{"report_id":"b22d6021-a15f-4352-9ba3-d1df8b89e045","version":0,"status":"done","tags":[],"date":"2026-07-07T14:44:52Z","url":{"schema":"http","addr":"itemexpansion.com/","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"itemexpansion.com/#/login","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"title":"Walmart","dom":{"size":20267,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3464)","md5":"dcdb1df98c0a86343ef87f5eddb9d773","sha1":"ea2a177b0ebfed727f8a8ebcaf286bf911a344eb","sha256":"042f30470272953e95b65925221b8fd60f228f2d1d9aa18729e5f84b88b703d4","sha512":"cbf0a430f6e7353de2de512316dd545efba92389dfcc05b115d7760df70dc6cc4958519c7d07c84f0d5e39277d062e1f95941035f049bfeca1ffa8c721ca3e09","ssdeep":"192:dqhXJt+PRGwHg+EpCsog+EpCsWAADcuiueyO9wCiySHiA12Td/Fz1B5DIa35m6Ln:XHg+fg+PAV0eb","tlshash":"25927609bc624425281b339367e7aa5e67b832878f11fd66f4df52e09f827f135a1720","dom_hash":"domhash2415fd67994e74b62da4b983af789f0e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"itemexpansion.com/","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T14:44:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":3,"received_data":131847,"sent_data":1713,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":34194,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"itemexpansion.com","ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":216,"request_count":72,"received_data":13179040,"sent_data":35058,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"itemexpansion.com/assets/home-Cf7_q3v0.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6be33825f69aedaf65ae9e01e93cc3c6","sha1":"0ca846496dac5b376fb9e4de1bdd2875e4e80150","sha256":"3b0ad146c3b6fa05f34c901dcb146d4830eeeb031822ecaf3c0e02301049397d","sha512":"824936d53cfabf33779976bb11413a2d4335ecc24328dad2fe5358f7c3f37127eda5aad5c2fc22ec2010c32a7037a929ef7b5f078d56f82cac70c7f88cb5240d","ssdeep":"","tlshash":"cc510509d825c7bd8117dcf4e842d050a12e26bbd7d1d630e1fe8235aba1c7dc20d639","size":2528,"data":"","first_seen":"2025-10-05T07:48:41.074508Z","last_seen":"2026-07-16T16:15:02.676705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/ssrBoot-BrUVC5_y.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6050e511467c9dc373d189d4193655e","sha1":"d55e91ac72002e52d3bb68c84b49cee00909ff8d","sha256":"88242a9e8f19ca068c517ff62bd8c762a86ea063989aa0d84c1fc85cfb5cb7af","sha512":"1af587322e32c4c710e9bcbbba2f38d7e3b2db6f840612c05effb7ba9a78e351da54488549a2b40f10888d547966cae71393d8028648da59e858d5a4a21c6c22","ssdeep":"","tlshash":"82d02e8eb04443f506938ae9436e4a24603a6238275a86e2702b099406644aa836bee6","size":253,"data":"","first_seen":"2025-10-05T07:48:41.088048Z","last_seen":"2026-07-16T16:15:02.677395Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VContainer-C8i_1blp.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fbdfcfbc302618e4eace664246482c4","sha1":"b27bb07492e77cce35d41cffa80841cd17c6a580","sha256":"1857959ad03c4f39c772e7fdcf9ee70b8630d578ad2df2ce3c43bea15ecaeb9a","sha512":"6df4fb7b93b385e2fcad939cc4bca289f62f3137b02b79738d3093de703538f1e3a7c04ae900e3b072ff8cd28679c31cdf02ba14059e54728f06e8258776f5a5","ssdeep":"","tlshash":"55f05c096ec56674fa57184cdd1010001f215706de369cd470fe41d893a806c471ba9d","size":458,"data":"","first_seen":"2025-10-05T07:48:41.070415Z","last_seen":"2026-07-16T16:15:02.694262Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VRow-CXizTpyx.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c17587d784559b175314fe7a86f3a5a","sha1":"cc714cdbb82ae4797376e17cc10f853826160c88","sha256":"155e28f71abf639dfc4c00fdce3c24c7a365c44ced4c5a0ed4d56f3c566d0a2d","sha512":"c34573276121d1f3f317e201c29e593a49b317726d04fbbf7bee847e83d4dc7d019072743326123e7807014d0e401da377c4e473d450ac5f8e1da715808c7166","ssdeep":"","tlshash":"a83113647868e2b71ec64c94d5b46061fcdd2e4bf091e5e0b1ef09ac63861d82376e8c","size":1561,"data":"","first_seen":"2025-10-05T07:48:41.085689Z","last_seen":"2026-07-16T16:15:02.697194Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VCol-D4kWJu9E.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c010a39a5f640020b3ec37bce1d2af7","sha1":"ae82e92787e5c3b9f922471d8e79603e90414f16","sha256":"33f77efcd17ccbca7b32cf4672463d22dd323f4c8c855fa609d27f48a0a0637e","sha512":"831f82e128973ea7e5fe3af86650e7e393a40ef8519cd31827287afcb279e145c30d2ba9c50778c87b584045364a32619f4909907e59cb2e6e6d050860b4f94e","ssdeep":"","tlshash":"55210255348ef1b216c098a49725085214c92f0ea6a6f6f1f3fe2d641f23084135bf9d","size":1431,"data":"","first_seen":"2025-10-05T07:48:41.080361Z","last_seen":"2026-07-16T16:15:02.701663Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/index-DIYNkqpD.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c51283929ad7b97223276c4213ee1d3","sha1":"36d05f1bce2654eb14a89a0ac996ee8eaca7e2bf","sha256":"f13bef425aa226fcc458471751cde8906b5be9757131bba4b03ccf25518f854f","sha512":"b69f5019962135309b5ca26966571d18324f521b505d3fa554dcc83a8aaa69cc745debc22139c72c94e7f12d2c001e78fa47bf4bc0a8033d2b9ecf1b3c16bb72","ssdeep":"96:xNXs6MY3KKEmdLfDQSatFEjg8b5m+t0Ytg8Y:zXsAimdDcfEJTeWe","tlshash":"5cb116e89c258a7bd09b419830d92441f0987beee3734a16bbf49da53b81cf5871e313","size":5111,"data":"","first_seen":"2025-10-05T07:48:41.054768Z","last_seen":"2026-07-16T16:15:02.681594Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VTextField-DLin2W5T.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89b0d9d4135d47720471bf6164593c90","sha1":"6007b19b0d99b2bf17951632be65ab4613d642fb","sha256":"4ffdd6a8bd10b21269a909eb4e2d051c56f85428ce3f8a6e3560690a7eea5455","sha512":"92d1b64a2e6c8eec79980ef3c514521688c0465e4d9b2e3ce0122b25bf4a0bbcee7b6a39eaefd8ef8d132a0d700225b7620dabcdfa1a35fef010c4d144a56b4d","ssdeep":"","tlshash":"c671d99878b9787347fb81aeb59148259b189b4b402604d1c4fec81232dde98f193b2b","size":3728,"data":"","first_seen":"2025-10-05T07:48:41.052872Z","last_seen":"2026-07-16T16:15:02.689738Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-07-17T10:00:04.904046Z","times_seen":48216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/index-Bn7QpJ5m.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbcc33fc229900337bff2e3b12e54d0e","sha1":"50b93fe7fe6d74921c09785c513381251c5ad2e2","sha256":"bd7e8df415eb6447cdb3c6204a52009fef12a07ed9569f6f3eca831a93b1101f","sha512":"8d5793052255cc2cbabd22d240071902d2356d6a3489a8ab1b4f3b4df065acc72c30fb6460204dba5618c749731f59e7d2f7af7339ae08dcd0131c9d67a56fde","ssdeep":"6144:Lme1p22ZuqrA5oBnPu0XznPmBnS9AFCmVb2D8Z671O:L71p22Zj3NfXznPmBP5qD8078","tlshash":"835439d93186b06253b609e550bb0106f33d2a45380dd4e4f16deaeb3e7390a92b7f6d","size":289453,"data":"","first_seen":"2025-10-05T07:48:41.062073Z","last_seen":"2026-07-16T16:15:02.696463Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VDialog-BpJgX4Eo.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a481924c7f7d15b89e8bd289c6ff73","sha1":"182a71162a1b43dbbd77148e33358d9e57be4bfe","sha256":"d707769c2d0cca9b696e754f66d4bb05d2b576416fc4041c7fbad3887e96eb7a","sha512":"982e677ec2ab8be735fde58c20d6811aec64978e4988616775b76fb49a2ab21408278ea9b0b2ced5a3ef65af132d965ecaf38ba7eef9d25dedbcd468ad27900f","ssdeep":"768:qLXFiFD5y1d3+l9xOuYUzG5JaKJKudZ/QMNboZXAZhsNXI1jpV26cNkkMQNiZ:QKoMuBtj4NkkQZ","tlshash":"49b22b98725530b153ff8a9ea067c346632a9795f01ac0e0703fddad2556f9422e3b3e","size":25483,"data":"","first_seen":"2025-10-05T07:48:41.105659Z","last_seen":"2026-07-16T16:15:02.723831Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/_plugin-vue_export-helper-DlAUqK2U.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-17T09:35:31.214403Z","times_seen":24237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/profile-CAy_R0u8.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"734f4480f464529ce4a78162342e42b8","sha1":"cd1b394b1dcf0c0f4f624e0dce96d59b2fed3f2c","sha256":"1805139fa3fb5e6f55a20662384e42b5f8dbb31ee1f784c3fa04fcd0a86db3a8","sha512":"8c4ddfe9e678f31f1d0a75ad41f9584cbbb3e302ab83b360cd58811d2697ac75fc114c17accdede16c13fc39cc8ded5a3871fa35513d98df7ce513565bf340f2","ssdeep":"96:3DpKZtgNdQhf0+Aj5WVKfVfwB1v5rtl2JwJ:3DpStGehfhAs4fVfwhrtl/","tlshash":"3191a51af9bcc6ff412b2d08b05a8c10710c0beee7b168a142fd8f19ba76c9416e4717","size":4218,"data":"","first_seen":"2025-10-05T07:48:41.067797Z","last_seen":"2026-07-16T16:15:02.707058Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VImg-CiMmmK5C.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff720f71171e199d11c5013a93565638","sha1":"962d0e7a2b41f9e0c3975389fbc7c594edc6cca0","sha256":"d1f555f3b6bb94b3eee92a9385bcd1761d8490a9cbab9af984af39b44ac82365","sha512":"9947d0623f8d90629acea951b16afd741288c4bd72c97e5465fb68f1d1144e7fba44dc8e007d8bc3f922a8cc138d19abbc934817b82a83fa304a4ae4ca403aba","ssdeep":"96:hG/Iq6ZHC5U1vCeg5JhHNneEx/vEE/bw5JDLCCBs+31M/UIx/ABYpfCtCVz:IQq6QCvCDHNeo3boLCCy+FUUIBAWyUz","tlshash":"58b1c70c398af9bda736a44c50b74011613c2b9b7310d8e450fa294ec3e9e64f35a67e","size":5189,"data":"","first_seen":"2025-10-05T07:48:41.094136Z","last_seen":"2026-07-16T16:15:02.698549Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/AppBarLogo.vue_vue_type_script_setup_true_lang-CFnjSkH0.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48ce84e06cc7617be46a474af8958575","sha1":"cdb7eec761667b7404ca41e911eae60d98ee2885","sha256":"f8ac7d6037746dd1a4f403adf147ff5693ffd5d9ecf92d62dea4442151647db0","sha512":"ac586ecee3ca4014ef7c28c0c344e681216ca75031df99f4ff2cbbbc57d1598e196ec9c8deee89a3414c6421a941cb799628caa49088148fe8c0751bb12366b4","ssdeep":"384:BayagZLa+gyx5y/dfVJnXJNXOU4VTUebsou0vBTKBja2couDhSG9PVCx:BayagVa+gQy/dfrTXOJJUebsou0vBwj5","tlshash":"33622a66b6d46575537b025af05a8200a37f07d9e122a1d0f9bf392d2090d9c23f5b3f","size":14681,"data":"","first_seen":"2025-10-05T07:48:41.07806Z","last_seen":"2026-07-16T16:15:02.717403Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VAppBar-DvTOpcjX.