd37835b1dd88ba8485f","sha256":"2d6a74d0be29e0833594ca7f35a38ff9ca8b80bbee0da06d9e4fad985e806d4a","sha512":"0e10a9fbfa0c43b9891c320ab25da23c1337924b8a1c4ee40a0bc02d0ddb0f2429f1e6b3372f89bb30d1693e8608e2e698d3d521734f6fe0240f7aee89a6c2bc","ssdeep":"384:rrgXSGGdXjidmAVwVg//CJ4MB9NQ9Q0oT:rUXMdmdmuwVgLO4U","tlshash":"4042c041e65faf0d66da2ba24dcbd61b70ad3d1684db09c3ad3b711334528c44eb553c","first_seen":"2025-03-18T04:27:57.422693Z","last_seen":"2026-09-29T19:08:13.58661Z","times_seen":517,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.350Z","timestamp":1790658156350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:53:29 GMT\r\nexpires: Tue, 28 Sep 2027 15:53:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 47347\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":35740,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-09-30T02:20:19.436833Z","times_seen":10425,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T05:02:35.023Z","timestamp":1790658155023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 8805\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; expires=Tue, 29-Sep-2026 07:02:35 GMT; Max-Age=7200; path=/; samesite=lax\nvinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D; expires=Tue, 29-Sep-2026 07:02:35 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-29T07:02:35Z","raw_expires":"Tue, 29-Sep-2026 07:02:35 GMT","max_age":7200,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; expires=Tue, 29-Sep-2026 07:02:35 GMT; Max-Age=7200; path=/; samesite=lax"},{"name":"vinsfx_session","value":"eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-29T07:02:35Z","raw_expires":"Tue, 29-Sep-2026 07:02:35 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D; expires=Tue, 29-Sep-2026 07:02:35 GMT; Max-Age=7200; path=/; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":35644,"size_decoded":10069,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (626), with CRLF line terminators","md5":"cbc855df86e00d0d93d29db6fd898a67","sha1":"464b9800941951f8792de1e33759ab20e8aa710e","sha256":"46d2344fd5480455b76a28421d9ba3dcd92301ee78db4976e2c157d9789c6b79","sha512":"522ed530bf1c029170a3245f579d995abb11c5a8939136103f99eb823a9dd3d98bcd5690b7fd30806ff0068a1581c131cc012f36022c77cac4506ffe11c0ca49","ssdeep":"384:Y0QWucWFELE/VUf9fCrRxqLDRdqL6BRmqLbsL6ddzLSLC3LmLO5dLTLg0LSL7ALl:qWaFELE90XFx7uNBIV8JO05jC7esZ","tlshash":"2ef28124748965bb026382a782306399fadfcab6c72b8951b6fc23771fe2c04dd17475","first_seen":"2026-09-29T04:49:30.605447Z","last_seen":"2026-09-29T05:03:56.26595Z","times_seen":2,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":54,"connect":19,"send":0,"wait":348,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/bootstrap-select.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.787Z","timestamp":1790658155787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/js/bootstrap-select.js HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 25684\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"1b35f-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":111455,"size_decoded":26123,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (301)","md5":"5b04d645561ef0310c7918f03ae43fc9","sha1":"9a6ae4d0aae724a7e032d8d505d9b8816477d739","sha256":"186e4c2c470e3c1c76997b7a4dfd0f618b38311582e0578db05ccada6fd43c6c","sha512":"1a5e1405749a94daa777e7f0c96bfea84d27c174228e8a6f546100325144e133efc430bbd847813d3e8c1223efc15fc927922c337ad61f6cff03106070c6e569","ssdeep":"1536:o68KYv2GWk/QIkzliZEkZe38kykPDpcLmLV2+DgwetQeMT2pY+0S9hNtmk09F3KQ:A7uKbQ0hNM8KmI","tlshash":"e3b3945925a6113582ab30ab4e9f5048b539811f9d06ed283cac93cc6fd4d38a1f7ff6","first_seen":"2023-03-07T16:17:07Z","last_seen":"2026-09-29T19:08:13.585301Z","times_seen":711,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/crypto-investment-sm.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.825Z","timestamp":1790658155825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/crypto-investment-sm.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 94140\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"16fbc-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94140,"size_decoded":94522,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"67019c83e967a0e72bf006b3c202f439","sha1":"01d41a39c437ea54138820ffaaab58bb86e21bf3","sha256":"d9319dba8677abd747aa26cde0db12276501d81b30cad9e175329c07fd3275bc","sha512":"665129cbc534ddaadd9510bbfe1690d485d85073b72e4667cf721b4d76f8ca317ce5581e92d226b9f078cc5be1cdbe421c008b16bd1af0c20cdd33d2092491f5","ssdeep":"1536:xiM96fkCGRm49r8NLZo7HxbE9QXjiv3cjSr6KgRTry8iycEymo++o+YZSRekfcwB:E+mk3R5r8NLZAZXTM9OtTry8Hymo++Sk","tlshash":"f7930250ea6b896050ccc536a8812bacdb265ab7a7d6350f38edf7cde1484f42937d06","first_seen":"2025-03-18T04:27:57.417698Z","last_seen":"2026-09-29T19:08:13.538839Z","times_seen":568,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Archivo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.969Z","timestamp":1790658155969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Archivo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 29 Sep 2026 05:02:36 GMT\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23175,"size_decoded":1494,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"da021909beab0ff8237ca3132d715150","sha1":"cb4dfe7ecbaffe34c9c0f7264a20376fea1c3c02","sha256":"c598de7a97f99eca9a992b31e0ae65ebb1c1744981af3d577c965041fcff3594","sha512":"2ce8f240884297d891fb4e24220c80e23067b7d9185aa514deeaa9b04269f061f1a0cf806096ab311b78ad83467682e96ddcf9d394fb0e9746c4bb7ce702ace7","ssdeep":"384:cO3B3u3UOCZVOrkOOc/3O9K4O+VZO3wyOYbbOJW8v9AeUtGv4RK0:ddeU9Al","tlshash":"89a2bc66142fa580aa472ce337df3d31df4fb194b450887a6ffd2898ac56c22636630c","first_seen":"2025-09-17T09:11:46.441038Z","last_seen":"2026-09-29T19:08:13.502191Z","times_seen":693,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":35,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/92b5637a4ab566156f51945df085be7484d1ba80.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.77.84.117","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.586Z","timestamp":1790658156586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/92b5637a4ab566156f51945df085be7484d1ba80.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nContent-Type: text/plain\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c2-pfQgdZC/2pJdiFSOFWiKML7fs+8\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1218,"size_decoded":887,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b456c62a1d84cea51981f7bc33092b2b","sha1":"a5f4207590bfda925d88548e15688a30bedfb3ef","sha256":"00f6c1308af66939e6eae9a7a060dc11b80131611edb2bbd39c4f24a0ec1cfbc","sha512":"65e4f1a2d21d339a55e9727262b50be3dc07cc4a931537777115ca16a5e8843f170112bffb6138bcd66f238e451d2255b8845b9df96e52e1c51169d2f6c08cee","ssdeep":"","tlshash":"0621226d4a6822fe9245c6d6c5047f075abcdcb37104397efa0d4a4d60eb2a6213646b","first_seen":"2026-07-08T06:12:58.618771Z","last_seen":"2026-09-29T05:03:56.268951Z","times_seen":286,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":40,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/44081942/cc-powered-by-light-mode.png?width=185","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.817Z","timestamp":1790658156817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 01:14:41 GMT","end":"Wed, 18 Nov 2026 02:14:37 GMT"},"fingerprint":{"sha1":"B9:AF:DE:4C:74:4C:4D:7C:9D:1C:C5:5F:A2:D7:5E:D2:22:11:41:C9","sha256":"FA:89:5F:37:B0:D9:87:3E:03:E6:D4:DD:CD:EB:B4:B5:55:50:5E:D5:9C:31:3F:75:C2:37:96:6A:D7:6B:96:12"}}},"request":{"raw":"GET /media/44081942/cc-powered-by-light-mode.png?width=185 HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 7191\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 29 Sep 2027 05:02:36 GMT\r\nlast-modified: Sat, 20 Jun 2026 07:44:05 GMT\r\naccept-ranges: bytes\r\netag: \"2550b791880dd1:0\"\r\nvary: Accept-Encoding\r\nimageprocessedby: ImageProcessor/2.5.2.0 - ImageProcessor.Web/4.8.2.0\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: __cf_bm=52vFaI7pt1epDHzYDvE8Fy2TI1IxS0cKXMOgzXh47c8-1790658156.8331976-1.0.1.1-W97yZukxtA6IFjhWZCKiF3IaU8_ZgG4OVegqu.Fl3FCT.X3NfoyB4x3HY8I6CQ42Xl3KGDUwu9Tv6uz96WkP2yIuzrtod_yXTdCKqJHqGW7BsWqAPEojjH0F82HJbco0; HttpOnly; SameSite=None; Secure; Path=/; Domain=cryptocompare.com; Expires=Tue, 29 Sep 2026 05:32:36 GMT\r\nage: 1480500\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a4286fc83ea623eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"52vFaI7pt1epDHzYDvE8Fy2TI1IxS0cKXMOgzXh47c8-1790658156.8331976-1.0.1.1-W97yZukxtA6IFjhWZCKiF3IaU8_ZgG4OVegqu.Fl3FCT.X3NfoyB4x3HY8I6CQ42Xl3KGDUwu9Tv6uz96WkP2yIuzrtod_yXTdCKqJHqGW7BsWqAPEojjH0F82HJbco0","quoted":false,"path":"/","domain":"cryptocompare.com","expires":"2026-09-29T05:32:36Z","raw_expires":"Tue, 29 Sep 2026 05:32:36 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=52vFaI7pt1epDHzYDvE8Fy2TI1IxS0cKXMOgzXh47c8-1790658156.8331976-1.0.1.1-W97yZukxtA6IFjhWZCKiF3IaU8_ZgG4OVegqu.Fl3FCT.X3NfoyB4x3HY8I6CQ42Xl3KGDUwu9Tv6uz96WkP2yIuzrtod_yXTdCKqJHqGW7BsWqAPEojjH0F82HJbco0; HttpOnly; SameSite=None; Secure; Path=/; Domain=cryptocompare.com; Expires=Tue, 29 Sep 2026 05:32:36 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7191,"size_decoded":8228,"mime_type":"image/png","magic":"PNG image data, 185 x 33, 8-bit/color RGBA, non-interlaced","md5":"93060be98c362aa037ebce82d04b28b4","sha1":"b8139f5ef08991d9486df2d43d29ec58aa411d51","sha256":"35736416592a885016d621e54e517b3406031a4da520bba8e553db054a596071","sha512":"1820fdd4a926f450baf4d0ba36337f83dbf2354d506bf829a8aafcca706068467b8746b4504d8959e4231a6cdf6bb46dbb9e4345923c0a3a7bb1cd303d165cf5","ssdeep":"192:q4oRi9cyvSC+6uqYXk7zs+EWKv1cISjiDdxuuwpiE:T0i6ynHG+EWKvFwqPzwwE","tlshash":"99e19ef30c480fe6950492c61cc2a97c1db8479e51f74bbdbabce85f9424421de6e292","first_seen":"2024-05-16T05:45:05Z","last_seen":"2026-09-29T05:05:43.742271Z","times_seen":474,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":5,"connect":2,"send":0,"wait":9,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doubleclick.net/instream/ad_status.js","fqdn":"static.