{"report_id":"adbed483-f2b5-430f-aeb0-6235c6c70f60","version":6,"status":"done","tags":[],"date":"2025-07-18T07:53:44Z","url":{"schema":"http","addr":"vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","fqdn":"vmpatch.com","domain":"vmpatch.com","tld":"com"},"ip":{"addr":"172.67.143.53","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","fqdn":"vmpatch.com","domain":"vmpatch.com","tld":"com"},"title":"File Pull Request"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-22T07:53:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"vmpatch.com","ip":{"addr":"104.21.39.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-30","domain_rank":0,"first_seen":"2024-10-23T21:26:04.526827Z","last_seen":"2025-05-27T09:19:20.366013Z","alert_count":7,"request_count":7,"received_data":68671,"sent_data":4013,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-07-16T15:24:25.336348Z","alert_count":0,"request_count":3,"received_data":28679,"sent_data":1391,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-18","alert":"Sinkholed","trigger":"vmpatch.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@thumbmarkjs/thumbmarkjs/dist/thumbmark.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"549ae72e6f04a1be3845c2467b00f5cb","sha1":"23a1fa40e24b07810b0db9d77ad69f02fe8e47c1","sha256":"ee78100bc66cf23fd224b83821eccdfeec4c4f8007af640ec96c4f7b0ffeb6b4","sha512":"afb73d447c310052b73a4885b3bf5a85896f19cfd7ca854a22253f2e0b36f3183400fb4f5c67c1596090e064d91c94732f5a81cfb6c7bafae57415f15d87bd72","ssdeep":"384:lrjNO+S3AcKS9jfnsxVlZv0dUEusSKcC2vZlR5S03NjtTgFqtWkxJ59yCJKZf2+T:l1asxVlZsdUEusY9vZP5SoNjtiwJ59Ve","tlshash":"049228a9b934203f426f3997a037400ba17db714360b8459f12d45866ad7e8e63fbf6c","size":19724,"data":"","first_seen":"2025-07-11T04:58:14.321758Z","last_seen":"2026-02-16T11:46:34.214394Z","times_seen":359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","fqdn":"vmpatch.com","domain":"vmpatch.com","tld":"com"},"ip":{"addr":"104.21.39.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0eaa312c6884ef5f8a21a0ecf300b49","sha1":"11e5e4574ac8c1ced03dde10e12e2c56d936ed17","sha256":"2fd36d4ea04bc5fd73dec2336bbcff253b66d359bdd5af31565d3ba78593318c","sha512":"56d0164b4e2882de90b2815fffc2c468843832736e7e2ef239cfd072a28073fc2184aa1188e6a2060f62c12e821e57f5e15f5ca8356bef301d5845182ecae363","ssdeep":"","tlshash":"70900233f0c18c7e4021b04411693508b543011c8290102066010830953704b95040c4","size":50,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-04-12T12:21:18.178872Z","times_seen":14104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","fqdn":"vmpatch.com","domain":"vmpatch.com","tld":"com"},"ip":{"addr":"104.21.39.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0eaa312c6884ef5f8a21a0ecf300b49","sha1":"11e5e4574ac8c1ced03dde10e12e2c56d936ed17","sha256":"2fd36d4ea04bc5fd73dec2336bbcff253b66d359bdd5af31565d3ba78593318c","sha512":"56d0164b4e2882de90b2815fffc2c468843832736e7e2ef239cfd072a28073fc2184aa1188e6a2060f62c12e821e57f5e15f5ca8356bef301d5845182ecae363","ssdeep":"","tlshash":"70900233f0c18c7e4021b04411693508b543011c8290102066010830953704b95040c4","size":50,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-04-12T12:21:18.178872Z","times_seen":14104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vmpatch.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"vmpatch.com","domain":"vmpatch.com","tld":"com"},"ip":{"addr":"104.21.39.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-12T14:00:07.97043Z","times_seen":300599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","fqdn":"vmpatch.com","domain":"vmpatch.com","tld":"com"},"ip":{"addr":"104.21.39.