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd21037eec9df11b3cbe5668f24d9581","sha1":"26de1571f4fb30a8a107cb3832eb0072c31886b5","sha256":"9228709afe83ba9b72e27e205e2d2defec22473a6e6e4536160955dee9905503","sha512":"4c1f71b2deaa55b965543ddadb3f0ce962a2df9c5ce092d9b0ce99fc07db7094fcc26a2552fa0df9eed1c8b1f07b36c1ae09bde7e74aedac9a68a195e57c56ea","ssdeep":"192:ac8JC3P0U3Uu1Mh3XyOJqyR6HG02PCHNyRd1roffI2RZ3VTR:yI/Luh3COJqyR6m02KtyRfo3I8Z3VF","tlshash":"33c1c818b5abfd7093bb5689e8910641936c0b9c9251d0e4d0fb7d243168fe963d863f","size":6156,"data":"","first_seen":"2025-10-05T07:48:41.05603Z","last_seen":"2026-07-16T16:15:02.699405Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/forwardRefs-B931MWyl.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd28678f96913a6c83a91a858a3247e2","sha1":"a4caf2f94a05f90225844ce18d1243181c214957","sha256":"28b1c10b953288ca7b90f9803cef52218ff0ea67dc55fb644a8ac6060d33faa5","sha512":"e4a4b826fde8d7fe8a7af98444d2616be444c285485f91af04fc76c82c7e4a6da0c19df6f2855cd7059c62a1b50dd6840591f0c37faca69af74f04b68408a6d5","ssdeep":"","tlshash":"175183e035e3605917e001a710ea9b08f2145e30322ff58caa792046bc7be46f9b7226","size":2913,"data":"","first_seen":"2025-10-05T07:48:41.106848Z","last_seen":"2026-07-16T16:15:02.724798Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/modalWindow-CXzJBlO7.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ccec51a02c5d7809ff4fe59fd317dcf","sha1":"527be28f8854b18fa0515fa132417c20d13f911f","sha256":"282a244c03b5e7f73526714ca77d584235c4825396df1f7c0f4019947a1a155e","sha512":"7c77cac475ca7e473773cbc728994ab5a637065bb12a3565c187fbcb14c7fa833b8a7b228800d9433e42f54d3f4819240dd312c25c4d8dfdb995d88081fb1ecd","ssdeep":"","tlshash":"c3f0540cf424e3f595ebd8684534b402e14728ccabf194c0e19e413f56a106f532e748","size":509,"data":"","first_seen":"2025-10-05T07:48:41.114067Z","last_seen":"2026-07-16T16:15:02.706374Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VList-Cn0YDOXn.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efc5f878b3b631359a8df514ddf263c5","sha1":"ca61cf710a0b4e2ac15684070c46646cb349eea7","sha256":"dba7d13f1b4699d523d2ce8d7947cc1cac12b525a95aade2a66efae7d508cecf","sha512":"741c0bd9a2abb26210ff7a7366f885eb6035087f536a8e3562788fde3772b4ade9ce0fb62f19bcb91cbc8cd26f54382343cb0e2e07e069a5145ed0bacd454cff","ssdeep":"384:ahn0aZlItyDGwV4/7h4irx5Mb0+LlZxfi+Vb+6fFn7NsKsh1+b+AvSluPMVmdGFf:ah0a8tyDGwV4/7h4id5MPbfFVb+6fF7q","tlshash":"92a2e840f4d2b5345bbfa9ca84a440a2b10a2b986439d4e0f1a55f9c2699c48f3f5f7f","size":21356,"data":"","first_seen":"2025-10-05T07:48:41.069098Z","last_seen":"2026-07-16T16:15:02.710142Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VInput-tCCrEBJz.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f0a24db09e8d8b3583f81813c5662ac","sha1":"c472263c341a65d2340a029ba7d1753c51698de1","sha256":"9b0e8124c96b9461a0dbca70c15576a02f88353d279f797da71136c6528dd31c","sha512":"6b097474089b05585366f192d239a2459a731d8929baa237eba04d56ec704fc073113d9d6c1fdce187621da950f1e1fb302d87fb080524d359c53cb2f65ed918","ssdeep":"384:TovsAkk9n7MotqG2/8tLqKMjRsXP+zwmq5pjm2Y/6MEXaTjytY/6/havgcuvpcuj:TOxnqG2/8dqBsXP+zwmq5pjm2Y/6raTc","tlshash":"c7622a80787ab877cf3b54dc90d9d06186482795d83895e0d6bb2e7d03d8d9873a8b3e","size":15171,"data":"","first_seen":"2025-10-05T07:48:41.0425Z","last_seen":"2026-07-16T16:15:02.679163Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/CustomerService-7HlK-zJ6.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd1854610eb1a2237bb058243bcdda56","sha1":"33365ecd8a6d36107ba08f643f6bf2cae888acf6","sha256":"4957da5ba8486f6729b49a48d0f7141edb46392deac8b76826e1e3e18c65a26d","sha512":"2662459ed8eb5af57fdf81e14850bbb973e1d6ec642d7addc37602bab0837a23059b749e08fab5f7f89a5f77101c85c9834eab702ac11ed7bb5a200b9783908e","ssdeep":"","tlshash":"1c21334e756e0af4345b88aca6095851e16e98eee329790440fd0d37f2a5c9dd28c312","size":1353,"data":"","first_seen":"2025-10-05T07:48:41.050861Z","last_seen":"2026-07-16T16:15:02.684167Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VForm-BuggEimp.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c57f298e147d5eb379c4a33fd4a4fc12","sha1":"38eeef495ec0a7e8e173348deb1efc7d144cca17","sha256":"400a14551f15e43f1a459de7927097ee72c80be00c124d2c2d1746a3d9d01088","sha512":"2bb2c433fb9585c77e93a4a2dea888325021218de535ecbe25311a4f12ae15ed284bc59fc534a6426ee4bedb7a4786a329f217c7f861e5013ddf95a9ed549012","ssdeep":"","tlshash":"be0175892cf2d6f4260e0afdc563ac0301622f6db939807140729d32372cd94531e24e","size":799,"data":"","first_seen":"2025-10-05T07:48:41.076732Z","last_seen":"2026-07-16T16:15:02.710891Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VAvatar-B_hdbURa.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fd189c2fd19a59e7312be523fccda97","sha1":"4d9b056376946d812534c90e8d696675f218f035","sha256":"51d688019df75478f56957adda7be9a2ddb2a56c8a2ccca375880995c71db825","sha512":"a9b6fc0699e74799bc5d2852b5a2a7b21e927580474b518242acdfb33a6a06db62080969edacff5eaee2543d2d756189d84262ff36b4ab270153eefa2d3d1761","ssdeep":"","tlshash":"6a21232d7a499079ab23908cf019e0404f9807c8cfb7fac4d8b73225726445c763523f","size":1111,"data":"","first_seen":"2025-10-05T07:48:41.115084Z","last_seen":"2026-07-16T16:15:02.732459Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/index-DowBYhHj.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b19dc27a687ca568f93052f9571adfa0","sha1":"091750c6ffe00437e4f77414446fdbcb49ff83ca","sha256":"208ba71ed43ac4d8424b3504764fbf69c27447c546358561cde99b6994187e00","sha512":"1086552103845dfb79a99e295334051516beeacca17521d822b1e24624e2865c04069f518c0a322945eef23f1cec9f21ffa6b7b853fe957bc143f3332d50d908","ssdeep":"96:5ZYC6D9IjJK9gC9S9tlzc3/4oO/GEYO1v492Bf4gBu9lcOm+HLwMx1MvEn:5N6D9IjJK9gC9S9tlG/47/GZO1v4929W","tlshash":"0281835457a25da74aebcb45a1f10726397c8858bf60d859737a707f000bc5e2013fbe","size":4191,"data":"","first_seen":"2025-10-05T07:48:41.086825Z","last_seen":"2026-07-16T16:15:02.712606Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/scopeId-C_V7nGXJ.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"734b135c5080f45db64c570aa0084c7a","sha1":"bb2525b881b256d38355d1838ebd718fd564fe24","sha256":"9d677a9ca4f62a7e47fa39769f1f8d1a81b19f95497630bcc15fa933f4da195e","sha512":"cf37b8ee60ab2697d5991fe6e39554b9c8f85b0f2f159be0192fb1117beb72fa8361a253e1aea7790300b8ae75b82d74bab345eb24b62178b37b60f6caf42699","ssdeep":"","tlshash":"88c02b0b104202b602114c4d81164c1403e8d5bd3fd486a3f635730c1fb00f8c36fd4b","size":142,"data":"","first_seen":"2025-10-05T07:48:41.089244Z","last_seen":"2026-07-16T16:15:02.725764Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VMain-bplkFZRl.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa8b09b7c76542b83591220cfdafc922","sha1":"82cf97c896c7a367e66681feb6831119a7179bce","sha256":"1faf4343140dbbbc0571eda0baba3468b73b2d60db7c8f067557f26a62fb2fe2","sha512":"9dedb504da709c8c3c433b14033bc33b16c70340aaeaa44243a70c9aff806ce70491d1d8cfcb3f985977918fa92d9acb6425e8499dce7cd7dcf429db2a34cdce","ssdeep":"","tlshash":"0bf0d35fe594f3b8516de5ccf14829013a1c07566724e4e150fb1d302368778131d72c","size":646,"data":"","first_seen":"2025-10-05T07:48:41.075595Z","last_seen":"2026-07-16T16:15:02.720123Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VCardText-D4CT8Ivm.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"463042cc6d68acc0e4816cffcbb0b116","sha1":"53afdcc163aade10f14aaa535ba861e76d16598d","sha256":"cb79ddab2271e0cb95a20e2045735b5fe9d9fe71ac1c1e28f0ec2eea7f37748a","sha512":"0d2f51ff67203c01874dcf17ffc0304d9a1ebeb74dbd534737d4ac0b0223eaae2658fd3243f31e0d58871e2b3ee70e60eaecd4ee32e4b17f3768d6e1e45d3b7e","ssdeep":"","tlshash":"69e0262edfc46abd714f14d2f190610a1a7942e4db3b81e650e20054d78405c472d91c","size":329,"data":"","first_seen":"2025-10-05T07:48:41.079261Z","last_seen":"2026-07-16T16:15:02.693435Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/lazy-BDqZamjA.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70d0163773ec1c03e815bf60a98e190","sha1":"6bc4fdc7761c6774afb2b1dd7e3983920709f29f","sha256":"87a44e1f9363c6ece5d949f79a1d3703c210c8cccc314c9e04bf12742ebcf79c","sha512":"a7d8f595e85a9b129a44e671803677cb5f39533077e7524af40bea54521c6b0d198d3130ea8459f2321fe1229aae5501b0e154d4e6f1eb8c5fcdd0a85b6ba8c6","ssdeep":"","tlshash":"c9d02b9dfc4462b4d7736e94a43a1d2903b7c755391287c01002899e46bb8d5436bd6b","size":287,"data":"","first_seen":"2025-10-05T07:48:41.095282Z","last_seen":"2026-07-16T16:15:02.713513Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/Sign-Cva2ROjw.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db9ae53e36a04e71ea063c372eb3b8ab","sha1":"b5938a874afdf4d0292682067270e4eab05e08e8","sha256":"94f846101a0cbfe91f6329bbb9100c4f196ea53d30914115fbc98d3a3a384ccc","sha512":"0a8a8e4051dcb71a9573455d1c7e1d7f09e300083b04c495a7047416f4bb92c0bf2d73cec3da11913bf19941f48842eaf13f1d65412a6e9deb77d8030b8df91b","ssdeep":"192:jMfVgOmKBaJ8bFGkkpe2wbBi2S3ZNwNsW/kcPti2n:253Idpe24M3ZuiW/5Hn","tlshash":"0c026d193819de79d0276939b01b101110646ffbe7d780c466ac0e723b7262b676f66c","size":8636,"data":"","first_seen":"2025-10-05T07:48:41.044013Z","last_seen":"2026-07-16T16:15:02.690318Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VCard-CJ2zn4kY.