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.178.38","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:37.125Z","timestamp":1790658157125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.doubleclick.net","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:54 GMT","end":"Thu, 03 Dec 2026 19:21:53 GMT"},"fingerprint":{"sha1":"9C:BB:02:D9:41:9E:0D:77:7D:AE:4B:4E:0B:31:0D:78:DC:7E:C6:CF","sha256":"32:D2:88:58:C4:D4:7A:AD:67:D1:DA:C2:D5:09:42:08:C2:8D:46:72:FF:88:17:93:90:6F:47:A0:29:6F:FD:8B"}}},"request":{"raw":"GET /instream/ad_status.js HTTP/1.1\r\nHost: static.doubleclick.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"ads-doubleclick-media\"\r\nreport-to: {\"group\":\"ads-doubleclick-media\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 04:58:18 GMT\r\nexpires: Tue, 29 Sep 2026 05:13:18 GMT\r\ncache-control: public, max-age=900\r\nage: 259\r\nlast-modified: Thu, 12 Dec 2013 23:40:16 GMT\r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29,"size_decoded":770,"mime_type":"text/javascript","magic":"ASCII text","md5":"1fa71744db23d0f8df9cce6719defcb7","sha1":"e4be9b7136697942a036f97cf26ebaf703ad2067","sha256":"eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9","sha512":"17fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f","ssdeep":"","tlshash":"9e8000823a082223e8a28088830ae2202c82080002220808c028000020808c380088e2","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-09-29T05:03:56.270099Z","times_seen":5232,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:36.701Z","timestamp":1790658156701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 47411\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-30T04:34:20.349716Z","times_seen":1002461,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/x7msE3tx8QI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgYihZMA8=\u0026rs=AOn4CLBe2bWn1to_h8BqX8LbE70rVtsPxA","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.118","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:37.476Z","timestamp":1790658157476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:51 GMT","end":"Thu, 03 Dec 2026 19:21:50 GMT"},"fingerprint":{"sha1":"8D:7F:81:82:31:06:2A:60:CD:C9:33:82:0D:E0:03:F6:F6:8D:D5:DF","sha256":"BB:61:B2:71:58:44:A2:91:77:A1:D3:3E:45:56:3C:B7:CD:9A:80:57:70:23:07:2A:5D:B5:70:E1:AB:5A:9C:DE"}}},"request":{"raw":"GET /vi/x7msE3tx8QI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgYihZMA8=\u0026rs=AOn4CLBe2bWn1to_h8BqX8LbE70rVtsPxA HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72571\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 04:45:55 GMT\r\nexpires: Tue, 29 Sep 2026 06:45:55 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1468369451\"\r\ncontent-type: image/jpeg\r\nage: 1002\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72571,"size_decoded":73244,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"5f7b4d1be6b5f8daea9672d501d170df","sha1":"e4996681c696113ae6220663ceaa1dd1b5b81b9b","sha256":"b906417cc0f86cc56e2c41d345c313ed00960009cf7c6ea232d5b1d88087653b","sha512":"2f404c575ec480dec2c40f1610caf07491f865eae39b422354277908648f79e2aef51b1794a057877b7f57a764b67c3d73696a086932a3adf78ae5da1335ebd7","ssdeep":"1536:HL4c1gP4td8L5KhzO2RY10oYu/v52Suz1+IgQxL6ZSzetizp:sc1gP4g5Khy2RCY0RNuzILQxL6ISczp","tlshash":"c063f19afa7f310be37593b541f712945a922628df92f2fb3017084d0b629dab84df14","first_seen":"2026-09-06T08:00:50.069513Z","last_seen":"2026-09-29T19:08:13.534512Z","times_seen":21,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":2,"connect":14,"send":0,"wait":15,"receive":24,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.585Z","timestamp":1790658156585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:31 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 47405\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":4177,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-09-30T04:02:56.189983Z","times_seen":98760,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.769Z","timestamp":1790658156769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nContent-Type: text/plain\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6ab4ecd1-891\"\r\nexpires: Thu, 24 Sep 2026 09:33:15 GMT\r\nlast-modified: Thu, 24 Sep 2026 09:26:41 GMT\r\nx-77-nzt: k0nm40f6FuF7+aAhSgH32jxCyeMn7AWgc/cnp3NuOfWINyglHteovgniLw3f3I/WTEo1im8\r\nx-77-nzt-ray: fdb54123fc4cb8ce9146bb6a0ac40531\r\nage: 41\r\nx-77-cache: HIT\r\nx-77-age: 651\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1039,"mime_type":"application/json","magic":"JSON text data","md5":"12c6716ff3ab953322bacd460252db22","sha1":"15813d602fcf091b0ac305e50a8497debbf87c96","sha256":"e9445ab5e907bf30755143459b61f7f8d7f12d9b8ab3fdc0148ba9ca47556c1f","sha512":"f7b1e9ab71475a9559e324afcdb5f262b3e2d20ca2cb171a9e1a1750461f7c0c24c376b7714ce7d936c5dcb5f41ed789398ab5503e1754435c3c3cfbfd11b5ca","ssdeep":"","tlshash":"75411693c0f80d431b8c652bb89589415d9083c7acc93d1d366d9a7f2f4ceaa10e67bd","first_seen":"2026-09-24T09:31:55.04595Z","last_seen":"2026-09-29T06:05:19.161163Z","times_seen":83,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":29,"connect":7,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/popper.min.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.771Z","timestamp":1790658155771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/js/popper.min.js HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7438\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"51ed-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":20973,"size_decoded":7875,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20800)","md5":"7e58cd01528ac4394af369c152c17bc2","sha1":"9496922c892ea80e86d868c4509610d61a1f2847","sha256":"587c080125b135d29a931ed371e50ffc1a9641831c1087de2cd74532815f4560","sha512":"0e7b227e2dc4a8d7410da7fbcccd531bb3f4d151a29af485d50094888ff172859d2336c8b0fa3959fda4e7223c3d630a0589debaa204c1450299b4132c02b5aa","ssdeep":"384:fmQkLrwVOQzirVyKnxRs8gB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdO/:WLsgQziJp3MDb5OxHOxvYD73Y5vQzyL3","tlshash":"2292b3cc3294b06643ab91a7a0af960eb2339875610e9410f19df2d97c30ef9917fd79","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-09-29T19:08:13.513818Z","times_seen":7793,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.073Z","timestamp":1790658156073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:43 GMT","end":"Wed, 11 Nov 2026 18:42:42 GMT"},"fingerprint":{"sha1":"4D:89:37:9F:84:1B:FF:C9:39:F5:29:BC:64:5C:81:B9:FC:B4:62:34","sha256":"19:44:D1:D4:0E:46:63:2F:1C:79:F2:43:C1:52:6B:F1:4B:C5:2B:F4:3D:04:55:0E:C7:74:B5:03:A3:6F:91:CA"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6aa92cf9-4668\"\r\nexpires: Tue, 15 Sep 2026 11:39:16 GMT\r\nlast-modified: Tue, 15 Sep 2026 11:33:13 GMT\r\nx-77-nzt: k8ANfehCVZnFLN1XwPIns15JBVT2iBpcKJW385BfAscdgo5hzfmzDtZ9YAFQXaKf854hsSI\r\nx-77-nzt-ray: e2f75420dc7f59a29146bb6a4f7ad007\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 625\r\nserver: CDN77-Turbo\r\nage: 15\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6052,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-29T06:05:19.109891Z","times_seen":9682,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":30,"connect":7,"send":0,"wait":8,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.7.1/webfonts/fa-solid-900.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.119Z","timestamp":1790658156119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:00:53 GMT","end":"Tue, 17 Nov 2026 07:00:48 GMT"},"fingerprint":{"sha1":"C1:F8:7B:6D:E1:C5:FF:2F:6A:0C:24:9D:28:61:CF:AD:73:C0:93:77","sha256":"4F:45:62:98:5D:83:FB:FF:D2:77:E0:3C:78:CB:71:D4:E1:09:FE:CD:6C:74:A3:1E:91:95:90:51:1A:80:D4:0C"}}},"request":{"raw":"GET /releases/v5.7.