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e774dbaa9500514f4a08e088d3f54554","sha1":"1e6611d953d8ff119ac2ebe1b6cee7ed8b99d221","sha256":"3821b318de2d7cc049d7ea1dc4e9265aeb295263523e7a0c4b4e4f7c7612241e","sha512":"67551d218fac359f2988b1382e14b0e27257e8c55a323791968eeb821cf9ec855d7b8530b91f603f4e79ecba40b941444593e4ff4fe7aa26765521c415f60fe5","ssdeep":"192:coqD592HLBtR6UU3ENVfZ+UKP7GJxdw/PhbZ+UZ7Tb4+1mvK6kn2OjZgrdiS7OO3:ctD5sHLBtRrOSx+UKvZ+URTUnKdn2tOG","tlshash":"5af1321f61bb04140aabe06abf893204782250072896e815bd7c915cbfefd56a0f67df","size":8191,"data":"","first_seen":"2025-07-18T07:53:46.365624Z","last_seen":"2025-07-18T07:53:46.365624Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"vmpatch.com/frontend-assets/image/vmpatch-icon.ico","fqdn":"vmpatch.com","domain":"vmpatch.com","tld":"com"},"ip":{"addr":"104.21.39.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","date":"2025-07-18T07:53:23.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vmpatch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 May 2025 13:52:18 GMT","end":"Fri, 22 Aug 2025 14:51:09 GMT"},"fingerprint":{"sha1":"1E:DE:82:A9:39:17:5C:A9:CF:D4:AB:72:9F:34:E4:2D:67:95:B7:68","sha256":"C8:C4:10:15:CE:32:C8:DD:FC:0D:C5:9A:F6:15:A4:3C:5D:BF:F8:61:9F:BA:35:BC:3E:0D:CA:00:F0:FC:8B:65"}}},"request":{"raw":"GET /frontend-assets/image/vmpatch-icon.ico HTTP/1.1\r\nHost: vmpatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 18 Jul 2025 07:53:23 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3C4lGoyR7rWKO7QqVYaJMHBN1xSHTFSZDjkJyfnBS%2FHGgBlk4r7BFDWd9y32kMybNjGYnQdlRo5N7GK2aDK5RhcC1MieQw5jS2caLx%2BbLiapTLEi1tCz9iLHHK9kYg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Thu, 10 Apr 2025 08:51:16 GMT\r\netag: W/\"67f78684-eae\"\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\naccess-control-allow-origin: https://vmpatch.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Origin, Content-Type, Accept\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 961067b299d05691-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1952\u0026min_rtt=520\u0026rtt_var=1329\u0026sent=240\u0026recv=318\u0026lost=0\u0026retrans=0\u0026sent_bytes=17532\u0026recv_bytes=18160\u0026delivery_rate=491413\u0026ss_exit_cwnd=14903\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=68d6a1e7da2ae3bf\u0026ts=1263\u0026inflight_dur=37\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3758,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x28, 32 bits/pixel","md5":"bec5ae735e42fbda8f9140486b785d54","sha1":"6a01ce520b6fab95d25036157f8e4f7b963f41de","sha256":"2053aaaeac8dbc4f114dc2ed28493d55cf86734d7deaef2c9d5dff3a4cb4db5f","sha512":"e0354d9cdb01a30799fec279b8fbecfde76252832437b55b2538200b54aabb7b84c969e21cbc363f1971776637b87f5d417987cc64143e828e860d63937c49d4","ssdeep":"","tlshash":"8771256b7f8daec6d13e9ef4182622653b60a94e762183834470fe71d9c60e73e13394","first_seen":"2025-07-18T07:53:46.348645Z","last_seen":"2025-07-18T07:53:46.348645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-18","alert":"Sinkholed","trigger":"vmpatch.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","fqdn":"vmpatch.com","domain":"vmpatch.com","tld":"com"},"ip":{"addr":"104.21.39.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-18T07:53:22.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vmpatch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 May 2025 13:52:18 GMT","end":"Fri, 22 Aug 2025 14:51:09 GMT"},"fingerprint":{"sha1":"1E:DE:82:A9:39:17:5C:A9:CF:D4:AB:72:9F:34:E4:2D:67:95:B7:68","sha256":"C8:C4:10:15:CE:32:C8:DD:FC:0D:C5:9A:F6:15:A4:3C:5D:BF:F8:61:9F:BA:35:BC:3E:0D:CA:00:F0:FC:8B:65"}}},"request":{"raw":"GET /download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip HTTP/1.1\r\nHost: vmpatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 18 Jul 2025 07:53:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\naccess-control-allow-origin: https://vmpatch.