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc62f1211de13440492561ca01cb0e25","sha1":"fb025f1ea05d71572b2673596eb06d14ff47dc37","sha256":"53fa499061a24df05dec0a5884913e1c2cc144bcba0023f0114910aebc5d9038","sha512":"f8e5e54264311d366d9b6e45ec63816e4883ddcd0c3ee0831000d8e3a9a5d3965159c738a87a6521a1972a9a2aa9bf32b74f5eb1ebb18653e428df1585f990dc","ssdeep":"96:j718HeFbhEbYVV2OCoyuW82H4Dk+YcaaTbVfC4kYLtpUSbUSHb1:1we9hEbYVwOjyu/Fk+XXT5PkYJpUOHb1","tlshash":"f5a18515657aea39aa3bd08ce4ede12153245bcecad994d0e4f24e1c53c9480b35433f","size":5041,"data":"","first_seen":"2025-10-05T07:48:41.049323Z","last_seen":"2026-07-16T16:15:02.72151Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"itemexpansion.com/assets/CustomerService-7HlK-zJ6.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.906Z","timestamp":1783435464906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/CustomerService-7HlK-zJ6.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-549\"\r\nlast-modified: Tue, 07 Jul 2026 12:26:18 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZ0BTOhg7w8KjSpCgDVHJVwlTDpYCxaT9eweG8gVKuJU%2BEVo7sD%2BN5xSpWyME13krhnqYf43BgnvQUkWJNjSeN6tJeBPPtaaPrD33LTp51hzR1ZQ9NFH%2F17qXbTsTtJbcQjMCg%3D%3D\"}]}\r\ncf-ray: a177a0882b9db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 684\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1353,"size_decoded":1476,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1352)","md5":"cd1854610eb1a2237bb058243bcdda56","sha1":"33365ecd8a6d36107ba08f643f6bf2cae888acf6","sha256":"4957da5ba8486f6729b49a48d0f7141edb46392deac8b76826e1e3e18c65a26d","sha512":"2662459ed8eb5af57fdf81e14850bbb973e1d6ec642d7addc37602bab0837a23059b749e08fab5f7f89a5f77101c85c9834eab702ac11ed7bb5a200b9783908e","ssdeep":"","tlshash":"1c21334e756e0af4345b88aca6095851e16e98eee329790440fd0d37f2a5c9dd28c312","first_seen":"2025-10-05T07:48:41.050861Z","last_seen":"2026-07-16T16:15:02.684167Z","times_seen":15,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VInput-BXfIYcW7.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.949Z","timestamp":1783435464949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VInput-BXfIYcW7.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-5dde\"\r\nlast-modified: Tue, 07 Jul 2026 12:26:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OMRklwE17Pw1AxodSs5jqXcnmtEOQ%2Fg64jHnuN42N6RytjdVVfTDyrnK2pW3Q8tDuPxw0QICtVpLA4UswlGNNzjjVQyCASmBv43iwQsPBf6rFR2Kk2%2FfeZ7g1zDwWxeaVf28MQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a177a0883badb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24030,"size_decoded":5193,"mime_type":"text/css","magic":"ASCII text, with very long lines (24029)","md5":"2fa947d1e6433611ba3a6cafcf54aecd","sha1":"deedd18a69da992f95a9ac281becd0f29259fb4e","sha256":"f4c77eb3fd7854ffbcdc04c58b4e13e61394dc86a06f66df8567f4db9e8e0d8d","sha512":"77bf456023d671271d6a553fe01e961ca233b034361c0dd0a3e2750b85f98ef8137cdf5a5c8a520316a4eef91d31ccaaa74d76fe60d450b4aa9d665081d7e4eb","ssdeep":"384:SS3RgAtpoEtxEfGl50E0OyGQG0S0k/0K1zoGBvCm:SSntp1V1zhBvCm","tlshash":"14b2b9755a807c289a16f9f4d9c5e938db0a4371cf0a0392dfa73d1f5386aa0173ad39","first_seen":"2025-10-05T07:48:41.092936Z","last_seen":"2026-07-16T16:15:02.689144Z","times_seen":17,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/favicon.ico","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.478Z","timestamp":1783435465478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1qT1uEZcWSR7nHM1hf1Nvveg3nBKNj99RHt6uNrabxLku71tRrjExI0cKcC1KCyxSrPZECEbLBHCo%2FPmrOQNPz9by9b5ZFNS2ns1xnwJXwLoXK38JU0%2FFDE4CONjVX4A4TItAg%3D%3D\"}]}\r\ncontent-type: image/x-icon\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 19 Jun 2025 14:24:50 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68541db2-3c2e\"\r\ncf-ray: a177a08b3d11b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3462,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"25e23892d1b98272cdeb2d655319c3eb","sha1":"e38c9c91b671e32947d51d0c3cdc72ac17ed7c67","sha256":"0fe433d1cecdc5b8fca3a1b8c263a742483d88e2eb3db3ef778d4b87da1180e3","sha512":"faa00824329597ef9cb89de2537f06f45a5b2ad7d4e7e0631f2b3f8fcfbf04f2cbf5e898513037c5e3abf2bc40fe3cbadfdbd7f6f1eb080cbcbfb97c7d1f7586","ssdeep":"96:P8a2FdL22+A16mwaX0YX+wQvzP6Wcivg1wLI:0a2FI5A6SEYuR+w7","tlshash":"7262f988b5c1144ecaf7e232f4e75696c4f74dbbaba8b5023539751149618efcb4f104","first_seen":"2023-05-23T11:09:31Z","last_seen":"2026-07-16T16:15:02.703025Z","times_seen":46,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/home/video.mp4","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:26.247Z","timestamp":1783435466247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /home/video.mp4 HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=5308416-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nage: 0\r\nserver-timing: cfExtPri\r\ncontent-type: video/mp4\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\netag: \"68541db2-51846c\"\r\nlast-modified: Thu, 19 Jun 2025 14:24:50 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-range: bytes 5308416-5342315/5342316\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YiqF3JOoxjaVHamee5Z6DxxBKoDGDCvh1O%2F5useSxP3WjDljcq79DJE%2BCHMKjy9kA93vgD3ip4g%2B6btbaE1HvQZ0Z6kApskZMdLiV2W3qAODtsTlZj9X%2F4Iv6qqC02QuW24w0g%3D%3D\"}]}\r\ncf-ray: a177a0900f6eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33900\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33900,"size_decoded":34652,"mime_type":"video/mp4","magic":"data","md5":"f22777468c36c8011c261b8e976fe79f","sha1":"7abadb57c71e00be7ba5b8c9d20d5aedf1fc549f","sha256":"c0882b68971217da68655efaa856ed1f8d3504b5a9c2be51f334d76cf8f5543d","sha512":"c429e5fbf0a27eef7a316589709245acae3f77067f9f079a6e43c66b22868bc1c1b05b5d06ca0c710855f710b1ab48455048169dedd80653c4ea270797d88560","ssdeep":"384:CuVIJ+D17SepZCNMp1MaMkfmXeZ/SuhbtmJM+:gyRON","tlshash":"47e247be6356342de7115efcb5d61f1f12f0f85ed286c28f1e462241283ac8185a33ea","first_seen":"2025-10-05T07:48:41.116368Z","last_seen":"2026-07-16T16:15:02.680742Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VCol-D4kWJu9E.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.918Z","timestamp":1783435464918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VCol-D4kWJu9E.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-597\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZT%2Bw8AA1E22pdzK5Q%2FMkq9JwfJHYz2dm2JfUlRuBHCSJwYZ1M%2BSFBuzxTx3zg5P%2F9UyqW%2FrdkNodX35X1ASZnPwH81d4O11fW5vpnTr5GZo8b645nyp3s9YLQam9HUYPkXo8nw%3D%3D\"}]}\r\ncf-ray: a177a0883ba7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1431,"size_decoded":1532,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1430)","md5":"8c010a39a5f640020b3ec37bce1d2af7","sha1":"ae82e92787e5c3b9f922471d8e79603e90414f16","sha256":"33f77efcd17ccbca7b32cf4672463d22dd323f4c8c855fa609d27f48a0a0637e","sha512":"831f82e128973ea7e5fe3af86650e7e393a40ef8519cd31827287afcb279e145c30d2ba9c50778c87b584045364a32619f4909907e59cb2e6e6d050860b4f94e","ssdeep":"","tlshash":"55210255348ef1b216c098a49725085214c92f0ea6a6f6f1f3fe2d641f23084135bf9d","first_seen":"2025-10-05T07:48:41.080361Z","last_seen":"2026-07-16T16:15:02.701663Z","times_seen":15,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VForm-BuggEimp.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.944Z","timestamp":1783435464944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VForm-BuggEimp.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kuU%2BlTxLkKg0h9SgEdJ7xkASl4lIUZpEibo8x71wxQrp7%2B6KlwWpXinal18cVP5DuftFi3RmqDHjaH%2Bc9eQoQ8xHxvrt2xavm1oiwYSiZ66l21bQlIWoh0OOD5xHQ5K%2FCtUyQw%3D%3D\"}]}\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Jul 2026 12:26:18 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-31f\"\r\ncf-ray: a177a0883ba9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":799,"size_decoded":1247,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (798)","md5":"c57f298e147d5eb379c4a33fd4a4fc12","sha1":"38eeef495ec0a7e8e173348deb1efc7d144cca17","sha256":"400a14551f15e43f1a459de7927097ee72c80be00c124d2c2d1746a3d9d01088","sha512":"2bb2c433fb9585c77e93a4a2dea888325021218de535ecbe25311a4f12ae15ed284bc59fc534a6426ee4bedb7a4786a329f217c7f861e5013ddf95a9ed549012","ssdeep":"","tlshash":"be0175892cf2d6f4260e0afdc563ac0301622f6db939807140729d32372cd94531e24e","first_seen":"2025-10-05T07:48:41.076732Z","last_seen":"2026-07-16T16:15:02.710891Z","times_seen":15,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VAppBar-DvTOpcjX.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.962Z","timestamp":1783435464962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VAppBar-DvTOpcjX.