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/releases/v5.7.1/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 74320\r\netag: \"3638e62ea50e6f5859b6a15276c25c87\"\r\nlast-modified: Fri, 22 Sep 2023 01:45:51 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 355077\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBzJN7JY4Qq9y449%2B6FXm6VtUXrbuVQRrbHOW%2FUfrki14i5dSR5oF4nnNmfky3KG7ZZ4fpdSgpTvtKGLof5VmcmbaU8sl7mxqect0u93znattAh80j68trSXKE%2Bl%2FJpb2dzgsoWl\"}]}\r\ncf-ray: a4286fc3face56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74320,"size_decoded":75042,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74320, version 329.30998","md5":"3638e62ea50e6f5859b6a15276c25c87","sha1":"f5aa1a463e223a294a42b314e1c63a614d594ec0","sha256":"9e6bd5b2d75bba485d2337d020750744983a3521ec697adfe21b29ee4f14f6a9","sha512":"0c7c4817722acaefe37770ab2f30b658065670044a4d73bea7a441780b3d40bc309d8c9593473b69c3521e4f8c40d1e0b8fdeef1619be26365db0ebdca5f5575","ssdeep":"1536:T9XBTV3zaFDGMq0gGmrbhafkPovybyJ0HgYEWdOXmkKHJaIvSI:118iMqmmxarybNHg59KHBF","tlshash":"bc7312c35adf8912c5633b6c3d8b41362f2469549a652e4275ef0deeb6f17b82f88011","first_seen":"2023-04-10T15:09:54Z","last_seen":"2026-09-29T05:05:43.736814Z","times_seen":7438,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":26,"dns":1,"connect":4,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.cryptocompare.com/serve/v3/coin/chart?fsym=BTC\u0026tsyms=USD,EUR,CNY,GBP\u0026app=envoycore.click","fqdn":"widgets.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"20.126.215.223","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.342Z","timestamp":1790658156342,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cryptocompare.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 10:38:35 GMT","end":"Wed, 25 Nov 2026 10:38:34 GMT"},"fingerprint":{"sha1":"E3:B1:40:B8:52:1A:25:E0:F7:1B:CB:58:50:84:2C:79:0E:4A:E6:CB","sha256":"BF:25:37:F5:0C:23:62:AC:16:60:3A:D9:38:29:36:09:F3:69:47:D6:0F:05:10:A0:3C:FE:57:97:F8:5E:D1:AE"}}},"request":{"raw":"GET /serve/v3/coin/chart?fsym=BTC\u0026tsyms=USD,EUR,CNY,GBP\u0026app=envoycore.click HTTP/1.1\r\nHost: widgets.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 29 Sep 2026 05:02:36 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Security-Policy: frame-ancestors 'none'\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1098011,"size_decoded":301059,"mime_type":"application/json","magic":"JavaScript source, ASCII text, with very long lines (1007)","md5":"f361df3dbcdf009d6e810e6fb5f2315e","sha1":"37850be7fa861aaf4d769cfe494fdb83f6366135","sha256":"be44dcd9aa6ad422beb4717e9f0839cbef69fd5f3505df85a216023ef6e33838","sha512":"098c2d55a1ebe60bc2b5d7e2c373d91418c61bfe8e4613c3e35948bc4b2e09cf3711586f2665e4434c4b98d433f5c6aa1dac55935f1d99212963aa829914d0f1","ssdeep":"12288:Gdc8RLxSn7pfK+OBING50o+Vcmxjb8kSbmpI:Gy8RFSn7pfKPqG5P+V9jbPI","tlshash":"b4256d9db396202ac29362ac187f11867133754a5805c8acf639d9e5ac7cdcd21bff39","first_seen":"2026-06-22T17:04:43.6034Z","last_seen":"2026-09-29T05:05:43.772902Z","times_seen":9,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":34,"connect":18,"send":0,"wait":43,"receive":55,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:37.131Z","timestamp":1790658157131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:41:05 GMT","end":"Tue, 10 Nov 2026 18:41:04 GMT"},"fingerprint":{"sha1":"4C:F2:C9:AE:0A:0F:37:5A:43:AE:8B:25:45:7E:69:B8:F0:0B:25:F8","sha256":"74:06:C6:4E:FC:30:3B:58:27:F6:ED:89:28:89:31:20:1A:62:99:AF:A6:73:D6:1A:88:29:39:44:E3:B2:B1:6C"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:02:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 29bdde8cf3b7ff891a9df4c11873e6c312746345\r\nx-77-nzt: k/HtfajfnkOhMXKUhFTbuvCG9vmKPJsGYUedc31gpETkvmpvGKHIxP/dulZtVNzpYPp1i+c\r\nx-77-nzt-ray: e2f75420f3b3f0b99246bb6a8ea9880b\r\nage: 425\r\nx-77-cache: HIT\r\nx-77-age: 422\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3359,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-09-29T06:05:19.115152Z","times_seen":1764,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":32,"connect":10,"send":0,"wait":9,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/slick/slick.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.798Z","timestamp":1790658155798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/slick/slick.js HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 14466\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"15475-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":87157,"size_decoded":14905,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-09-29T19:08:13.522866Z","times_seen":803,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/row-bgimage-1.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.370Z","timestamp":1790658156370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/row-bgimage-1.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/temp/custom/css/main.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60132\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"eae4-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":60132,"size_decoded":60513,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3","md5":"c7feed19158ba81cae88cc2e4301ff66","sha1":"6e60297f5a9a1d8de2c95ec8152fbe1405ab04a3","sha256":"f43cd1a0f11fadf305cf2779a848d36348a987eec3c246cb0fc1dfa98e6405c3","sha512":"c75b2186d9befb2b2ab53262f9e1d77766abee44dfead060338dc43a33a3ef69780bb31beef5a469742c71231bb2163c5a9ce20549e39558a317d78c0736551f","ssdeep":"1536:NYHDndRCr/EpnjVSEbdwI5MG75BEDOsZxtBVdX:oDdRCzlXIGGd6DbdX","tlshash":"e343019a8fe5afa2ece8177575d7dba08d122c4743d5c1ea8ad10225a3fc231b81c4dc","first_seen":"2025-03-18T04:27:57.382441Z","last_seen":"2026-09-29T19:08:13.53379Z","times_seen":580,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.587Z","timestamp":1790658156587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 23 Sep 2026 20:17:09 GMT\r\nexpires: Thu, 23 Sep 2027 20:17:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 463527\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":1583,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-09-30T04:02:56.193629Z","times_seen":75269,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-Ci3sulf9.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.855Z","timestamp":1790658156855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/main-Ci3sulf9.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6ab4ecd1-3e9c\"\r\nexpires: Fri, 24 Sep 2027 09:27:50 GMT\r\nlast-modified: Thu, 24 Sep 2026 09:26:41 GMT\r\nx-77-nzt: k5W6F0qtC1lXM30KUpvfiITes2ixAIZnoQXM4/WFH9Q203Ngjq7rouofw5U8Os/4w/9aIp4\r\nx-77-nzt-ray: fdb54123fc4cb8ce9146bb6a55e70f33\r\nage: 416086\r\nx-77-cache: HIT\r\nx-77-age: 416045\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16028,"size_decoded":6767,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15620)","md5":"2eba624c042df6b9ab614a422c182dc2","sha1":"c66297b197c51aa94b92a9066905bfa42e2e4c8e","sha256":"42d5bb3c366ad7621e46bc942f3009ee1ea1452c905fbbdf4f1d5c3f3220d09f","sha512":"3ab1e42fcdcbe0766b7f5eb07cb796550733ad5fc7dd65ef0657fe4fdb3c73fa94ed5ad19ee8111146f92dffbe72c2c9efb42c5eaa247f449db0050510d21682","ssdeep":"384:FNtFT88tMPdBgaw5O+mvRan7/AKsDoKzwA3Q+crsbUzgfTtQfQIeI+:FNtFX+dBgaw5O+aanrkoKkA3Q+cwbUwx","tlshash":"da72f9741210743f712fac492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","first_seen":"2026-09-24T09:31:55.036956Z","last_seen":"2026-09-29T06:05:19.179389Z","times_seen":83,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.7.1/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.758Z","timestamp":1790658155758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:00:53 GMT","end":"Tue, 17 Nov 2026 07:00:48 GMT"},"fingerprint":{"sha1":"C1:F8:7B:6D:E1:C5:FF:2F:6A:0C:24:9D:28:61:CF:AD:73:C0:93:77","sha256":"4F:45:62:98:5D:83:FB:FF:D2:77:E0:3C:78:CB:71:D4:E1:09:FE:CD:6C:74:A3:1E:91:95:90:51:1A:80:D4:0C"}}},"request":{"raw":"GET /releases/v5.7.1/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2Bft7Ze6zt7nDp3sDopNUhAkWE15eJArcNr2rmyWwHKPqWmUnzVniekRpFAaTas7t%2FQuQA%2BSHkE976KOWv9AeziUVgNAEUfGDnqqS8xMis1Sj5JGiEO%2F%2B26lO3ic2HYTHcZMs0bW\"}]}\r\nlast-modified: Fri, 22 Sep 2023 01:45:49 GMT\r\nvary: Origin\r\netag: W/\"7b1d7f457d056ace7b230b587b9f3753\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 355077\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4286fc1994356cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54456,"size_decoded":13228,"mime_type":"text/css","magic":"ASCII text, with very long lines (54456), with no line