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Origin, Content-Type, Accept\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sjfEFIQ5R0lxFYDKCLxtGyK0J6CpabGIxLC6FUEOoPc%2F3iHipZ%2B6Anit2r00WusP8FawwD7efiOYpIj5i4pSoawi%2FAU7VqaJEw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 961067aaaae356a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14963,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2874)","md5":"89fbe37e18e40f72131da0efba3eeef0","sha1":"c5438910a25b3d7daf7ecaa5fca4a00f4b9d8b90","sha256":"ae5058f97df35f7c2e8e6f89903435181e4a1eb4a3e9b216baa475a7218d1129","sha512":"d28efabcb48e878a6eccb84e05b0fe1cb996d037a70da273c8f7fe7695078692b44e9a99b0d7a9b6efaf2147ed8818b791ccfbecc4fdaf40afadfc42345b8dae","ssdeep":"384:6U2QLKjDkzVZtD5sHLBtRrOSx+UKvZ+URTUnKdn2tO4vUaVA:6XXjDkZZNF4HK","tlshash":"6462c52b616744142697e0987beab34835235003a542dd65bcfc812cffdee95a0fa7cb","first_seen":"2025-07-18T07:53:46.352903Z","last_seen":"2025-07-18T07:53:46.352903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":75,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-18","alert":"Sinkholed","trigger":"vmpatch.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vmpatch.com/frontend-assets/image/vmpatch.com-green-mark.png","fqdn":"vmpatch.com","domain":"vmpatch.com","tld":"com"},"ip":{"addr":"104.21.39.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","date":"2025-07-18T07:53:22.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vmpatch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 May 2025 13:52:18 GMT","end":"Fri, 22 Aug 2025 14:51:09 GMT"},"fingerprint":{"sha1":"1E:DE:82:A9:39:17:5C:A9:CF:D4:AB:72:9F:34:E4:2D:67:95:B7:68","sha256":"C8:C4:10:15:CE:32:C8:DD:FC:0D:C5:9A:F6:15:A4:3C:5D:BF:F8:61:9F:BA:35:BC:3E:0D:CA:00:F0:FC:8B:65"}}},"request":{"raw":"GET /frontend-assets/image/vmpatch.com-green-mark.png HTTP/1.1\r\nHost: vmpatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 18 Jul 2025 07:53:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 15391\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Apr 2025 08:51:16 GMT\r\netag: \"67f78684-3c1f\"\r\nexpires: Mon, 11 Aug 2025 15:56:51 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 489390\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cpHz1P%2B52MyJTbufP%2BT3ASALx7EesemEI4HSsSA00NdMlfn%2BuCMvfROnSA6HzNS0SBUqJQCylL61ZjE3NAzit5uYnVwRNkn%2FGw%3D%3D\"}]}\r\ncf-ray: 961067ad9c5456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15391,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 980 x 980, 8-bit colormap, non-interlaced","md5":"92a61e33ae9082c0c716772d0374c453","sha1":"4f216b04d20b66eefb0ecf65f63daa178423a59e","sha256":"5c3d0fa576bdf977a356d251db58fa8405d9e0d48530b74a1ea81a8bf2035540","sha512":"37395d406c8babb8f4085b66077fbdc6e6514de9ae0df426444677528cb381a0281c2888dcd2fdc254eaee978f0a134f85b3ff013be02a3da9f27da9524c259e","ssdeep":"384:6k3v/8AuWlCOicPEtmrz68d5oj7lQNHn5doX7gz:F9uX6eGx5W7lmoXkz","tlshash":"2062c0f2b5b2fc4bfdc3b2b504249fc5a0939eba771882b1770b5b909522166dd08dd8","first_seen":"2025-07-18T07:53:46.355084Z","last_seen":"2025-07-18T07:53:46.355084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-18","alert":"Sinkholed","trigger":"vmpatch.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vmpatch.com/frontend-assets/image/vmpatch.com-red-mark.png","fqdn":"vmpatch.com","domain":"vmpatch.com","tld":"com"},"ip":{"addr":"104.21.39.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","date":"2025-07-18T07:53:22.