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-180c\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qFwfu%2FlfJpRrnQmiHQdSuFXQ%2BkMnrZI7lczgnu8LEEdEGP393hglJyLnAlHQWWy1zDwhhthsmcwZ3fc1iTfWctBlnZzkTmc6KH8WrGVmpEVRHtheb52spI6GW%2BDsmMlq%2FZQUA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a177a0883bb1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6156,"size_decoded":3311,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6155)","md5":"cd21037eec9df11b3cbe5668f24d9581","sha1":"26de1571f4fb30a8a107cb3832eb0072c31886b5","sha256":"9228709afe83ba9b72e27e205e2d2defec22473a6e6e4536160955dee9905503","sha512":"4c1f71b2deaa55b965543ddadb3f0ce962a2df9c5ce092d9b0ce99fc07db7094fcc26a2552fa0df9eed1c8b1f07b36c1ae09bde7e74aedac9a68a195e57c56ea","ssdeep":"192:ac8JC3P0U3Uu1Mh3XyOJqyR6HG02PCHNyRd1roffI2RZ3VTR:yI/Luh3COJqyR6m02KtyRfo3I8Z3VF","tlshash":"33c1c818b5abfd7093bb5689e8910641936c0b9c9251d0e4d0fb7d243168fe963d863f","first_seen":"2025-10-05T07:48:41.05603Z","last_seen":"2026-07-16T16:15:02.699405Z","times_seen":15,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/home/video.mp4","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.717Z","timestamp":1783435465717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /home/video.mp4 HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\ncontent-type: video/mp4\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\netag: \"68541db2-51846c\"\r\nlast-modified: Thu, 19 Jun 2025 14:24:50 GMT\r\nserver: cloudflare\r\ncontent-range: bytes 0-5342315/5342316\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5e%2F2gceYAuiySmZORRPf7I5W1pyW7Me5ewCvopmE3wGjrv43nWuG34k9a7Wi2VZGy5s9UY9%2FtfU%2BAgCnNULd0HAJ9%2F7GasoTJvwWJgBnVbf89%2BeU67T%2FQPgacq9ub14zhfzZmQ%3D%3D\"}]}\r\ncf-ray: a177a08cddd0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5342316\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38858,"size_decoded":39606,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"99afada3dd28d4ba4d0be523518eff3c","sha1":"7a684cb93c93a0b481eb8498bb5ad1b8be88f74a","sha256":"9998532ca13af74bbea3e9526e92be1dc6b9e4861ac1ec92896991bf6cc05e10","sha512":"a962196210587831cefb235a07c491c2f0a0c7d14eacc539f9025abedf8fb15bb930f38f2de32f6d73cced9d02948bcb9c784b3c3d8f0756e202a413589775f7","ssdeep":"768:OQgz8la2HZaYM6cTM7gt0V5c5mVc2kCTrjkGC1bBKGjjW8xm0nDtgj6y4t0G1VXM:UAaOiFAgt03cgeCTrj41b4GjjWsnDtg7","tlshash":"2003021b017a72c3b0a8ded6bad59f4896272f1705efa163081dc20ea64eca10797e71","first_seen":"2026-07-07T14:45:00.588235Z","last_seen":"2026-07-07T14:45:00.588235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":306,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/materialdesignicons-webfont-Dp5v-WZN.woff2?v=7.4.47","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.714Z","timestamp":1783435465714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/materialdesignicons-webfont-Dp5v-WZN.woff2?v=7.4.47 HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/assets/index-BmLSZBZ8.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: \"68a22512-62710\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gh6dHwZ1ZUYAwZKlkg3WCHiUYvGJFvkw9eomIOsu75D36IMA%2B6Yoq4Nm%2FTj4Od%2BY71azyBtshh6UT5dLW%2FpC8Oea8f0xGnhKPk5rI8ZHuNAnO4%2FgC5dDAgqmjPbtu6Li8P2sQQ%3D%3D\"}]}\r\ncf-ray: a177a08cddd1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 403216\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403216,"size_decoded":403943,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 403216, version 1.0","md5":"1d7bcee1b302339c3b8db10214dc9ec6","sha1":"4e20f6ccf43199dea5c85b23a0e0f0ba81ffee26","sha256":"662fefa8f2f8a95c18588d21774789c107c64e771cbe65a69af46291c4311afc","sha512":"6c9b5097ac35698b84624f36f39847aff57b9edd115279cc62f88f024631a6d0f5bbfde22264b71a5169c4cb865f47c4aacba11cd91ab5a7f8ba43a42b840190","ssdeep":"12288:Y2qKg4wwAtPRHbF+tHN+kGU98Qk4p9Am3nVQ0Sd:Y2qKg1bt4FD4o9AmnVQv","tlshash":"31842318e2c5f30931e05ec24c3bbfb491304e63b7aadc9c74add71903a959a1ec7a95","first_seen":"2023-12-27T10:53:37Z","last_seen":"2026-07-17T08:41:09.570518Z","times_seen":4793,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":269,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/activity-BmZ-I-JK.png","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.720Z","timestamp":1783435465720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/activity-BmZ-I-JK.png HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-1251\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MGc6gut4nim8IYjjVU9T%2BqIPfArcowO%2FnEjKsXTfOq2zy74GnmuQKnOok6H0CGNU9X7QDcp4%2F%2BFcK7rNQM6RFmILA7mn3dRdL1xO1ZuFdFQ1z3QTMPzD3cWBSghjOIKDxbleUQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a177a08cddd3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4689,"size_decoded":5440,"mime_type":"image/png","magic":"PNG image data, 139 x 102, 8-bit/color RGBA, non-interlaced","md5":"cf94d320fbc97b85ce18995d90d2b0d1","sha1":"f9a0bf457bba313733f48cf2431e74ede16bcd9d","sha256":"f56fd622b2b774660497f27e6a93ed07b9c2929ab64e77fb10d038db718e4dec","sha512":"e35f2426570a79633f0290395eb2d1c3644a7ef252b8cbc906d025541f4faac935cfa7002fa3eebfe590fdef7938cb9b784a3e88aa909cb26fa13449ebffaf36","ssdeep":"96:HinGRqXOBdpUR0m75mTUfJsJPqRt1cG56EIZ6I:HEGRIOBoem7AohOqRr5E6I","tlshash":"cda18d7ea1a1be48c8220e5ead673df922b8e461a709243b1f93134fca7c547043be14","first_seen":"2025-10-05T07:48:41.073209Z","last_seen":"2026-07-16T16:15:02.727461Z","times_seen":14,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VAvatar-CRBRPrH1.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.839Z","timestamp":1783435464839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VAvatar-CRBRPrH1.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-9d7\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvkkDOekysfPYJ%2FiNuuAXu3NhHX6cv1iVcZjZNUfXigbwE7shmkYMN6LcwsYB24oFWjTFyZodg1FSO2kt6hr%2BXwRLOh2yDJopHax0fVqb7tg5sGKoCtcynDAOmgEsQc7RiyC9g%3D%3D\"}]}\r\ncf-ray: a177a0874b36b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 798\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":1561,"mime_type":"text/css","magic":"ASCII text, with very long lines (2518)","md5":"febb5251c0b3f8d120a9fba0601a0192","sha1":"41a987c291e9677a7b8b07154b27426c6fa4755a","sha256":"146346fca6ce126226cac012ec268d2480f165b7ab63fbdc9e1aff4bfd7004ef","sha512":"64f6a5edd3e38ba2cc8cf10cb618d15b2712247643df2a3ad9dbac61620983ea4e5fdebdce4483bbd4d4304ee00ce6cf89dccb04161b8e50702c77fb1903c67a","ssdeep":"","tlshash":"ab5155b09f805439ec26e57aea59ff08e255b3c85f181042edce6e26518a7fc7c43215","first_seen":"2025-10-05T07:48:41.063493Z","last_seen":"2026-07-16T16:15:02.722214Z","times_seen":17,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/1-1-BjG1QEsU.png","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.725Z","timestamp":1783435465725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/1-1-BjG1QEsU.png HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\netag: W/\"68a22512-1cf3a\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVtJIgjtktYcLN9rzEO61F01nyOl94QHq0avUHtdy38nVQMwa98uDU3AFrBRh6ar7YPffveWr96fvk4P3z2U679w1EKVGAyuhhqosX0JZw5FnDMXO1drCXZRxf6PLkcR6VDt3A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a177a08cddd7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118586,"size_decoded":114060,"mime_type":"image/png","magic":"PNG image data, 1053 x 787, 8-bit/color RGBA, non-interlaced","md5":"d8c51f55e68201f7e6e5fe7184289fa3","sha1":"c3689170a5e1c3e8c6e6208301a32bfa0c3bce0f","sha256":"deadb798ef754278413d4b7bd80ae9fbe23616b097acde03cb6c5c52c3ff1794","sha512":"fd4ff9942a43d97e479df4b298a4451dc070476b7db79c7317659e63a940c7c13ec545b48fcaf8d51ef5bd2e078a9f69d270311154006e97388fbe4689ef592a","ssdeep":"3072:BSxMJGvtLDxcLDlbg5SGLt0JEUjlRy9nNPulPk:sxMJ89xWGVtUjO9NGlPk","tlshash":"08c3021fa4b7e17ffc0f922d74a43b4ec19742875a35003e597ba81edb3840ab532946","first_seen":"2025-10-05T07:48:41.111649Z","last_seen":"2026-07-16T16:15:02.704857Z","times_seen":14,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":472,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/home-Cf7_q3v0.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.817Z","timestamp":1783435464817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/home-Cf7_q3v0.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:24 GMT\r\netag: W/\"68a22512-9e0\"\r\nlast-modified: Tue, 07 Jul 2026 12:26:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KIw4Gtb3XHbGLNXgCc52EMplpmszcsUVssCutbEUSUOWXkLzSKpmm9Riw%2FbCzqKYCZSOWwyAMnM5o8vFE4kAg6BdTEArWzukC3zgDVevAaxDQEW5M4U1UHotvO8yCWshfQfFZg%3D%3D\"}]}\r\ncf-ray: a177a0871b1fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2528,"size_decoded":2133,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2527)","md5":"6be33825f69aedaf65ae9e01e93cc3c6","sha1":"0ca846496dac5b376fb9e4de1bdd2875e4e80150","sha256":"3b0ad146c3b6fa05f34c901dcb146d4830eeeb031822ecaf3c0e02301049397d","sha512":"824936d53cfabf33779976bb11413a2d4335ecc24328dad2fe5358f7c3f37127eda5aad5c2fc22ec2010c32a7037a929ef7b5f078d56f82cac70c7f88cb5240d","ssdeep":"","tlshash":"cc510509d825c7bd8117dcf4e842d050a12e26bbd7d1d630e1fe8235aba1c7dc20d639","first_seen":"2025-10-05T07:48:41.074508Z","last_seen":"2026-07-16T16:15:02.676705Z","times_seen":15,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/index-DowBYhHj.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.832Z","timestamp":1783435464832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/index-DowBYhHj.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-105f\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WTYJCe40K83NzzgqsH%2BZgm8P%2B3tYkjO4JEarebpY90%2BuMGcbOdlY1zdFPCkC7CxSYQlQakHYiHjvZfnzw3Kfy5xNaeNFsS51xvqj%2B3qfo8LYqEMskP0GAO3vMTI5OTnwsw5j1g%3D%3D\"}]}\r\ncf-ray: a177a0873b2fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1666\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4191,"size_decoded":2449,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4190)","md5":"b19dc27a687ca568f93052f9571adfa0","sha1":"091750c6ffe00437e4f77414446fdbcb49ff83ca","sha256":"208ba71ed43ac4d8424b3504764fbf69c27447c546358561cde99b6994187e00","sha512":"1086552103845dfb79a99e295334051516beeacca17521d822b1e24624e2865c04069f518c0a322945eef23f1cec9f21ffa6b7b853fe957bc143f3332d50d908","ssdeep":"96:5ZYC6D9IjJK9gC9S9tlzc3/4oO/GEYO1v492Bf4gBu9lcOm+HLwMx1MvEn:5N6D9IjJK9gC9S9tlG/47/GZO1v4929W","tlshash":"0281835457a25da74aebcb45a1f10726397c8858bf60d859737a707f000bc5e2013fbe","first_seen":"2025-10-05T07:48:41.086825Z","last_seen":"2026-07-16T16:15:02.712606Z","times_seen":15,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VDialog-C3v11UgT.