terminators","md5":"7b1d7f457d056ace7b230b587b9f3753","sha1":"4e0b45eedbe0c405f1faff0d5236a9ee0ff2065b","sha256":"9c099acc093abd2df85eaa34052ad36fe69b6ed16582c14aecd2928baa3b63bf","sha512":"dccd340ffae7f27fb66555c13bd1e26f418a369926f0c49453f7b654db610f2058c4a586f817ed35861cb848d7972ad23badfbb627733015df13bb109b420d52","ssdeep":"768:6V31Uz1RPq4NvvU63HJYkQCZ/WMQyjJKp7CzsGnQzU:6czrC4NnzHSBCkgu7cs1w","tlshash":"e8330bb8e54c41d9a732c04fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c9f79","first_seen":"2023-04-05T14:01:20Z","last_seen":"2026-09-29T05:05:43.778721Z","times_seen":15653,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":10,"connect":9,"send":0,"wait":9,"receive":-1,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:36.702Z","timestamp":1790658156702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 47411\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-30T04:34:20.349716Z","times_seen":1002461,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.DV8fl7iVyDY.2021.O/ck=ytembeds.base.St3vnT6AlO0.L.F4.O/am=AAAAQA/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywG5hJcxmKrm2sS9LxKJK0WcM0SPAg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:37.127Z","timestamp":1790658157127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.DV8fl7iVyDY.2021.O/ck=ytembeds.base.St3vnT6AlO0.L.F4.O/am=AAAAQA/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywG5hJcxmKrm2sS9LxKJK0WcM0SPAg/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=22.YT=rVfxr06H7f1OtqGm21uzjrsEbehXBbbnDq0NaZhnukpIDssuYHLpilXK3hK-fUnBX33mKM71eAR0NTjY0O6Qw6_ggt4LTNgy1EuyXmD51b17haLuIBythNQx4heVrHb0_SnaiT4bc_Yhz2zcF-78WE-zrNoFs0zsaGIYBcbh4irYMzoDg0NzHAG_OBwDGInSnP_vu1_6CurCWvwZnjhRU83MISjN7GjTe2G-faIACxeZRG7edNQL8T2xQyyMmhEwApbB4e_pyNf5AW07sduK7m3aJSBZlUBXQOX9JjyZdoiZua_M-5RaEKeNrunTTZsmpKewSEQNHi_6FkeXIen5Ww; YSC=g9IepxQLdOk; __Secure-ROLLOUT_TOKEN=CMeY-df4kN_6RhCKws26gZOXAxiKws26gZOXAw%3D%3D; VISITOR_INFO1_LIVE=2XFW6yZMAZg; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYg%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 223166\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 12:55:59 GMT\r\nexpires: Tue, 28 Sep 2027 12:55:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 26 Sep 2026 05:08:11 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 57998\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":896423,"size_decoded":224079,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"05dc6b8d9a7e13ea8b6c02e77f5351a8","sha1":"365dc1919aec9976b7be93990e4684774c90ce5e","sha256":"b1a2576a4b564088f58d469f09ebd160b44c0e4af410b1ec392d0651b3c0acc0","sha512":"b93cd52e47ce5f56322fbac999b95ca679f6595d650d873a0110bf40b0b23773add2025a061473c4e58a86a289c94184117b2dd3fd06f1fe43b338e812ec2f07","ssdeep":"12288:GDjrh0EencTyXGld16WDVcIm4zDSG8UvCeoBJjlXc7WPz6/wWXqkZTNvl6hkTeu4:G5WlrS1ajXswO0gFvhvurBiYtR","tlshash":"fa158df0b35231b5d107fd66b8b78003b27f5912e108196cf0a2ae9c56fc9986e77729","first_seen":"2026-09-28T17:18:53.824345Z","last_seen":"2026-09-29T17:31:08.625135Z","times_seen":76,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/images/dragIconRoundBig.svg","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:37.446Z","timestamp":1790658157446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 01:14:41 GMT","end":"Wed, 18 Nov 2026 02:14:37 GMT"},"fingerprint":{"sha1":"B9:AF:DE:4C:74:4C:4D:7C:9D:1C:C5:5F:A2:D7:5E:D2:22:11:41:C9","sha256":"FA:89:5F:37:B0:D9:87:3E:03:E6:D4:DD:CD:EB:B4:B5:55:50:5E:D5:9C:31:3F:75:C2:37:96:6A:D7:6B:96:12"}}},"request":{"raw":"GET /images/dragIconRoundBig.svg HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=52vFaI7pt1epDHzYDvE8Fy2TI1IxS0cKXMOgzXh47c8-1790658156.8331976-1.0.1.1-W97yZukxtA6IFjhWZCKiF3IaU8_ZgG4OVegqu.Fl3FCT.X3NfoyB4x3HY8I6CQ42Xl3KGDUwu9Tv6uz96WkP2yIuzrtod_yXTdCKqJHqGW7BsWqAPEojjH0F82HJbco0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:02:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 04 Sep 2023 18:40:08 GMT\r\netag: W/\"372a7d3a5fdfd91:0\"\r\ncryptocompare-vm: 1\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nage: 3475\r\ncf-cache-status: HIT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a4286fcc0ff523eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":679,"size_decoded":914,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cef1b538160d2dc3cfd9645e012c54c0","sha1":"13bc0db6164715d9d82288fb9c5559a6dba83bb4","sha256":"4e4cb0abdc81f9302aec899a117786526e33d575d5c4f374c17f147fccab86a7","sha512":"6a67654cd7fc3ba097f3e255b7855a9ab1cc92842ca417b64d609ad101d6eeae3bda62642525ad56d7f35070f1b7b9c61395da0ec7a89d88df1eb8cfb428f7b2","ssdeep":"","tlshash":"47017b68764df53a87058355f77abcd1203b71e140d2530ca4426873e6172d675151b8","first_seen":"2023-05-10T00:33:03Z","last_seen":"2026-09-29T05:05:43.76207Z","times_seen":473,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/css/bootstrap.min.css","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.759Z","timestamp":1790658155759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/css/bootstrap.min.css HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 22973\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"2565e-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":153182,"size_decoded":23405,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"f411c136e2bb302ada2120b3eb1d5bc3","sha1":"3ae9bb0e7929489abd23736ae892939c8fe98645","sha256":"6b3bef53dc4a96ec07149d02a60b5fd026332bbce0b4ece79f3c55e3ddb85f5c","sha512":"73c0081669f87b45999da4ce0974ce2f347eb88ad310b63d01e22e52ae8e0c668eeb5f418ea1b6ae18afff2e9d21d98cedb6be0a9ccc464933b4c3d77d5066f6","ssdeep":"1536:K/NImGVh5+QYYDnDEBi83NcuSE9/7ht//1K0q3SYiLENM6HN26x:K/Fs4D9Dq3SYiLENM6HN26x","tlshash":"0be375a6f5a0312de467c61960d0bafe156f8245d7221ffbf82737644b896cb0a63d0c","first_seen":"2023-04-06T09:07:33Z","last_seen":"2026-09-29T19:08:13.499659Z","times_seen":4662,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/moment.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.779Z","timestamp":1790658155779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/js/moment.js HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 33227\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"24d9d-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":150941,"size_decoded":33666,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0941fc7ec3988352c959e5b3da86f666","sha1":"f5ff9e6fdcddb2951851412bc021015b6b59054c","sha256":"1fd8c0cfffd02e40cecbf9f313d1b86988a342d90bb7d16f1a67544f0064ea0b","sha512":"5afde44d2c0b90bfbf3292b794e80ab6c4e7e653b59e675eb2fee4f6459c22ed23a00268e0ac48b01e3fad03d45ffd4cfcc35e3026d16fbff64bf7f61488412d","ssdeep":"1536:4OpyD1Cb6yVBXfW1vCUUtQQTj06HPU3KQFSNF1T7cbF/nlzUIKHCIioTo3v2BcC:4OpyDJu8XUtQQSO1T7cbF/nlz3wq2BB","tlshash":"42e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","first_seen":"2023-03-07T16:46:41Z","last_seen":"2026-09-29T19:08:13.530524Z","times_seen":1614,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/css/bootstrap-select.css","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.788Z","timestamp":1790658155788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/css/bootstrap-select.css HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 2415\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"323c-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12860,"size_decoded":2845,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"3c13518e758f95b39f33ce9249aef2ea","sha1":"edbb8b3ed265e6a52a60d58aa45309f1716fb056","sha256":"032c55f8092688bd96e242ab5c1b7c63d8c04bd502ef4bfadb277e7ac57ddf47","sha512":"6cad1c0d0875376ef0cc6f9cb0a1bc161a535ba54301a9ef48b9005974d729c924496b81ae36d46e3b3beb96e75d7b7244a2bf66c2323493c5db70a728787561","ssdeep":"192:NAEV3IkN9UXliukFaFfF70Vi2Ar9kyWSDCJiUzuDcL5:kliu9F70Vi2ArLlDCJn","tlshash":"1242119db3d202704099806a398a7e6677dee451324eccb973dfe25c2f80543e9377a6","first_seen":"2023-05-22T09:42:17Z","last_seen":"2026-09-29T19:08:13.492728Z","times_seen":641,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/fb50cd46/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:36.685Z","timestamp":1790658156685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /s/player/fb50cd46/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=22.YT=rVfxr06H7f1OtqGm21uzjrsEbehXBbbnDq0NaZhnukpIDssuYHLpilXK3hK-fUnBX33mKM71eAR0NTjY0O6Qw6_ggt4LTNgy1EuyXmD51b17haLuIBythNQx4heVrHb0_SnaiT4bc_Yhz2zcF-78WE-zrNoFs0zsaGIYBcbh4irYMzoDg0NzHAG_OBwDGInSnP_vu1_6CurCWvwZnjhRU83MISjN7GjTe2G-faIACxeZRG7edNQL8T2xQyyMmhEwApbB4e_pyNf5AW07sduK7m3aJSBZlUBXQOX9JjyZdoiZua_M-5RaEKeNrunTTZsmpKewSEQNHi_6FkeXIen5Ww; YSC=g9IepxQLdOk; __Secure-ROLLOUT_TOKEN=CMeY-df4kN_6RhCKws26gZOXAxiKws26gZOXAw%3D%3D; VISITOR_INFO1_LIVE=2XFW6yZMAZg; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYg%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 484864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 19:18:33 GMT\r\nexpires: Tue, 28 Sep 2027 19:18:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 24 Sep 2026 04:43:44 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 