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vmpatch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 May 2025 13:52:18 GMT","end":"Fri, 22 Aug 2025 14:51:09 GMT"},"fingerprint":{"sha1":"1E:DE:82:A9:39:17:5C:A9:CF:D4:AB:72:9F:34:E4:2D:67:95:B7:68","sha256":"C8:C4:10:15:CE:32:C8:DD:FC:0D:C5:9A:F6:15:A4:3C:5D:BF:F8:61:9F:BA:35:BC:3E:0D:CA:00:F0:FC:8B:65"}}},"request":{"raw":"GET /frontend-assets/image/vmpatch.com-red-mark.png HTTP/1.1\r\nHost: vmpatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 18 Jul 2025 07:53:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 4744\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Apr 2025 08:51:16 GMT\r\netag: \"67f78684-1288\"\r\nexpires: Sun, 03 Aug 2025 08:49:18 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1206243\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uURaiUL4Eo2%2FNFEOSxJZga9ubFYEbY%2BG7J%2F6Zt9QCWN4inwyP8Tbh2EuCcnAj4t%2FWr1frMuujulscdY5w5P%2FsGHHnK0p6KdV7w%3D%3D\"}]}\r\ncf-ray: 961067ad9c5556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4744,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"ab48cd26d05e1e938de885ec24a9975e","sha1":"7235575de63c837b87ccf48d79834e71f212f99d","sha256":"d96471c36d044b64541b78829b686d5e1868b531ad631f534bfe5faf52ef2ff0","sha512":"cac86158083e13552746943d4ed6ac2fd3ad34a9d74bf84300a358db7d8754f4771db2109a65128a09bfa615790bf5f79d2e0277dfaf76cbc15ed961fcef84f4","ssdeep":"96:HkpX871st+38sHZzTDS2CCSQWQKq1eNXr/RmXw6RDr6:HkpM5s0HNdCG6p/CRDu","tlshash":"30a18ea437dd6a3ad1858e6c368868a7da0b86ead1e3b0cc3c5c867a6541f1ba510432","first_seen":"2025-07-18T07:53:46.356736Z","last_seen":"2025-07-18T07:53:46.356736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-18","alert":"Sinkholed","trigger":"vmpatch.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/alrra/browser-logos/src/chrome/chrome_48x48.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","date":"2025-07-18T07:53:22.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/alrra/browser-logos/src/chrome/chrome_48x48.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vmpatch.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 75.0.0\r\nx-jsd-version-type: version\r\netag: W/\"c5e-pZJC6U+TPwaI25cVwhikj8lWwe0\"\r\naccept-ranges: bytes\r\nage: 10092\r\ndate: Fri, 18 Jul 2025 07:53:22 GMT\r\nx-served-by: cache-fra-eddf8230081-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3166\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3166,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"e9076c4711d7f9504858f74ffff6db62","sha1":"a59242e94f933f0688db9715c218a48fc956c1ed","sha256":"eccdfe9d867373e2da66eedfcaaab40cbcdf6a221b83d6ee1400895a3e4c8046","sha512":"f992d8f642816216c1becb3ef5f1c6ed172deec1e7404911b011dd3eb6ac96e849ce48a27ece092a0275ba6fcbf6a1beda58c7b442ae46ae37c30624beffa675","ssdeep":"","tlshash":"c4516d946148a7f12a2989c584832a7a7673dcd762c388dc0673e73dd6ab279600d8c2","first_seen":"2023-11-12T10:09:06Z","last_seen":"2026-01-09T03:23:55.092866Z","times_seen":8,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":38,"dns":4,"connect":29,"send":0,"wait":43,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vmpatch.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"vmpatch.com","domain":"vmpatch.com","tld":"com"},"ip":{"addr":"104.21.39.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","date":"2025-07-18T07:53:22.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vmpatch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 May 2025 13:52:18 GMT","end":"Fri, 22 Aug 2025 14:51:09 GMT"},"fingerprint":{"sha1":"1E:DE:82:A9:39:17:5C:A9:CF:D4:AB:72:9F:34:E4:2D:67:95:B7:68","sha256":"C8:C4:10:15:CE:32:C8:DD:FC:0D:C5:9A:F6:15:A4:3C:5D:BF:F8:61:9F:BA:35:BC:3E:0D:CA:00:F0:FC:8B:65"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: vmpatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 18 Jul 2025 07:53:22 GMT\r\ncontent-type: application/javascript\r\nexpires: Fri, 18 Jul 2025 08:41:22 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZV%2BoJdq%2FkNM9uNpcUv%2FMOAadBHs3dTHqIlYtJcbz3laKe54uejDnS5kSpc0vxhhAsTl55PTaOSE8O4%2B%2B0LNHpqRUQXnnw%2BcBgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 961067ad9c5d56a8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-12T14:00:07.97043Z","times_seen":300599,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-18","alert":"Sinkholed","trigger":"vmpatch.