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.901Z","timestamp":1783435464901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VDialog-C3v11UgT.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-dfa\"\r\nlast-modified: Tue, 07 Jul 2026 12:26:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WPgBxzLgkYVcYDP1amh6uNBNuF7mLIPUUNiXViiBJJc3aYI%2FlZ7w3cZvdGp04GbbwdCEn6%2BZ9yXsSeqrKAT%2BMK9i0xRJs8wCZSyThaFi%2FbDtmHYFvMAcQx2cqhE7Mv68mgbGOg%3D%3D\"}]}\r\ncf-ray: a177a087fb8eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 914\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3578,"size_decoded":1694,"mime_type":"text/css","magic":"ASCII text, with very long lines (3577)","md5":"81f7558aae69825329844647df89da76","sha1":"78bca18bdacc78b1f1a29da2170da9ccda078b93","sha256":"1526eaae303efcfc14a0babb6627cc228481dfdf0eaf9b7a24bd34e74cded1b6","sha512":"b5031e88a85e0eaf2006ab4d77893bc74e412c1337547e32b6de0dcebaf57d6bea6924b982d53d9df8f9e1f1ec90e709548a5b67a946a99855f5a1c8046927c3","ssdeep":"","tlshash":"1171bb6226ec14bcc66ed0b752ebbb4ac73cb385d624011ca88e5a1f0fc77257ae5315","first_seen":"2025-10-05T07:48:41.08461Z","last_seen":"2026-07-16T16:15:02.678497Z","times_seen":16,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/index-DIYNkqpD.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:26.175Z","timestamp":1783435466175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/index-DIYNkqpD.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\netag: W/\"68a22512-13f7\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPiR2%2FkosPd3fK4SE5NSuh3XgAiTUine6k75ZLm9zgMGN51y2AuFaEyw418B2lpS8UWA%2B%2F%2FEFiSNzWcd2nupBGGJ2FkB1ACDarKGFonsQ4Yk5RQBZLYJL1JPY5a7efrNvCV83w%3D%3D\"}]}\r\ncf-ray: a177a08f9f43b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1830\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5111,"size_decoded":2613,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5110)","md5":"1c51283929ad7b97223276c4213ee1d3","sha1":"36d05f1bce2654eb14a89a0ac996ee8eaca7e2bf","sha256":"f13bef425aa226fcc458471751cde8906b5be9757131bba4b03ccf25518f854f","sha512":"b69f5019962135309b5ca26966571d18324f521b505d3fa554dcc83a8aaa69cc745debc22139c72c94e7f12d2c001e78fa47bf4bc0a8033d2b9ecf1b3c16bb72","ssdeep":"96:xNXs6MY3KKEmdLfDQSatFEjg8b5m+t0Ytg8Y:zXsAimdDcfEJTeWe","tlshash":"5cb116e89c258a7bd09b419830d92441f0987beee3734a16bbf49da53b81cf5871e313","first_seen":"2025-10-05T07:48:41.054768Z","last_seen":"2026-07-16T16:15:02.681594Z","times_seen":15,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/home/video.mp4","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:27.416Z","timestamp":1783435467416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /home/video.mp4 HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=32768-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nage: 1\r\nserver-timing: cfExtPri\r\ncontent-type: video/mp4\r\ndate: Tue, 07 Jul 2026 14:44:27 GMT\r\netag: \"68541db2-51846c\"\r\nlast-modified: Thu, 19 Jun 2025 14:24:50 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-range: bytes 32768-5342315/5342316\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1g%2Bp139%2F3cXxVMzZqabMxHiO510yxaJoh1rumy7dwVLrkV%2Fr9N1AuyYg3eUeU3%2FnymD7Ia67tmSlfroSPZBwz2LS%2FrkOP0R8tT7ydxahZwrvE12DlLWS1o8M7SLwVKVvcf6Xw%3D%3D\"}]}\r\ncf-ray: a177a0975ac5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5309548\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":431731,"size_decoded":432485,"mime_type":"video/mp4","magic":"OpenPGP Public Key","md5":"c379db46a82c93d84a6efbb19bae074a","sha1":"b36b4e5ac0e78b60823c9c200f0a76ef0934098e","sha256":"44a0dba4968a49a32613d30990d72d31f9627adfb4c9ecd818f2a3860fbc02fd","sha512":"606f51c7cc49c31664ed73dc265da8d0b9d689577c9ecd26f868f0db8894902468c6af1f00365fd2ee7cfc33f9fe658178f56b64cda5000504aefcb65ec9bce3","ssdeep":"12288:mBdyyvRrqemKgDQ9Vi7pXGmRFTGeWOBKFveNnAe:igyvVqrP2MFKm+8f","tlshash":"4b9423e00eb0aaa3eaa7748e71316353dce40960575f04725e9454f746be8d2ab4ccfa","first_seen":"2026-07-07T14:45:00.595076Z","last_seen":"2026-07-07T14:45:00.595076Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VAvatar-B_hdbURa.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.826Z","timestamp":1783435464826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VAvatar-B_hdbURa.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-457\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=048AJpN%2B4MdauwqGCC5%2F0JVjrse92i5DKSV%2FFweu8RKVUV88VFny4C%2BWA%2Fhm6qdlnTgZyhY3pXggT3xDFxmdRvj7czlQ6fHy5IjNZrU7YsqPPXHZdX7xBuEsJwGyIz%2F1yVsoFQ%3D%3D\"}]}\r\ncf-ray: a177a0872b2cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1111,"size_decoded":1393,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1110)","md5":"9fd189c2fd19a59e7312be523fccda97","sha1":"4d9b056376946d812534c90e8d696675f218f035","sha256":"51d688019df75478f56957adda7be9a2ddb2a56c8a2ccca375880995c71db825","sha512":"a9b6fc0699e74799bc5d2852b5a2a7b21e927580474b518242acdfb33a6a06db62080969edacff5eaee2543d2d756189d84262ff36b4ab270153eefa2d3d1761","ssdeep":"","tlshash":"6a21232d7a499079ab23908cf019e0404f9807c8cfb7fac4d8b73225726445c763523f","first_seen":"2025-10-05T07:48:41.115084Z","last_seen":"2026-07-16T16:15:02.732459Z","times_seen":15,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/Sign-Cva2ROjw.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.971Z","timestamp":1783435464971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/Sign-Cva2ROjw.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-21bc\"\r\nlast-modified: Tue, 07 Jul 2026 12:26:18 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMQ3%2BatxAyxFhS2wAf4gqYxJldC5Ob2cejtGzInEU0rOwBWUz%2FnLdG5DUI0%2BiPtJIQsTjdYa9cxf9SNerqFFXxu%2B9u5vN5mjdSe%2B4z8ZX3GmEqFUVpQap%2B1ZrB8RaDXqsgDvXg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a177a0883baab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8636,"size_decoded":6745,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8635)","md5":"db9ae53e36a04e71ea063c372eb3b8ab","sha1":"b5938a874afdf4d0292682067270e4eab05e08e8","sha256":"94f846101a0cbfe91f6329bbb9100c4f196ea53d30914115fbc98d3a3a384ccc","sha512":"0a8a8e4051dcb71a9573455d1c7e1d7f09e300083b04c495a7047416f4bb92c0bf2d73cec3da11913bf19941f48842eaf13f1d65412a6e9deb77d8030b8df91b","ssdeep":"192:jMfVgOmKBaJ8bFGkkpe2wbBi2S3ZNwNsW/kcPti2n:253Idpe24M3ZuiW/5Hn","tlshash":"0c026d193819de79d0276939b01b101110646ffbe7d780c466ac0e723b7262b676f66c","first_seen":"2025-10-05T07:48:41.044013Z","last_seen":"2026-07-16T16:15:02.690318Z","times_seen":15,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/logo-DDfKOfgJ.png","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.719Z","timestamp":1783435465719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/logo-DDfKOfgJ.png HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-230c\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIC%2FSkxXVpp5dg6AublCDicBC0BS0IKy41MUZBy3BmuBAkg6jiQtVaG5TRs0CT8XO6OybN%2BkUn9jtfsEsb0bvWhEOVx3MOJe1wSbq3VxK5q0jZ0N2uwb5fuDmOoYzM1KTqOLGQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a177a08cddd2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8972,"size_decoded":9714,"mime_type":"image/png","magic":"PNG image data, 364 x 87, 8-bit/color RGBA, non-interlaced","md5":"3193830c09f67a8562b2d3ff706df8ad","sha1":"498a5884f817453c1adbefca6c6bdb30ef409b79","sha256":"879f3970cd906dcb008fba47eedc4cbc308f0ddc7977046135d121f14fa2eee1","sha512":"5857cd7a90df190bf0f0f217af320532a6d94da2d9260fdb49238601fcd5a32545596038413021e14424eb83e7a792b1cc4e9bebf3f786f0458ab84a1ea236e9","ssdeep":"192:lanAH2JeHMu7jqyh60nQtBd3T0bNDWJObYm4fX+Hj6V/FLOJ1/v:laAWUMu7j1fATcFbbYpGHwOJB","tlshash":"ad02af0641b2c979ae96050da4dd43c20ab7cff9866924eff03c116f3214eb50d2b86a","first_seen":"2025-10-05T07:48:41.112904Z","last_seen":"2026-07-16T16:15:02.686158Z","times_seen":14,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/home/credit_points.png","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.721Z","timestamp":1783435465721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /home/credit_points.png HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68541db2-d61\"\r\nlast-modified: Thu, 19 Jun 2025 14:24:50 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8svrmfFeDtnpIM9b0IOyoGqm%2BaDPKgD6W4DQwN18V%2BayyWWj4Nv9jIxrprnCfqo4fLBNIJmg4%2BzGTJmhYpBYbJHbTGvmLzVi4YVNR1SKGJ%2Bw3Z7dElpIVtl8J%2FzIYwi3gb6%2Fw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a177a08cddd5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3425,"size_decoded":4179,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"93aac1a53b6f3358be1e26272c374ad7","sha1":"f239280ed534cfbf27a53aa6444d417de0d77d9e","sha256":"52592504f3e7e966d0edd552622319e4ca7a0cc910c2e36b56e033327521f18b","sha512":"e95fd763bf99abe11a4af1daed0a5c85d48dc0c8633bdf072a80d4b15816658002f9e03d0b9de3e144f52692c42cbc993f75300d16e68f803371aacbae1d1ae0","ssdeep":"","tlshash":"32616ddba705aca584a20570343dc92039e7bbffc469f91e8f9e812e9405b060a55387","first_seen":"2025-10-05T07:48:41.127689Z","last_seen":"2026-07-16T16:15:02.697811Z","times_seen":14,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/2-D14jhNLl.png","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.726Z","timestamp":1783435465726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/2-D14jhNLl.png HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\netag: W/\"68a22512-10c716\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bYzk0P4hXa1SUdjxULAHE1aS5B5DLmfYHQEWJhchdYseqAwPLTHklJNaNYZCrYSTI6L0GQk2CtdUFeS2W%2F0z9ZAq%2BxEzOO8iXvhFIRrxPFmPV3714ikw00QXjvfGBirBWftTUA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a177a08cddd9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1099542,"size_decoded":1100406,"mime_type":"image/png","magic":"PNG image data, 1053 x 787, 8-bit/color RGBA, non-interlaced","md5":"89722ef15dea825d0052a784cbca5078","sha1":"67ff5394d103f768b1e2bab029937b31259fa8ea","sha256":"f6b77807376d1f6fc2d14be6c4f61251bcb65adf7183ef76bf283a533abc6b32","sha512":"f79d00a2798fe4061d928ebe7ae6b4e2cf1e0efcac2613cfd50cf10c684dbc16ddf8191a82ca3144a89591c4950609af1918448b42c98302265a50515a75097d","ssdeep":"24576:n46aQzM1t0jVoCvcZdT2Ja/1yCRw8uIT4kPGV:nFaQg78ETv/kCRYe4kPGV","tlshash":"2b2533c74646b84985667da8fe8cdaee1ff10760ff0a1a08b25f1c951e87456da00bcf","first_seen":"2025-10-05T07:48:41.091675Z","last_seen":"2026-07-16T16:15:02.705608Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1382,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":438,"receive":942,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/modalWindow-Dnz1tL7p.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:26.179Z","timestamp":1783435466179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/modalWindow-Dnz1tL7p.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRTgEETbPX3r1LV2kpLeI%2Bh8cHcsbHGB13GRltdTCJXXd%2FMvaIDc0wvgQx%2FaG5CMWv5jnPO%2BYpgeY6XuSkC1Sa6plHh81fSo00Mdh7Y9yl1kA9yMjduV7xpWtfAP7RzHf5%2F48A%3D%3D\"}]}\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-136\"\r\ncf-ray: a177a08f9f47b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310,"size_decoded":908,"mime_type":"text/css","magic":"ASCII text, with very long lines (309)","md5":"1816349a430835ac43214a6899bb2639","sha1":"57e7080c7d1975f6bd5cac805f358d5716a90aa5","sha256":"4be71d86ed7445a3cd4de4b40a1973facb040cf9121b5f15dedd4408e4fe7c8e","sha512":"c1ce02e1bee179a2d5de43572f724aaab18d91057105fa40ec11d7659a8ddfe9018ff4819c42ed8a7030ab5309ca0b5468199a7d2cbbcca7f99a058fb7166af2","ssdeep":"","tlshash":"88e0862405916274d21fa591e8e0abcd123dc447b7731bad5ad4b5e1630aa492529581","first_seen":"2025-10-05T07:48:41.129966Z","last_seen":"2026-07-16T16:15:02.682401Z","times_seen":14,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/profile-CAy_R0u8.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.819Z","timestamp":1783435464819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/profile-CAy_R0u8.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-107a\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryhWc08NxoZSvFsYHR5tYIb%2BjJHj0xaWoXF8A3v4JoE1plsaLNHQLxgwfOY66FON2Vo6iIXzWaB%2BYjvGuWle5ieD37%2FAwCz%2FObddWhLkSdETtpCVDVIapl%2BYdFsOZrJeqLjOmg%3D%3D\"}]}\r\ncf-ray: a177a0871b24b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4218,"size_decoded":2697,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4217)","md5":"734f4480f464529ce4a78162342e42b8","sha1":"cd1b394b1dcf0c0f4f624e0dce96d59b2fed3f2c","sha256":"1805139fa3fb5e6f55a20662384e42b5f8dbb31ee1f784c3fa04fcd0a86db3a8","sha512":"8c4ddfe9e678f31f1d0a75ad41f9584cbbb3e302ab83b360cd58811d2697ac75fc114c17accdede16c13fc39cc8ded5a3871fa35513d98df7ce513565bf340f2","ssdeep":"96:3DpKZtgNdQhf0+Aj5WVKfVfwB1v5rtl2JwJ:3DpStGehfhAs4fVfwhrtl/","tlshash":"3191a51af9bcc6ff412b2d08b05a8c10710c0beee7b168a142fd8f19ba76c9416e4717","first_seen":"2025-10-05T07:48:41.067797Z","last_seen":"2026-07-16T16:15:02.707058Z","times_seen":15,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/scopeId-C_V7nGXJ.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.896Z","timestamp":1783435464896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/scopeId-C_V7nGXJ.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbcoNhCg8A7xMMxdD6ucTXIjdxvI3oX9PFSAyK2jlLgzrbW1fDJl3AgtkNZ9lgYWDrTpines0z3peMmSdZ36HRiUdqVspCaSBvBpxQ4AHx2U1GjMAfmu4KSqOocIYtFoR1SbZw%3D%3D\"}]}\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-8e\"\r\ncf-ray: a177a087fb8cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":837,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"734b135c5080f45db64c570aa0084c7a","sha1":"bb2525b881b256d38355d1838ebd718fd564fe24","sha256":"9d677a9ca4f62a7e47fa39769f1f8d1a81b19f95497630bcc15fa933f4da195e","sha512":"cf37b8ee60ab2697d5991fe6e39554b9c8f85b0f2f159be0192fb1117beb72fa8361a253e1aea7790300b8ae75b82d74bab345eb24b62178b37b60f6caf42699","ssdeep":"","tlshash":"88c02b0b104202b602114c4d81164c1403e8d5bd3fd486a3f635730c1fb00f8c36fd4b","first_seen":"2025-10-05T07:48:41.089244Z","last_seen":"2026-07-16T16:15:02.725764Z","times_seen":15,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/1-DMwfbCB7.png","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.723Z","timestamp":1783435465723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/1-DMwfbCB7.png HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\netag: W/\"68a22512-3776\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KlpAPHxfDnPxuLcaxcWAUagh8xv8NKaIUFO4RdmXhOzYmrPB1BeB%2B0We3pwC9God766g27a7ytnZJBxgGzI2MWSSTtUuurcGLjqgm0Nh6KJDbT1fR8qkGQyQ50sTuWv2oh20wQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a177a08cddd4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14198,"size_decoded":13561,"mime_type":"image/png","magic":"PNG image data, 1150 x 173, 8-bit/color RGBA, non-interlaced","md5":"901f931e69a2bbda053bfad8be24ce88","sha1":"331e6984a4f233f158735923837ee77da2e206db","sha256":"0952a14b47ef78fe445d0dacdc196700f66bc530c2dd04cc3d57669beb70b79b","sha512":"ba3450be188938f7549de45a23d1e78fb4972f97073265620e9e0801ab550531a1a57ca5c5caf2817f4471b83c82fef1f8b7353f75b1151ccd8f4e9b32538834","ssdeep":"384:xJEncJ5CJwnHjbhDYvWJQeyphW4gz9Fpudkjv:xqncJ5CJwhvJQex44Z","tlshash":"dd527d636727c387de3e8dbbc0a0f09960d9f9a661a1dd7f02913f1be496816cc65d01","first_seen":"2025-10-05T07:48:41.090378Z","last_seen":"2026-07-16T16:15:02.728234Z","times_seen":14,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":330,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VImg-DYyoOkgZ.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.836Z","timestamp":1783435464836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VImg-DYyoOkgZ.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fiX4iC7wdBzz3qWcGtnNmWP3Fb1UwuSov6wvu%2Btbfvcsipd2RqdWh5VOQmyKgeAc%2BT3MVp%2F1F9PdeSIiERiuHdCDF4%2BUgzM%2FC1cJOlcyFYIYJSYqaRNzyQMTmwgrLG0DvHdZHQ%3D%3D\"}]}\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-3f6\"\r\ncf-ray: a177a0873b30b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1014,"size_decoded":1145,"mime_type":"text/css","magic":"ASCII text, with very long lines (1013)","md5":"90711f84bb9a58106c8155d103365f62","sha1":"bbd333f0dfa450b9f7c337e5dbe8549cfe840f63","sha256":"7cba4126943c5ffcfe6dea7cb130de730932c1ffe760eac0638c25350b982452","sha512":"eff522e2ac92f76007a8b53723ed70d84c6c024d38a55960ca1826a52ae81e1b002333d32342809781f7039f1dd40e24e49a67264c4eb78c7cac792d4571eb02","ssdeep":"","tlshash":"bb11af35180af1dc4192b1891063dacfd369c1c2bb5149a8e666f0636c8b258dceb3f5","first_seen":"2025-09-30T21:55:53.405232Z","last_seen":"2026-07-16T16:15:02.733546Z","times_seen":28,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VAppBar-nMKZuYhT.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.965Z","timestamp":1783435464965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VAppBar-nMKZuYhT.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-c46\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ccHGB9UQ8fQxLUVKNFKGQ8idGMPQGB2%2FzFpZwgcoDqPjV0NVJg22fTY6wtnvYbmAs9MfM0YUTn91oD5bnAcfWQdf%2FMUpZ9CNEK7SknKbWVEqjVWccuX2jy5JWSIE6%2BA4xWa%2F0A%3D%3D\"}]}\r\ncf-ray: a177a0883bb2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 987\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3142,"size_decoded":1754,"mime_type":"text/css","magic":"ASCII text, with very long lines (3141)","md5":"4332ab65ed26b7cd60e8622c5bd5c0e4","sha1":"a277a1ab58a3c3032348353ee59cab2bf2cf2219","sha256":"3937e7a94aa2fed46b52653eb2023457ce48d2aff5cb351f88329e4501a9cbb2","sha512":"12fec037f347fbf7867beef15b2c2cf5be42a1f91072e49617856c9ae48138c2b8a0a5fbb80b78de23e01aecc40fd269d2dac406ab7b312c32edc6d2d1a02641","ssdeep":"","tlshash":"bd51ab2ce2f2d0386d57f54c56c1c90dd25f9570aeeb10ca9ce672a8a1ce3e9db92214","first_seen":"2025-10-05T07:48:41.102067Z","last_seen":"2026-07-16T16:15:02.679856Z","times_seen":14,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/AppBarLogo-a0yhCIrb.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.968Z","timestamp":1783435464968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/AppBarLogo-a0yhCIrb.