35043\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1629834,"size_decoded":485551,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (974)","md5":"32fa3c632ef90ce8148b57940e0e2ddb","sha1":"a83f67885897b14481c53d7b2d0cb022f2dab396","sha256":"4ba521ae17d775d17513d23f89b59d49b8ec4cad4d44ef8c3b91cf710c7b5c66","sha512":"e72b0ae122be2ddf8abcf1ac6b913569d4fd90a8bdb7956c6a3e5217ddb657e73b12e187f9d6e0dfb3e6c3b51673fb093ab1b8c6eba777e705e8e59d81643887","ssdeep":"12288:Om46f5YeHqlrMFRkLY6aJ+PP30beU7CnRz5hUSYQETP/TM/:z423qyGJaJ+PMbeU7CnRVhUSYQETPrS","tlshash":"10256de87393b82213a3b0a418ef1202b1bf5c54a48cc46df576d7da2d7454b917bfa8","first_seen":"2026-09-24T15:17:05.366632Z","last_seen":"2026-09-30T00:11:52.831231Z","times_seen":149,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?d9Lw5g","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:37.632Z","timestamp":1790658157632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /generate_204?d9Lw5g HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=22.YT=rVfxr06H7f1OtqGm21uzjrsEbehXBbbnDq0NaZhnukpIDssuYHLpilXK3hK-fUnBX33mKM71eAR0NTjY0O6Qw6_ggt4LTNgy1EuyXmD51b17haLuIBythNQx4heVrHb0_SnaiT4bc_Yhz2zcF-78WE-zrNoFs0zsaGIYBcbh4irYMzoDg0NzHAG_OBwDGInSnP_vu1_6CurCWvwZnjhRU83MISjN7GjTe2G-faIACxeZRG7edNQL8T2xQyyMmhEwApbB4e_pyNf5AW07sduK7m3aJSBZlUBXQOX9JjyZdoiZua_M-5RaEKeNrunTTZsmpKewSEQNHi_6FkeXIen5Ww; YSC=g9IepxQLdOk; __Secure-ROLLOUT_TOKEN=CMeY-df4kN_6RhCKws26gZOXAxiKws26gZOXAw%3D%3D; VISITOR_INFO1_LIVE=2XFW6yZMAZg; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYg%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 29 Sep 2026 05:02:37 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":172,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T04:35:38.282382Z","times_seen":18732258,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:46.456Z","timestamp":1790658166456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://envoycore.click/\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://envoycore.click\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Tue, 29 Sep 2026 05:02:46 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":523,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T04:35:38.282382Z","times_seen":18732258,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/footer-bg.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.583Z","timestamp":1790658156583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/footer-bg.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/temp/custom/css/main.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20397\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"4fad-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":20397,"size_decoded":20778,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x629, components 3","md5":"173006becf1f9024a75cbf6549d11bcd","sha1":"231f4956f43af8bd4763c626c83b94093d03d791","sha256":"a806702cc490d657e574c9a2eb2ff002abe0e8820c3a170d4883857fd5de23cb","sha512":"0016ba9f03659fe4aad0da2e1db61f0e5d809e254b3fe9beaa5680069802eb8de19effccd00fc7d0fa199b69b8dd11a16e4173a44481a09a843fdf6346686e7d","ssdeep":"384:ja64Ahf6E4e/50OI8e9saLroK5lmtpdKGRlG:jadAhf6E405hpeHLrN5grbO","tlshash":"2e924c67ff06d746c9989330c4fb17687fb600bde690564aa6b8083a1cde3467d8c1e1","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-09-29T19:08:13.579888Z","times_seen":613,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/storage/app/public/photos/QVHSlofq0ceYBXt2I6GZV8MQc0n6v3KaGZYXHgAI.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.775Z","timestamp":1790658156775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /storage/app/public/photos/QVHSlofq0ceYBXt2I6GZV8MQc0n6v3KaGZYXHgAI.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63131\r\nlast-modified: Thu, 24 Sep 2026 14:03:22 GMT\r\netag: \"f69b-65c3b10082f3d\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63131,"size_decoded":63512,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1520x506, components 3","md5":"2e391a6ad98bfdf840efcfd932e7f846","sha1":"c9ece02f2cdfd64e0bbd8f045596ce4d710145bd","sha256":"00abc3543ca112cf0ed296d4be3c6f1a69dbed5dffef89e7d033ef72362baa4f","sha512":"0dc9a8b76bf91eed4957a6ba522932bc108526c5f36ab0c55ec29c7150209405db7fb138633dab6b6851d0a030a0a49de8b65117c99f7684d07867fa81193685","ssdeep":"768:x+XW8E1zC8AcB2yCgPMptuAOxAt46FTqbsyTS/RK20I8arDJNUFXB4hDUarjCH6y:MGC8AtyHstuylqblS/s26sSFx4lxZ4","tlshash":"2e5302ec422351ccf9274db66bf29e05e5b92319c0be04a182d78f0bd94fa0d703a21d","first_seen":"2026-09-29T04:49:30.489008Z","last_seen":"2026-09-29T05:03:56.247743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:37.634Z","timestamp":1790658157634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://www.youtube.com\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 272\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 23 Sep 2026 20:17:01 GMT\r\nexpires: Thu, 23 Sep 2027 20:17:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 06 Sep 2023 03:18:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Origin\r\nage: 463536\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":478,"size_decoded":997,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e78ea4caa31c35bac97a41e5930ffe8","sha1":"dbf99131b9b5087e664b9fdc7097c97655474517","sha256":"6fa88a20839537ae66da730e5bd183035265176d972bc8df075b89da0c6186ea","sha512":"cf798ef67c90f90f23635beb202095a2c76052d491c224aa14535bb9b16f28fa9a850b8db887f158afd01d634aecb9e2b05a27efdfd225d3583e6297bdd78b43","ssdeep":"","tlshash":"2ef09e6d577829d8930f87c0be5974127d9f23e85194b3b541d4f9326138ee2d141cd9","first_seen":"2025-05-26T15:52:21.952281Z","last_seen":"2026-09-30T04:36:25.244755Z","times_seen":55000,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.116.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:37.749Z","timestamp":1790658157749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Tue, 29 Sep 2026 05:02:37 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":555,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T04:35:38.282382Z","times_seen":18732258,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":21,"send":0,"wait":32,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/slick/slick-theme.css","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.767Z","timestamp":1790658155767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/slick/slick-theme.css HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 1288\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"14f2-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5362,"size_decoded":1718,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5d5467913e6993e7ce475116c74587a9","sha1":"7a9aee7ad36f6eba9a213967b052cb807a02c7a2","sha256":"e69bdf0d68f559df15d9fbddb2b0346b78895aa6e06de6c87236b28d5e2be5ae","sha512":"025c4c8e04461f15b402c00fad86fcd56e71bcdf856471b9036a4a50bc5fc73fa8a57a45287fb5683df6932bf990b74b76c8f9044a6830c53b085bca0ea18a79","ssdeep":"96:+V15CEXdql+MeDpaX806FjAf8YwkKbZk5PueS/Fj93:SP3XdcTGp6804Af8YwkKbZk5Pu1l93","tlshash":"5ab113aca506e1c6163388803fa30755eb9b30431f110eacffa413545fbe0ac5ad9b9d","first_seen":"2023-05-11T19:38:54Z","last_seen":"2026-09-29T05:05:43.779345Z","times_seen":605,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.yandex.net/website-widget/v1/widget.js?widgetId=ytWidget\u0026pageLang=tr\u0026widgetTheme=dark\u0026autoMode=true","fqdn":"translate.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"213.180.204.194","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.792Z","timestamp":1790658155792,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /website-widget/v1/widget.js?widgetId=ytWidget\u0026pageLang=tr\u0026widgetTheme=dark\u0026autoMode=true HTTP/1.1\r\nHost: translate.