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@thumbmarkjs/thumbmarkjs/dist/thumbmark.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","date":"2025-07-18T07:53:22.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@thumbmarkjs/thumbmarkjs/dist/thumbmark.umd.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vmpatch.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.0.0\r\nx-jsd-version-type: version\r\netag: W/\"4d0c-I6H6QOJLB4ELDbnXetafAv6OR8E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 18 Jul 2025 07:53:22 GMT\r\nage: 36368\r\nx-served-by: cache-fra-eddf8230085-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 7665\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19724,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19681)","md5":"549ae72e6f04a1be3845c2467b00f5cb","sha1":"23a1fa40e24b07810b0db9d77ad69f02fe8e47c1","sha256":"ee78100bc66cf23fd224b83821eccdfeec4c4f8007af640ec96c4f7b0ffeb6b4","sha512":"afb73d447c310052b73a4885b3bf5a85896f19cfd7ca854a22253f2e0b36f3183400fb4f5c67c1596090e064d91c94732f5a81cfb6c7bafae57415f15d87bd72","ssdeep":"384:lrjNO+S3AcKS9jfnsxVlZv0dUEusSKcC2vZlR5S03NjtTgFqtWkxJ59yCJKZf2+T:l1asxVlZsdUEusY9vZP5SoNjtiwJ59Ve","tlshash":"049228a9b934203f426f3997a037400ba17db714360b8459f12d45866ad7e8e63fbf6c","first_seen":"2025-07-11T04:58:14.321758Z","last_seen":"2026-02-16T11:46:34.214394Z","times_seen":359,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":14,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vmpatch.com/frontend-assets/image/vmpatch-dark-icon.png","fqdn":"vmpatch.com","domain":"vmpatch.com","tld":"com"},"ip":{"addr":"104.21.39.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","date":"2025-07-18T07:53:22.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vmpatch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 May 2025 13:52:18 GMT","end":"Fri, 22 Aug 2025 14:51:09 GMT"},"fingerprint":{"sha1":"1E:DE:82:A9:39:17:5C:A9:CF:D4:AB:72:9F:34:E4:2D:67:95:B7:68","sha256":"C8:C4:10:15:CE:32:C8:DD:FC:0D:C5:9A:F6:15:A4:3C:5D:BF:F8:61:9F:BA:35:BC:3E:0D:CA:00:F0:FC:8B:65"}}},"request":{"raw":"GET /frontend-assets/image/vmpatch-dark-icon.png HTTP/1.1\r\nHost: vmpatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 18 Jul 2025 07:53:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 22529\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Apr 2025 08:51:16 GMT\r\netag: \"67f78684-5801\"\r\nexpires: Sat, 16 Aug 2025 12:22:40 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 70242\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4kjXyc5RtWvmRd%2FvFwOkE2ymMd65DUmF8RNtCjTIoJreTQL5c%2F%2BL0Fuewaa7b9wx0xuK6u%2F4QbCZVpFjjDAlmi6F%2BgY5zwErg%3D%3D\"}]}\r\ncf-ray: 961067ad9c5256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22529,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 912 x 202, 8-bit/color RGBA, non-interlaced","md5":"85f89654ce148dc6375a1e391c2573a9","sha1":"2318226982c9edd88d0b4fdfb692d94969a9a0f7","sha256":"04384eefb903470e0ee30ce73ad52d8740d826a301eda925d84d0ede5c45ce6d","sha512":"4927595252ab88dd98a5cd75e6ca247c3dcde45a933c5bebd58259486a1fca48099bfe991f61cf01016bd258bed9c4f3a18a6b1ea00a5f513abdce8dc2cefb74","ssdeep":"384:inLkPFMImFIKr4n+xBajqECsadE2owryNX9dpM+dozA7R4p5r3Qm3:ioFMIMtMu8aJdtTr6tfPWzk4p5sm","tlshash":"02a2e047f7beaea9f23c3a516fb006175223a478bbe9ddee68b16355700149d084c2c6","first_seen":"2025-07-18T07:53:46.362171Z","last_seen":"2025-07-18T07:53:46.362171Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-18","alert":"Sinkholed","trigger":"vmpatch.