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-f5f\"\r\nlast-modified: Tue, 07 Jul 2026 12:26:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OIamRK3qPWM4UCBXRfV%2FnwmlUXfsrIm1gYLZVjOPlYd4VEGOt5l9uP%2FZJKLcpGBNaGkyoWtZR3U6X8cDFcSy7hKubBecUIL4dPWycTr1H5Z%2BpeYGxowau7px7oakvI2Cypa2DA%3D%3D\"}]}\r\ncf-ray: a177a0883babb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1057\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3935,"size_decoded":1836,"mime_type":"text/css","magic":"ASCII text, with very long lines (3934)","md5":"1cd414fa959486733d384e44d7c9965e","sha1":"f39d7bc27f9dd4066065f5d54c7f7b64894245b2","sha256":"0dd569b34ee31f3c3cafc4bd1a8e9fce959e9fd8f8c7f057b12df078e7598010","sha512":"0c253be890bdbd42309cf712c3e63e4620b28a57b6e3f15669f0b8c4c74350e6ec82a2477c79b744e8262bdd37231f45671f3fab72ecf1da9176e3014245365f","ssdeep":"","tlshash":"c881cfb02ad41c6c1e37f17b5345d84dd17bdad0dea1228aa1c3531b82cabe07b83b58","first_seen":"2025-10-05T07:48:41.064695Z","last_seen":"2026-07-16T16:15:02.718112Z","times_seen":14,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VMain-bplkFZRl.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.935Z","timestamp":1783435464935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VMain-bplkFZRl.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zpR5cjcEcDy%2BhB%2BJjX4Q%2BmZK9lotm3HPNV4Vo9srCCsutqSk0UQKdTTbqqEn5PObf9sysbEN1A2RSI2KN4mDWRSlmVYgAA9JjTgB2Qk7WVuCUssoIMS5Ja5br3%2Bg2dIEr5wgkQ%3D%3D\"}]}\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-286\"\r\ncf-ray: a177a0883ba6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":646,"size_decoded":1127,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (645)","md5":"fa8b09b7c76542b83591220cfdafc922","sha1":"82cf97c896c7a367e66681feb6831119a7179bce","sha256":"1faf4343140dbbbc0571eda0baba3468b73b2d60db7c8f067557f26a62fb2fe2","sha512":"9dedb504da709c8c3c433b14033bc33b16c70340aaeaa44243a70c9aff806ce70491d1d8cfcb3f985977918fa92d9acb6425e8499dce7cd7dcf429db2a34cdce","ssdeep":"","tlshash":"0bf0d35fe594f3b8516de5ccf14829013a1c07566724e4e150fb1d302368778131d72c","first_seen":"2025-10-05T07:48:41.075595Z","last_seen":"2026-07-16T16:15:02.720123Z","times_seen":15,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.713Z","timestamp":1783435465713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://itemexpansion.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 02 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 448007\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-17T09:40:40.583691Z","times_seen":231587,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":18,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/index-Bn7QpJ5m.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:23.688Z","timestamp":1783435463688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/index-Bn7QpJ5m.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:23 GMT\r\netag: W/\"68a22512-46aad\"\r\nlast-modified: Tue, 07 Jul 2026 12:26:16 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ueJaq7xF7EM07mgnir6Zx%2F1mJNFOB1RMESPix90qWioXz71PkpC8DFjORikSQVvipHBXqQpifsNjhCwvNxM8MWYpPxMhtpG14lF6FDzbaAUDMNV3tA1I%2F7lW8VoXwtPVXyGLQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a177a0800856b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289453,"size_decoded":117710,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41738)","md5":"fbcc33fc229900337bff2e3b12e54d0e","sha1":"50b93fe7fe6d74921c09785c513381251c5ad2e2","sha256":"bd7e8df415eb6447cdb3c6204a52009fef12a07ed9569f6f3eca831a93b1101f","sha512":"8d5793052255cc2cbabd22d240071902d2356d6a3489a8ab1b4f3b4df065acc72c30fb6460204dba5618c749731f59e7d2f7af7339ae08dcd0131c9d67a56fde","ssdeep":"6144:Lme1p22ZuqrA5oBnPu0XznPmBnS9AFCmVb2D8Z671O:L71p22Zj3NfXznPmBP5qD8078","tlshash":"835439d93186b06253b609e550bb0106f33d2a45380dd4e4f16deaeb3e7390a92b7f6d","first_seen":"2025-10-05T07:48:41.062073Z","last_seen":"2026-07-16T16:15:02.696463Z","times_seen":15,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VCardText-D4CT8Ivm.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.842Z","timestamp":1783435464842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VCardText-D4CT8Ivm.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRGAULrwRdM29uS8ZWIyqDmCfN6Y%2FZ9gLkYe9tCiKUB1LjgVOwgMoFgPO2ueyi3QtXooEOpHVJIPtPIFICH3rdUZI61utsEhX7yoXqHIAvRKzmSkfu3LjtyxK7kozf1F%2BD0K5Q%3D%3D\"}]}\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Jul 2026 12:26:17 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-149\"\r\ncf-ray: a177a0874b38b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329,"size_decoded":977,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (328)","md5":"463042cc6d68acc0e4816cffcbb0b116","sha1":"53afdcc163aade10f14aaa535ba861e76d16598d","sha256":"cb79ddab2271e0cb95a20e2045735b5fe9d9fe71ac1c1e28f0ec2eea7f37748a","sha512":"0d2f51ff67203c01874dcf17ffc0304d9a1ebeb74dbd534737d4ac0b0223eaae2658fd3243f31e0d58871e2b3ee70e60eaecd4ee32e4b17f3768d6e1e45d3b7e","ssdeep":"","tlshash":"69e0262edfc46abd714f14d2f190610a1a7942e4db3b81e650e20054d78405c472d91c","first_seen":"2025-10-05T07:48:41.079261Z","last_seen":"2026-07-16T16:15:02.693435Z","times_seen":15,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VDialog-BpJgX4Eo.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.878Z","timestamp":1783435464878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VDialog-BpJgX4Eo.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:24 GMT\r\netag: W/\"68a22512-638b\"\r\nlast-modified: Tue, 07 Jul 2026 12:26:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GRIlxe%2Fj1HU7radQSu7MYAMJpOnI%2FB0l7Lt5chWV1Zk3%2FVpzhxFnGfwVNYsmX0PQDTxqfUsm3PbC1dHaMBYAko4oz1JrkWwvlILOCx2lFRp6IAZ8cDh12Vvh74IaSwnO7gNmOA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a177a0877b62b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25483,"size_decoded":10514,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25482)","md5":"46a481924c7f7d15b89e8bd289c6ff73","sha1":"182a71162a1b43dbbd77148e33358d9e57be4bfe","sha256":"d707769c2d0cca9b696e754f66d4bb05d2b576416fc4041c7fbad3887e96eb7a","sha512":"982e677ec2ab8be735fde58c20d6811aec64978e4988616775b76fb49a2ab21408278ea9b0b2ced5a3ef65af132d965ecaf38ba7eef9d25dedbcd468ad27900f","ssdeep":"768:qLXFiFD5y1d3+l9xOuYUzG5JaKJKudZ/QMNboZXAZhsNXI1jpV26cNkkMQNiZ:QKoMuBtj4NkkQZ","tlshash":"49b22b98725530b153ff8a9ea067c346632a9795f01ac0e0703fddad2556f9422e3b3e","first_seen":"2025-10-05T07:48:41.105659Z","last_seen":"2026-07-16T16:15:02.723831Z","times_seen":15,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VMain-B1JVUNw1.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.941Z","timestamp":1783435464941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VMain-B1JVUNw1.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2Bw%2FSldTQHhAXSpDTvP89iQutOYopX8R09wxVlLh250THbuV%2BDWRcbDm7t6BkKePVNesDShFJnzPHolHSdCMEdWdE%2FJMufS4Yg7EHraKiRROFuOzHJKSu67E%2BrOG%2Fxl9lpSnBg%3D%3D\"}]}\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-211\"\r\ncf-ray: a177a0883ba5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":529,"size_decoded":963,"mime_type":"text/css","magic":"ASCII text, with very long lines (528)","md5":"530a117e15c424f7e5d84a725daec250","sha1":"700eb46e18d36a01124bbfa27a0e86f5a32c87b4","sha256":"75ad0d1b1be76a7a7e38ef96c9cba9bb7825213c3b9a4af8c85317492f99d43d","sha512":"fa721192e7eec6f04722a558ec87a9c7343569e16516386f5214415f3527a6f957255d0e252bba7f74dc5baf19d6606e21a1729a16ec1f28a16d1a148431858e","ssdeep":"","tlshash":"e3f02ba11d01b52c1e8ff5dae28275ebd1784f437f560564040f251060e76f189d3e4c","first_seen":"2025-07-21T14:30:19.831041Z","last_seen":"2026-07-16T16:15:02.684939Z","times_seen":33,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/materialdesignicons-webfont-PXm3-2wK.woff","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:23.684Z","timestamp":1783435463684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/materialdesignicons-webfont-PXm3-2wK.woff HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://itemexpansion.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff\r\ndate: Tue, 07 Jul 2026 14:44:23 GMT\r\netag: \"68a22512-8f8d0\"\r\nlast-modified: Tue, 07 Jul 2026 12:24:11 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkVqPts%2BJC1KW2UiUsahPp2cL7TshOEOQdVmJ%2FD%2FzdUZRiLUBYxmMw7CrGfLxXWmJzUF8ZbpL3MiQMetX6vSpPatwX3YcE4aVJrVquRdkpfmg4ji%2BMBjhTUo8%2BF3fFS6p1szVg%3D%3D\"}]}\r\ncf-ray: a177a0800854b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 587984\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":587984,"size_decoded":588723,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 587984, version 1.0","md5":"026b7ac9c43c7e04250f00acd510fa49","sha1":"cc3dd46af5ad6fbccda70b453d5594b39ecd6ac4","sha256":"a5928a0d5c2f624e46f98d9b15c2f60045377f7c594dd78a1759132ea3b463eb","sha512":"fd979c5eac07acc889c12f2619f0515042ce4339229ab00e88c2efab1b6af5df946b3c8ede1985fe328b63a4dd5fbf52d5db6ac4f5edb8c3c3bc43b8714013b5","ssdeep":"12288:Il9snXOVmPse1H1iigw5ty8evTz4k7mC7HHBQS:As4mp1VpGTz4U7n1","tlshash":"a3c42327c3a9a6164007c1f76e9b5f3648d14c3b8ee8cb30af1b9276e9f9f325519046","first_seen":"2024-08-19T21:27:06.358072Z","last_seen":"2026-07-16T23:30:29.395565Z","times_seen":161,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/materialdesignicons-webfont-B7mPwVP_.ttf","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:23.686Z","timestamp":1783435463686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/materialdesignicons-webfont-B7mPwVP_.ttf HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://itemexpansion.