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 429 \r\nset-cookie: _yasc=XNQKc5V+j4VLEIVClDFXsT6yitBqbo6RU78a9l3h5u/OmDs/6CkWygkbbnK0CYFzV/0NRw==; domain=.yandex.net; path=/; expires=Fri, 26 Sep 2036 05:02:35 GMT; SameSite=None; Secure\nbh=YOuM7dUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Expires=Wed, 03 Nov 2027 05:02:35 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"_yasc","value":"XNQKc5V+j4VLEIVClDFXsT6yitBqbo6RU78a9l3h5u/OmDs/6CkWygkbbnK0CYFzV/0NRw==","quoted":false,"path":"/","domain":".yandex.net","expires":"2036-09-26T05:02:35Z","raw_expires":"Fri, 26 Sep 2036 05:02:35 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"_yasc=XNQKc5V+j4VLEIVClDFXsT6yitBqbo6RU78a9l3h5u/OmDs/6CkWygkbbnK0CYFzV/0NRw==; domain=.yandex.net; path=/; expires=Fri, 26 Sep 2036 05:02:35 GMT; SameSite=None; Secure"},{"name":"bh","value":"YOuM7dUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==","quoted":false,"expires":"2027-11-03T05:02:35Z","raw_expires":"Wed, 03 Nov 2027 05:02:35 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"bh=YOuM7dUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Expires=Wed, 03 Nov 2027 05:02:35 GMT; SameSite=None; Secure"}],"status_code":"429","status_text":"Too Many Requests","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T04:35:38.282382Z","times_seen":18732258,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/menu.svg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.818Z","timestamp":1790658155818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/menu.svg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 982\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"3d6-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":982,"size_decoded":1363,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"464397bb0033a309123c20bdc1306166","sha1":"1dd2aff9a642f3c01942fafa22fa27483762f223","sha256":"dc1db702ebdb8a1218082fd20e55ec5a0af59e92393f2a7ab7f9bacc790499a2","sha512":"4009186075ca4204205219bdd31c92c89ae212af6a4c90688687333e02bba751ac4a6eecb54d363c42e7821d13e25e5100df3add3e8f9d1b05f5512e9c477f90","ssdeep":"","tlshash":"a311214f4752dcbe243643a877f425c63bf08c57c1b149e09a273c37f42d5608e99168","first_seen":"2025-04-28T01:39:11.795951Z","last_seen":"2026-09-29T19:08:13.545804Z","times_seen":580,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/about.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.821Z","timestamp":1790658155821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/about.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43712\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"aac0-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":43712,"size_decoded":44093,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 570x590, components 3","md5":"6662d34c4f26f1f26586d8b0718889cc","sha1":"1ca95815bd8c654a8365e6139c7bfc3c7e0af298","sha256":"48fb855c939d83924f83ac5349c8ef9d349ed88299720755a5c4870c5e6374bd","sha512":"d9996ba23333a2b4452837d7875cb6df0203d263d1d44c16afca1ea126d398cdd1b3d3c37ccc25e402bb3022359d0669ecd0adde0fcf379d4ed0d61acb260f3b","ssdeep":"768:TmNXFtG2SzAhaf7oHK1sNolxl6K7CMV55gRWDwyCe+dPLiHnGYRhCeN1:TU1tG2SzAWkKXHl6K7LV0jH0n3RB","tlshash":"2e13f10085136a734b169cf6a32bc469d44affd693b092ce9b30c0692484fc1db976f7","first_seen":"2024-08-19T16:43:15.382088Z","last_seen":"2026-09-29T19:08:13.547471Z","times_seen":562,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/flaticon/Flaticon.woff2","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.357Z","timestamp":1790658156357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/flaticon/Flaticon.woff2 HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://envoycore.click/temp/custom/flaticon/flaticon.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15636\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"3d14-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15636,"size_decoded":16017,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15636, version 1.0","md5":"7e6e07c9567fead57aad008ba0f35ad8","sha1":"d5fc38cc2b8feeee4abaf792ec9a0975988d5595","sha256":"97715d73c5593d1985486d8af235ffac8e7a08cad8e5c0517b115fa7bc372053","sha512":"ef21213d3cbdf6c17abfdb044c8dc8ec159173ff43ab2e9c833d6416a23df06785ccb8dc056f6f587b8712c1028f1d56a4c454f62a807fe5f35ca368fae86f5e","ssdeep":"384:Uc5Cd909FNFKcI3gyIaNMqhmM21zjlBRc2:UYCdSbecwfh4N1","tlshash":"2d62d16323b0dfa8e7df61618d25f03dc35f092590228eeed3d5e9940028fe46da0ac5","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-09-29T19:08:13.48814Z","times_seen":613,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/ss/k=ytembeds.base.St3vnT6AlO0.L.F4.O/am=AAAAQA/d=1/br=1/rs=AGKMywFp4KmaDAIji5WHx2_Llli0Q_NQyA/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:36.681Z","timestamp":1790658156681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /s/_/ytembeds/_/ss/k=ytembeds.base.St3vnT6AlO0.L.F4.O/am=AAAAQA/d=1/br=1/rs=AGKMywFp4KmaDAIji5WHx2_Llli0Q_NQyA/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=22.YT=rVfxr06H7f1OtqGm21uzjrsEbehXBbbnDq0NaZhnukpIDssuYHLpilXK3hK-fUnBX33mKM71eAR0NTjY0O6Qw6_ggt4LTNgy1EuyXmD51b17haLuIBythNQx4heVrHb0_SnaiT4bc_Yhz2zcF-78WE-zrNoFs0zsaGIYBcbh4irYMzoDg0NzHAG_OBwDGInSnP_vu1_6CurCWvwZnjhRU83MISjN7GjTe2G-faIACxeZRG7edNQL8T2xQyyMmhEwApbB4e_pyNf5AW07sduK7m3aJSBZlUBXQOX9JjyZdoiZua_M-5RaEKeNrunTTZsmpKewSEQNHi_6FkeXIen5Ww; YSC=g9IepxQLdOk; __Secure-ROLLOUT_TOKEN=CMeY-df4kN_6RhCKws26gZOXAxiKws26gZOXAw%3D%3D; VISITOR_INFO1_LIVE=2XFW6yZMAZg; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYg%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 0\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 12:55:57 GMT\r\nexpires: Tue, 28 Sep 2027 12:55:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 26 Sep 2026 05:08:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nage: 57999\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":856,"mime_type":"text/css; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T04:35:38.282382Z","times_seen":18732258,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.113.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{12fb74f9-cbda-4c05-b43a-0d83d64760e8}?https://envoycore.click","date":"2026-09-29T05:02:36.621Z","timestamp":1790658156621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\nserver: ESF\r\ncontent-length: 2635\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=CvsBCAESrQEBOxGDSF12tXxOS6mKDTJATcsp8ORfEm3wa93Oaf8FMNLWdg7FLNlKdu6yGNCcsmNQhaNrUftpkbuya8SRmgMumgYBL17nlax6_l-7Ub_-qzTJdU1N08ujk6-bpduWMAD-UyvfKCJtzdk4HY3adJZZPMQhbPpRe8oC-0Ra91XgD45e_JY9rHAkscXrISNgWmRWPlYXSIzI7QgeqOgUKuRv0q5EkXOReqsWXWllqigBMkUB0qwHz6iTltag5h4hV07OS6cC2_EZ2Xg1gMR9_5TPGxo5Jc5w5GdKipsAwqAu5_3Saud96qTT910Kz6xEeX6Fk7Us_AE; expires=Wed, 31-Mar-2027 05:02:36 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\r\nexpires: Tue, 29 Sep 2026 05:02:36 GMT\r\ncache-control: private\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"NID","value":"CvsBCAESrQEBOxGDSF12tXxOS6mKDTJATcsp8ORfEm3wa93Oaf8FMNLWdg7FLNlKdu6yGNCcsmNQhaNrUftpkbuya8SRmgMumgYBL17nlax6_l-7Ub_-qzTJdU1N08ujk6-bpduWMAD-UyvfKCJtzdk4HY3adJZZPMQhbPpRe8oC-0Ra91XgD45e_JY9rHAkscXrISNgWmRWPlYXSIzI7QgeqOgUKuRv0q5EkXOReqsWXWllqigBMkUB0qwHz6iTltag5h4hV07OS6cC2_EZ2Xg1gMR9_5TPGxo5Jc5w5GdKipsAwqAu5_3Saud96qTT910Kz6xEeX6Fk7Us_AE","quoted":false,"path":"/","domain":".translate-pa.googleapis.com","expires":"2027-03-31T05:02:36Z","raw_expires":"Wed, 31-Mar-2027 05:02:36 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"NID=CvsBCAESrQEBOxGDSF12tXxOS6mKDTJATcsp8ORfEm3wa93Oaf8FMNLWdg7FLNlKdu6yGNCcsmNQhaNrUftpkbuya8SRmgMumgYBL17nlax6_l-7Ub_-qzTJdU1N08ujk6-bpduWMAD-UyvfKCJtzdk4HY3adJZZPMQhbPpRe8oC-0Ra91XgD45e_JY9rHAkscXrISNgWmRWPlYXSIzI7QgeqOgUKuRv0q5EkXOReqsWXWllqigBMkUB0qwHz6iTltag5h4hV07OS6cC2_EZ2Xg1gMR9_5TPGxo5Jc5w5GdKipsAwqAu5_3Saud96qTT910Kz6xEeX6Fk7Us_AE; expires=Wed, 31-Mar-2027 05:02:36 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31482,"size_decoded":3613,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"91115de97ad1a90076e130223cdd90ad","sha1":"f3ad22e4fa892dfbff0d083bc0465fc3a2240317","sha256":"816e9881b1955d8beff3011d93481dad4c4de71bbd80b50ac267e7e45d4c3bad","sha512":"fbca69c3431240ab374b9ccfb06d76074059cdfe2f153743b292020271a8a3a36885189594a97fd74b43249b1f6359af62dfd0731e7b50e024f37faebdccf620","ssdeep":"192:Z6STcB9aqiD0+52DdKXrWryLxizUSTcB9aqdD0+52DdKXrWryLxG:JTcbaU3KXiMxidTcbah3KXiMxG","tlshash":"d0e267bae8b50d9b6a5e65b416fa2a03306041db4edc3c053b1c1e4c6fdec1e6c7169e","first_seen":"2025-09-02T05:12:23.753308Z","last_seen":"2026-09-30T04:22:25.083543Z","times_seen":29103,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":2,"connect":21,"send":0,"wait":43,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260928","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.791Z","timestamp":1790658156791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:01 GMT","end":"Thu, 03 Dec 2026 19:22:00 GMT"},"fingerprint":{"sha1":"CD:07:3B:50:75:01:24:0F:C7:C7:3C:64:23:AB:79:7D:38:72:95:D1","sha256":"67:AA:6A:7F:90:26:22:7B:D8:F2:CD:2D:6B:33:8A:1A:63:D8:27:4C:52:08:D6:BA:7B:38:CC:54:84:C7:82:7C"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260928 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-5iK8DLNazF3oVBE6p4eAHA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmJw1pBiEOLheNPz9iqbwIoHLzqZlZSS8gvjS4oS84pzEktSi1OLylKL4o0MjMwMLI3M9QxM4gsMADIsEy4\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=CoMCCAIStQEBAQxeRavTbSKmDqmNfPzi2zgSz_Q7RjdaKIvH8KFxMiy5TddFBYt6-bwzIcibMwYCGmACzp-GkQNg4ap2yIyCcyVc2aFfxHypbSSQaj7XYWQ0UzQh4oVUNQ2Ku0MS0xI5l3FF94p60aEV06ujS18ptFsiW3b6GEvpCOYEKJIIHyrIqJDPkzcQKiQwU9C9lA7hJdEr4L3ZztPsqdiyq6G73fmymZ507mbczM6QCsTY9_u6FhfFKAIyRQF9bMSq0fxUq5WmJM73i4LhE3EFWrlDk5UmbTn2gj7I8UMzXzbrnWJzoOPb1qMPuy8FIyeVVf0xJVaZbxCksuR-wobkDw; expires=Fri, 29-Oct-2027 21:20:54 