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/alrra/browser-logos/src/edge/edge_48x48.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","date":"2025-07-18T07:53:22.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/alrra/browser-logos/src/edge/edge_48x48.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vmpatch.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 75.0.0\r\nx-jsd-version-type: version\r\netag: W/\"df6-r+eDnEh4qbOk2tLnzG6DTNiGAgU\"\r\naccept-ranges: bytes\r\nage: 4155\r\ndate: Fri, 18 Jul 2025 07:53:22 GMT\r\nx-served-by: cache-fra-etou8220153-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3574\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"5ca69eab6f315bcd77c1be2a59760e5e","sha1":"afe7839c4878a9b3a4dad2e7cc6e834cd8860205","sha256":"a189a6054451f74073ba27c9e0ff35f46402263a2f883a74b9f6a89bb42b7975","sha512":"f089a8be9ef55b8a7a265b93d91148926512ba426cd3a12ad12520077c84c1f5aabbea8d599b811a3ba1bd86c907782670860cb59981f532aaaed2af6412d6a7","ssdeep":"","tlshash":"a7715c86e4dd5c0bda515d310e2eb5b90c677a3fc3b74122c69c76313b09aaaa31570d","first_seen":"2023-11-12T10:09:06Z","last_seen":"2026-01-09T03:23:55.072291Z","times_seen":11,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":32,"dns":4,"connect":13,"send":0,"wait":43,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","fqdn":"vmpatch.com","domain":"vmpatch.com","tld":"com"},"ip":{"addr":"104.21.39.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip","date":"2025-07-18T07:53:23.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vmpatch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 May 2025 13:52:18 GMT","end":"Fri, 22 Aug 2025 14:51:09 GMT"},"fingerprint":{"sha1":"1E:DE:82:A9:39:17:5C:A9:CF:D4:AB:72:9F:34:E4:2D:67:95:B7:68","sha256":"C8:C4:10:15:CE:32:C8:DD:FC:0D:C5:9A:F6:15:A4:3C:5D:BF:F8:61:9F:BA:35:BC:3E:0D:CA:00:F0:FC:8B:65"}}},"request":{"raw":"POST /download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip HTTP/1.1\r\nHost: vmpatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vmpatch.com/download-file.php?file=KgGmaCWxE9peNYT/download/VMware-ESXi-7.0U3w-24784741-depot.zip\r\nContent-Type: multipart/form-data; boundary=---------------------------171425394114989190562344663829\r\nContent-Length: 336\r\nOrigin: https://vmpatch.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 18 Jul 2025 07:53:23 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hH4veRFsbxdEe%2F6mja4g4GEqLQbMtFSlmeMsjIXz2xHi2QOUoIR5NI736%2B18iq7v7Z3d0F1QAELseA8wrt5q4irPq6jO5dBs2iRY7GGB6h2rRdmyzSMNXD6TghpUKQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\naccess-control-allow-origin: https://vmpatch.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Origin, Content-Type, Accept\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 961067b2d9d45691-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1916\u0026min_rtt=520\u0026rtt_var=1069\u0026sent=242\u0026recv=319\u0026lost=0\u0026retrans=0\u0026sent_bytes=19533\u0026recv_bytes=18205\u0026delivery_rate=850047\u0026ss_exit_cwnd=14903\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=68d6a1e7da2ae3bf\u0026ts=1330\u0026inflight_dur=40\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ad5c71dcac3feca8847c2ace9cf60be","sha1":"ce659e81938c88228302171a6d6fdafacce99f3f","sha256":"f975d15bf30647bc82d1bb38d68cf3f0fbe854769a4dd5a21d31e43e4f34dd69","sha512":"b7823160bf09b3fabb8fd034a31a340cb443b7ebdd20be6ed3e9b55185e3f5633772cf5c34e12b1b3d08e5612c6ccfbbe0e97c54f9dd8c470d8101cee2db05bd","ssdeep":"","tlshash":"377000000020202028800820800000202ffc0a80083a0880002e80228a880e8820880a","first_seen":"2025-07-18T07:53:46.364023Z","last_seen":"2025-07-18T07:53:46.364023Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-18","alert":"Sinkholed","trigger":"vmpatch.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