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-ENID","value":"CoMCCAIStQEBAQxeRavTbSKmDqmNfPzi2zgSz_Q7RjdaKIvH8KFxMiy5TddFBYt6-bwzIcibMwYCGmACzp-GkQNg4ap2yIyCcyVc2aFfxHypbSSQaj7XYWQ0UzQh4oVUNQ2Ku0MS0xI5l3FF94p60aEV06ujS18ptFsiW3b6GEvpCOYEKJIIHyrIqJDPkzcQKiQwU9C9lA7hJdEr4L3ZztPsqdiyq6G73fmymZ507mbczM6QCsTY9_u6FhfFKAIyRQF9bMSq0fxUq5WmJM73i4LhE3EFWrlDk5UmbTn2gj7I8UMzXzbrnWJzoOPb1qMPuy8FIyeVVf0xJVaZbxCksuR-wobkDw","quoted":false,"path":"/","domain":".google.com","expires":"2027-10-29T21:20:54Z","raw_expires":"Fri, 29-Oct-2027 21:20:54 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-ENID=CoMCCAIStQEBAQxeRavTbSKmDqmNfPzi2zgSz_Q7RjdaKIvH8KFxMiy5TddFBYt6-bwzIcibMwYCGmACzp-GkQNg4ap2yIyCcyVc2aFfxHypbSSQaj7XYWQ0UzQh4oVUNQ2Ku0MS0xI5l3FF94p60aEV06ujS18ptFsiW3b6GEvpCOYEKJIIHyrIqJDPkzcQKiQwU9C9lA7hJdEr4L3ZztPsqdiyq6G73fmymZ507mbczM6QCsTY9_u6FhfFKAIyRQF9bMSq0fxUq5WmJM73i4LhE3EFWrlDk5UmbTn2gj7I8UMzXzbrnWJzoOPb1qMPuy8FIyeVVf0xJVaZbxCksuR-wobkDw; expires=Fri, 29-Oct-2027 21:20:54 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax"}],"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T04:35:38.282382Z","times_seen":18732258,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/js/jquery.form.js","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.773Z","timestamp":1790658155773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/js/jquery.form.js HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 12230\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"ab23-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":43811,"size_decoded":12668,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-09-29T19:08:13.529896Z","times_seen":814,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/fb50cd46/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:36.679Z","timestamp":1790658156679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /s/player/fb50cd46/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=22.YT=rVfxr06H7f1OtqGm21uzjrsEbehXBbbnDq0NaZhnukpIDssuYHLpilXK3hK-fUnBX33mKM71eAR0NTjY0O6Qw6_ggt4LTNgy1EuyXmD51b17haLuIBythNQx4heVrHb0_SnaiT4bc_Yhz2zcF-78WE-zrNoFs0zsaGIYBcbh4irYMzoDg0NzHAG_OBwDGInSnP_vu1_6CurCWvwZnjhRU83MISjN7GjTe2G-faIACxeZRG7edNQL8T2xQyyMmhEwApbB4e_pyNf5AW07sduK7m3aJSBZlUBXQOX9JjyZdoiZua_M-5RaEKeNrunTTZsmpKewSEQNHi_6FkeXIen5Ww; YSC=g9IepxQLdOk; __Secure-ROLLOUT_TOKEN=CMeY-df4kN_6RhCKws26gZOXAxiKws26gZOXAw%3D%3D; VISITOR_INFO1_LIVE=2XFW6yZMAZg; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYg%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 58422\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Sep 2026 20:09:31 GMT\r\nexpires: Fri, 24 Sep 2027 20:09:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 24 Sep 2026 04:43:44 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 377585\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":544227,"size_decoded":59102,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"e7c2322157d99dc37120c813e61b7a7a","sha1":"e3a45b1869690a3b19b0edceef96d137d10f1833","sha256":"1c2c166b662990870eb7bc9d34a9aa7fc755d3c7975b5380697bca2382e2e4a3","sha512":"188da9f0b4962420feca07713467ecf144b4feb73f6ead2417d838e13bba1885a4d27b93e2e695b1473d5d43fe38c29f8fa9267c0b64f50c40825ff4570a64c9","ssdeep":"6144:58d5Fe/qoMOg7UABLdIoImM5KPL58Oi4u7:+YxMOg7UAfIoIr5KPL5Tg","tlshash":"1ec4d972e0a1233cb2278d9997d9d54d7339d983e2e12afff11166dacbc77821316206","first_seen":"2026-09-17T11:23:11.24252Z","last_seen":"2026-09-30T03:42:09.388881Z","times_seen":1544,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.083Z","timestamp":1790658156083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 18:42:37 GMT\r\nexpires: Tue, 28 Sep 2027 18:42:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37199\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4818,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-09-30T04:22:25.082877Z","times_seen":39237,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":18,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.344Z","timestamp":1790658156344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /embed/x7msE3tx8QI HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, base-uri 'self';object-src 'none';script-src 'nonce-ISYkM2FS8MQPYzi1ZkhV2g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nstrict-transport-security: max-age=31536000\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-YNID=22.YT=rVfxr06H7f1OtqGm21uzjrsEbehXBbbnDq0NaZhnukpIDssuYHLpilXK3hK-fUnBX33mKM71eAR0NTjY0O6Qw6_ggt4LTNgy1EuyXmD51b17haLuIBythNQx4heVrHb0_SnaiT4bc_Yhz2zcF-78WE-zrNoFs0zsaGIYBcbh4irYMzoDg0NzHAG_OBwDGInSnP_vu1_6CurCWvwZnjhRU83MISjN7GjTe2G-faIACxeZRG7edNQL8T2xQyyMmhEwApbB4e_pyNf5AW07sduK7m3aJSBZlUBXQOX9JjyZdoiZua_M-5RaEKeNrunTTZsmpKewSEQNHi_6FkeXIen5Ww; expires=Sun, 28-Mar-2027 05:02:36 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=g9IepxQLdOk; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CMeY-df4kN_6RhCKws26gZOXAxiKws26gZOXAw%3D%3D; Domain=youtube.com; Expires=Sun, 28-Mar-2027 05:02:36 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\n__Secure-YEC=; Domain=.youtube.com; Expires=Wed, 03-Jan-2024 05:02:36 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=2XFW6yZMAZg; Domain=.youtube.com; Expires=Sun, 28-Mar-2027 05:02:36 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYg%3D%3D; Domain=.youtube.com; Expires=Sun, 28-Mar-2027 05:02:36 GMT; Path=/; Secure; HttpOnly; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-YNID","value":"22.YT=rVfxr06H7f1OtqGm21uzjrsEbehXBbbnDq0NaZhnukpIDssuYHLpilXK3hK-fUnBX33mKM71eAR0NTjY0O6Qw6_ggt4LTNgy1EuyXmD51b17haLuIBythNQx4heVrHb0_SnaiT4bc_Yhz2zcF-78WE-zrNoFs0zsaGIYBcbh4irYMzoDg0NzHAG_OBwDGInSnP_vu1_6CurCWvwZnjhRU83MISjN7GjTe2G-faIACxeZRG7edNQL8T2xQyyMmhEwApbB4e_pyNf5AW07sduK7m3aJSBZlUBXQOX9JjyZdoiZua_M-5RaEKeNrunTTZsmpKewSEQNHi_6FkeXIen5Ww","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-03-28T05:02:36Z","raw_expires":"Sun, 28-Mar-2027 05:02:36 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__Secure-YNID=22.YT=rVfxr06H7f1OtqGm21uzjrsEbehXBbbnDq0NaZhnukpIDssuYHLpilXK3hK-fUnBX33mKM71eAR0NTjY0O6Qw6_ggt4LTNgy1EuyXmD51b17haLuIBythNQx4heVrHb0_SnaiT4bc_Yhz2zcF-78WE-zrNoFs0zsaGIYBcbh4irYMzoDg0NzHAG_OBwDGInSnP_vu1_6CurCWvwZnjhRU83MISjN7GjTe2G-faIACxeZRG7edNQL8T2xQyyMmhEwApbB4e_pyNf5AW07sduK7m3aJSBZlUBXQOX9JjyZdoiZua_M-5RaEKeNrunTTZsmpKewSEQNHi_6FkeXIen5Ww; expires=Sun, 28-Mar-2027 05:02:36 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none"},{"name":"YSC","value":"g9IepxQLdOk","quoted":false,"path":"/","domain":".youtube.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"YSC=g9IepxQLdOk; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CMeY-df4kN_6RhCKws26gZOXAxiKws26gZOXAw%3D%3D","quoted":false,"path":"/","domain":"youtube.com","expires":"2027-03-28T05:02:36Z","raw_expires":"Sun, 28-Mar-2027 05:02:36 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"__Secure-ROLLOUT_TOKEN=CMeY-df4kN_6RhCKws26gZOXAxiKws26gZOXAw%3D%3D; Domain=youtube.com; Expires=Sun, 28-Mar-2027 05:02:36 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned"},{"name":"__Secure-YEC","value":"","quoted":false,"path":"/","domain":".youtube.com","expires":"2024-01-03T05:02:36Z","raw_expires":"Wed, 03-Jan-2024 05:02:36 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-YEC=; Domain=.youtube.com; Expires=Wed, 03-Jan-2024 05:02:36 GMT; Path=/; Secure; HttpOnly; SameSite=lax"},{"name":"VISITOR_INFO1_LIVE","value":"2XFW6yZMAZg","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-03-28T05:02:36Z","raw_expires":"Sun, 28-Mar-2027 05:02:36 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"VISITOR_INFO1_LIVE=2XFW6yZMAZg; Domain=.youtube.com; Expires=Sun, 28-Mar-2027 05:02:36 GMT; Path=/; Secure; HttpOnly; SameSite=none"},{"name":"VISITOR_PRIVACY_METADATA","value":"CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYg%3D%3D","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-03-28T05:02:36Z","raw_expires":"Sun, 28-Mar-2027 05:02:36 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYg%3D%3D; Domain=.youtube.com; Expires=Sun, 28-Mar-2027 05:02:36 GMT; Path=/; Secure; HttpOnly; SameSite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":153916,"size_decoded":63887,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52128)","md5":"643063d8c4f8ccc705dc970873f9294d","sha1":"59c5bb27201b71e92237bedf9b934f8c96870c0a","sha256":"9b9d522b11fa839d89534516206690ee880cf5416856fd634b83fbb8aa2233d3","sha512":"e304ff7195d1d99f251b910edcd49622784dc77a7435a223024bdb1bbd4742de0ac5768e5ec9c9144160a9dc9c39ceb1b7a2f8723c89c3cc8e49e267e20cf5cf","ssdeep":"1536:r2epMIM9BHYNMFbLGlJhDRaZo43UEwg1Fb4c8NRkzKLzyI5CZx+AKTBQnkpn661:HyI2YN4Z0EwgQMqznY1GBQnS","tlshash":"f1e309250868a8b6c5939447edb9ff3e9cf8023947c995aebcbbd35c01dc6510eaf412","first_seen":"2026-09-29T05:03:56.289997Z","last_seen":"2026-09-29T05:03:56.289997Z","times_seen":1,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":2,"connect":7,"send":0,"wait":80,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/themify/themify-icons.css","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.764Z","timestamp":1790658155764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/themify/themify-icons.css HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 2962\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"4599-64821d1307b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17817,"size_decoded":3392,"mime_type":"text/css","magic":"ASCII text","md5":"8550d4f5955437a51f49a5abff88a7a4","sha1":"e360e1412a31c69ed2188a9816d394478895c106","sha256":"9c66fe2fab3a1d65b14b92a20d4c817ed481d74846a8a5f33d3616200b973602","sha512":"c1eb60c4cf0c1a51bc2172d549b7d735304572c6d82e61675d6e3feb9ee74fe354eaa83da5d8cea4ab16b471879314e54cc21e4ad1ddcfc990852fe28677752d","ssdeep":"192:TjlG8SWxB5iQYxil3EguJ+JvZ247F52WM:s8NbAlMJdFg","tlshash":"f182d39495bf1ca41319e0c1734bf215bb0db6aa9a450c5ce293ff4cafd3a1199c2adc","first_seen":"2025-03-18T04:27:57.388175Z","last_seen":"2026-09-29T19:08:13.583313Z","times_seen":593,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/real-estate-investment-sm.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:35.828Z","timestamp":1790658155828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/real-estate-investment-sm.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 103474\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"19432-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":103474,"size_decoded":103857,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"513853b7ee43c65811c9944d1b7f955e","sha1":"2b0031baa444165d350c3350ba133b5acb870a8a","sha256":"069e73aa63a77e4b8abec49c7c4e5fa241c8de1a364932dfb0106458ea29c88d","sha512":"974e70195aee421039f2ace2049356b5a1f7f17af9c5eecc0d66440e06f8579e305ae91775b5a9ee7b40a5ff475a4e86828df305fde5ee1f4000f29308f633c4","ssdeep":"1536:QFIkprDLn7pNoLfhuJgHeC+NkV69orEmTxrQt98jGnxZuV2wWHpc9+leU06GMA0M:QukprbpkuJgHet9rtqjQUre26PQZd","tlshash":"d3a312704694f447c86e6ffd1844db2cd163372c7022a078b9af96d26a486e61c1f57f","first_seen":"2025-03-18T04:27:57.409907Z","last_seen":"2026-09-29T19:08:13.500309Z","times_seen":564,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/temp/custom/images/slider-mainbg-002.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.363Z","timestamp":1790658156363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /temp/custom/images/slider-mainbg-002.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 157770\r\nlast-modified: Sun, 11 Jan 2026 19:32:21 GMT\r\netag: \"2684a-64821d1307b40\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":157770,"size_decoded":158153,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x730, components 3","md5":"ef58360d086e5cde10e81f53016f0721","sha1":"f854b33628d8f08c140b3eaf1512149c786f3ae3","sha256":"791bf0838f41d820f29c54c4157fb877eed9391ee4c9fbe5c740bc0aaa9fa12c","sha512":"eed48f42449ea66dad81a9c18d8fe4da21553f075442540c98fab98306e2971cdb0435bc483bf9e69d1cc9343c84e20169397ab5130d664ee98eb28cc86dee48","ssdeep":"3072:rZnn76sllzr98fzNYVdtvu3jNBXpeQKNr9QW63RBJVTpNJ6RxsfctBJTpgFy/:lnn76sD98fziVmznIpQjH7bctBHOy/","tlshash":"30f3123928f4494bce964ff60d66d6976eb24f20e71651c820ff263137820e49a213fb","first_seen":"2025-03-18T04:27:57.413662Z","last_seen":"2026-09-29T05:05:43.732526Z","times_seen":474,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.793Z","timestamp":1790658156793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 23 Sep 2026 20:24:42 GMT\r\nexpires: Thu, 23 Sep 2027 20:24:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 463074\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1597,"size_decoded":2271,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-09-30T04:02:09.202118Z","times_seen":37928,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googleads.g.doubleclick.net/pagead/id","fqdn":"googleads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.178.98","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-29T05:02:37.123Z","timestamp":1790658157123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:59 GMT","end":"Thu, 03 Dec 2026 19:21:58 GMT"},"fingerprint":{"sha1":"6D:4B:09:77:4A:82:B1:89:58:5A:48:DF:0E:ED:A3:20:0A:71:0C:D0","sha256":"75:D4:79:B3:AF:DF:50:F3:C0:13:64:66:4E:FD:E5:C2:5B:57:92:74:C1:80:CC:D2:DC:A6:F9:EF:40:FA:1E:31"}}},"request":{"raw":"GET /pagead/id HTTP/1.1\r\nHost: googleads.g.doubleclick.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.youtube.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\np3p: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.youtube.com\r\ndate: Tue, 29 Sep 2026 05:02:37 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T04:35:38.282382Z","times_seen":18732258,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":2,"connect":47,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kBo8UDI-1M0wlSfdzyIEkpwTM29hr-8mTYCxCmuA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.359Z","timestamp":1790658156359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/archivo/v25/k3kBo8UDI-1M0wlSfdzyIEkpwTM29hr-8mTYCxCmuA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://envoycore.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:06:25 GMT\r\nexpires: Tue, 28 Sep 2027 16:06:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46571\r\nlast-modified: Mon, 08 Sep 2025 17:57:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39156,"size_decoded":39968,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39156, version 1.0","md5":"b590eac708ab31938a2b67ab7805bd8b","sha1":"55ba8f2b88b65a56f00108ee08200f32d5b26b84","sha256":"3d109f97a71d3d3d04d16e5c4b95be8f89146a55ebbed239b90f5a8c5d4f437a","sha512":"7b7458b8aeff6ca9978e97015961de788d561b706c59a7d9b5929ec660b14deb64083d970a8b09ab6a0fa608a0cc8ba4fa999ff7081c8f9803b06ecbc4f50c33","ssdeep":"768:HxFN+MkgnkudzCtNe1ck1NToNiADfLa2UFIUa7J6kkOlWiRbM8pQV:RX+MkgkUzcNswYCfL5UVaxkIdy","tlshash":"7e03012bc3f45d8f2f32c674e1801943e9ab4a14ce1af868ac77c97506f9730d19b584","first_seen":"2025-06-14T03:24:43.788943Z","last_seen":"2026-09-30T02:20:19.460669Z","times_seen":1493,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"envoycore.click/images/row-bgimage-2.jpg","fqdn":"envoycore.click","domain":"envoycore.click","tld":"click"},"ip":{"addr":"213.202.222.231","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.372Z","timestamp":1790658156372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"envoycore.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 12:35:04 GMT","end":"Wed, 23 Dec 2026 12:35:03 GMT"},"fingerprint":{"sha1":"4F:97:0B:F5:5F:0F:7B:9B:7E:FA:74:04:CC:B3:8D:E2:A3:93:99:E1","sha256":"DC:9B:12:31:A2:A9:26:9E:C9:76:F3:96:6B:5E:89:1E:D5:C1:10:2F:30:12:A7:71:92:44:DF:29:CF:55:A9:6C"}}},"request":{"raw":"GET /images/row-bgimage-2.jpg HTTP/1.1\r\nHost: envoycore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://envoycore.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik53eEd5REJHNFdPVXZoVUpMS2VPUmc9PSIsInZhbHVlIjoiczA5MEFOZWM0akRCdG4yRks0Mk56RkZMREVPelJnK0QrbnFMa21pTTJHSTcrTHkrTkZDSGg5Y0d1WlJtb04rdlV6eDg0M091UWpIS3JJRGRQblFOaEt3aS93VnFaVXV3VDY0R2cwUXdmRU5IRjNzMUhWZVVoWWREK0hBbXdVZ0MiLCJtYWMiOiJlZmE4MGE4ZDg4MThhNjQ3NzY4YzNhYzhiOWM5NWU2ZjA4NzRiMDRmOTgyZDc1ZTRkN2E2MWEyY2NkYmExMzI1IiwidGFnIjoiIn0%3D; vinsfx_session=eyJpdiI6IlZuSlFpejBZTkFXbXk4WFhjMnlvcXc9PSIsInZhbHVlIjoiQ1V1OW1vS2QyL3JaV0xFbWlLTVpSdDRQSkVVSk1jUDdFN0IvMUNhVE8xbkVrWVE2c0NINVQ4Z0IrV3NJTVlCWTJDcHBpbGthSUdXM0Y3NWJwenhxYU11MzFkdnorVXVZMXBJZ2dBeGJjWlNvRUFQeWZLSUVJMVpaRjdMQzlvTXMiLCJtYWMiOiI4M2E1YzQ1OWYwNmE2NGNkNzAzOWE1YjVjNzZmNmNkMjI4ZTkyMWNjYTE4NjQ1MWU0YTljZDgyODU1ZjQxMTY1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Tue, 29 Sep 2026 05:02:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":917,"size_decoded":818,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"736374b72f0d7fc3fae531b8eec357c5","sha1":"3a3dd37afb1024358323f270edcfde0b190175c8","sha256":"73c78c639dd8f7510a49e8b0f82104de5ec97875574de92ad0ddd09dc61906b3","sha512":"76d932137147440aac4605eaa83a5befd46dfa16b0424ebd5184acfd45e71d61b5a49285599677041b60d3cdbdcc7105bbc41888792f1571e020636f14597f1b","ssdeep":"","tlshash":"7511006b48491aef13408172b010366cd0dbee5b6a426800f47701a66ed8a88d97d8d8","first_seen":"2026-09-29T04:49:30.518694Z","last_seen":"2026-09-29T05:03:56.295126Z","times_seen":2,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"envoycore.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"envoycore.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://envoycore.click/","date":"2026-09-29T05:02:36.789Z","timestamp":1790658156789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://envoycore.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 18:42:37 GMT\r\nexpires: Tue, 28 Sep 2027 18:42:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37199\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4798,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-09-30T04:22:25.082877Z","times_seen":39237,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}