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\ndate: Tue, 07 Jul 2026 14:44:23 GMT\r\netag: \"68a22512-13f40c\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GwMrPvFgcztBuGEN3ennmtX6FjZIWmWG71VcF2r871oSSsR%2FDYx%2B2VuWmqzn2a6p34jknK3AGJzQRCu9bYzeP0NQPXQig%2FkL%2BdyujNddhaflXd4esY0dQ5gfxJFzAOnpVXuSSg%3D%3D\"}]}\r\ncf-ray: a177a0800855b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1307660\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1307660,"size_decoded":1308401,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", name offset 0x11e0c8","md5":"d64026a4598b04a7fbe0cce0d1452ad7","sha1":"17e293a6d9c9cb1b738a412f3e58c182144fb3a1","sha256":"4459bb11177e508d0ff5ac55ba7dcfbe4de87dab3d6cbfa14ffd20f1ea3675ef","sha512":"de672ba29a5339eafc5ee38e71c3a834fd0a3a2acdf46878d504097f9dace37a8313000357e48420e2fbc0716276ca4c183fd286c81eb37a70d1d013bdba17fe","ssdeep":"24576:szYBDYLDSOjaJZA7sj/N1ALFUDxdpr1AdqEdS5091JqPuePAituydp82S:eWHRAibS","tlshash":"f0254b09a3bfcf67d24be7bd48d1316671795810270763a38a8c6925a81ffe88cf4758","first_seen":"2025-07-29T09:15:12.424085Z","last_seen":"2026-07-16T16:15:02.701034Z","times_seen":165,"resource_available":false,"data":null}},"time_used":1566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":1297,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/api/system/getConfig","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.808Z","timestamp":1783435464808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /api/system/getConfig HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: no-cache, private\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS\r\nx-ratelimit-limit: 600\r\nx-ratelimit-remaining: 599\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sUxUZ0zRp9JKU1oXLRAl8zQqWZdf8PQ7diFemJkD%2BD3YWLNm5xbZYRn8hMYmPFEELW0%2BNz6JAOcbiKGJdpbpEr84k2ZhKNrJBbQGGXnj5XGg%2B2Pekt5F%2BTMblvZsakdBytp8hw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a177a0870b13b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 143\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":912,"mime_type":"application/json","magic":"JSON text data","md5":"16e0777fe14f554610496c6d8c1d43c5","sha1":"3eb6e10a15584e0620e331e74e1a7cd1ef45ec86","sha256":"ee6fca9ec5dd009847e403e7e469b4273e261fb2c9e7b6fad3339681dc039f7b","sha512":"0757383dbb024656dc9682e516297bf4e831d814c8197a389340dcdab1f60d7ba1839a99ef1308331f67b4cc3d2099c3bbdd10ed14f82e4bdce7d96cc531aaaa","ssdeep":"","tlshash":"04d0806307c847a27cf369b8156c17560fbd51c592814ed1bf7cc314dbd4034b101997","first_seen":"2026-06-29T07:38:30.77151Z","last_seen":"2026-07-16T16:15:02.720947Z","times_seen":7,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VContainer-C8i_1blp.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.922Z","timestamp":1783435464922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VContainer-C8i_1blp.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKAVofRtalrxUAkdN7pB15snkTxFQJXpWosijbaPOEGR48iVqQWNJmm47nfklI1zKrsxdgl%2BwVV5I%2FkqpVOqWETkhLm33VHrEk9nlU37vCR9aHOj86LpW0f4j85xBvfIzn3vRg%3D%3D\"}]}\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Jul 2026 12:26:18 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-1ca\"\r\ncf-ray: a177a0883ba4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458,"size_decoded":1047,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (457)","md5":"5fbdfcfbc302618e4eace664246482c4","sha1":"b27bb07492e77cce35d41cffa80841cd17c6a580","sha256":"1857959ad03c4f39c772e7fdcf9ee70b8630d578ad2df2ce3c43bea15ecaeb9a","sha512":"6df4fb7b93b385e2fcad939cc4bca289f62f3137b02b79738d3093de703538f1e3a7c04ae900e3b072ff8cd28679c31cdf02ba14059e54728f06e8258776f5a5","ssdeep":"","tlshash":"55f05c096ec56674fa57184cdd1010001f215706de369cd470fe41d893a806c471ba9d","first_seen":"2025-10-05T07:48:41.070415Z","last_seen":"2026-07-16T16:15:02.694262Z","times_seen":15,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VInput-tCCrEBJz.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.947Z","timestamp":1783435464947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VInput-tCCrEBJz.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-3b43\"\r\nlast-modified: Tue, 07 Jul 2026 12:26:18 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MGiRHYn2OgaDnGaYlX8bst1F%2F%2FkuPZREo%2B2S%2F7qZPlgXWJ%2FECuKxWqbmDbZ1bxRFY9XkAqdXmQZwjIWMszturUtmW9VVgAHpft%2BkqOoNB2F3qDXqFQ1yXrR0IdsauD8UpkGxpQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a177a0883ba8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15171,"size_decoded":6618,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15170)","md5":"0f0a24db09e8d8b3583f81813c5662ac","sha1":"c472263c341a65d2340a029ba7d1753c51698de1","sha256":"9b0e8124c96b9461a0dbca70c15576a02f88353d279f797da71136c6528dd31c","sha512":"6b097474089b05585366f192d239a2459a731d8929baa237eba04d56ec704fc073113d9d6c1fdce187621da950f1e1fb302d87fb080524d359c53cb2f65ed918","ssdeep":"384:TovsAkk9n7MotqG2/8tLqKMjRsXP+zwmq5pjm2Y/6MEXaTjytY/6/havgcuvpcuj:TOxnqG2/8dqBsXP+zwmq5pjm2Y/6raTc","tlshash":"c7622a80787ab877cf3b54dc90d9d06186482795d83895e0d6bb2e7d03d8d9873a8b3e","first_seen":"2025-10-05T07:48:41.0425Z","last_seen":"2026-07-16T16:15:02.679163Z","times_seen":15,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/_plugin-vue_export-helper-DlAUqK2U.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.976Z","timestamp":1783435464976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper-DlAUqK2U.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9SAWrvxk2L0dUKSno3nyUEBKr46I460WmieqUy29md3KCacEKs%2FzfTjqWv7Sp1CJZrNQSebfCpGsUIPDc2VlNtSOgx9F5pMwO3duORfQeYUxH9BjURBdWzWMblX%2F2i36VJEBA%3D%3D\"}]}\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-5b\"\r\ncf-ray: a177a0883bafb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":799,"mime_type":"application/javascript","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-17T09:35:31.214403Z","times_seen":24237,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/5-BMrFg2gB.png","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.732Z","timestamp":1783435465732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/5-BMrFg2gB.png HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\netag: W/\"68a22512-22f337\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Y9Eigp%2BZhHckfsEdPJ2NaoqrpaEGZ274X3wsfv17c2DxtPS9MPJff%2Folq6YMEaITGWiszRoWvjulevSnT61OI7fUD3jtu3j5sAt8gN1AVeP3FaWfPBAhRSeZHzl7GIYZK7O4Q%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a177a08cdddbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2290487,"size_decoded":2289236,"mime_type":"image/png","magic":"PNG image data, 1042 x 1802, 8-bit/color RGBA, non-interlaced","md5":"10064325a66eb7836c677194f0c05fda","sha1":"9da116fbb6f06e218f369b33f2f0aad84810147e","sha256":"e6c8ecdb5ceaa6ca17597cb8ba11973cbbcb39ef054535cdc9c2030519bbe6ee","sha512":"4f51c772d9d4f76dafd158fa3ded16c25f3eb62d6ed05e210867de12aabf01457ce778485c89948e501203a43f62655e1624318859e9161ae64c9fe2456a15e3","ssdeep":"24576:Yc0qM8CZ+aiCdomiduhWB8sy0QYBmav71vvWG+i5ydHVJ65IY:XO+XPmichWB8sy0QYz1vufiIY","tlshash":"d22533f7511166120bf8d61ec3f386ceb2902e56e5bfd1a9373d669b80981a89407fcc","first_seen":"2025-10-05T07:48:41.071648Z","last_seen":"2026-07-16T16:15:02.73185Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":1311,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/home/video.mp4","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:27.479Z","timestamp":1783435467479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /home/video.mp4 HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=5046272-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nage: 1\r\nserver-timing: cfExtPri\r\ncontent-type: video/mp4\r\ndate: Tue, 07 Jul 2026 14:44:27 GMT\r\netag: \"68541db2-51846c\"\r\nlast-modified: Thu, 19 Jun 2025 14:24:50 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-range: bytes 5046272-5342315/5342316\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7mTjxCMkR8FOFUfnba%2B%2Bz5xXl1GQLtugUUPD12zZGVHcx3CXtctsq%2BF7TkCPe0FlOrF%2FRuNNsi5iSkeIDGJSGJpBzOwTd0nxqit3Lz97oDVCb79sCmdG6Xsl37qEg1Oss6sUw%3D%3D\"}]}\r\ncf-ray: a177a097baf2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 296044\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296044,"size_decoded":296797,"mime_type":"video/mp4","magic":"data","md5":"8da9991696328ac3e8129b756ea50c78","sha1":"996409f8344da745cbb0147c14dfd967a1ca3238","sha256":"c14083ad07bd982815c5f94198535aa728581b4c12e8ffe8cf2800f5b6701b85","sha512":"525faab51513eab0dcbd03dd8766d3efe2993992738c06552e10d6be13aa1f1e20942193b7737f2b9562a6f67824e5eb4132a0e92ea226d83347bebef57edad6","ssdeep":"384:BuVIJ+D17SepZCNMp1MaMkfmXeZ/SuhbtmJM+:/yRON","tlshash":"b054e9faa3e1343ed7075ffd9ae53a3d23d0e9bae18fc34b2d191240153984542972a6","first_seen":"2026-07-07T14:45:00.613592Z","last_seen":"2026-07-07T14:45:00.613592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VList-Cn0YDOXn.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.863Z","timestamp":1783435464863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VList-Cn0YDOXn.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:24 GMT\r\netag: W/\"68a22512-536c\"\r\nlast-modified: Tue, 07 Jul 2026 12:26:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1a1k480%2FsHTp8C61NosR9EyGmRL7OrsPl0HNMrtrBWoYixdY4d7706qD7cfrZ%2B2JPOeqKGgzwSPA9E5FhGQwiTlwzhAYxpp6ck0PJJ6EQxA84nZOT0MPe70Hc2jRn5SZvrMpw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a177a0876b50b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21356,"size_decoded":8101,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21355)","md5":"efc5f878b3b631359a8df514ddf263c5","sha1":"ca61cf710a0b4e2ac15684070c46646cb349eea7","sha256":"dba7d13f1b4699d523d2ce8d7947cc1cac12b525a95aade2a66efae7d508cecf","sha512":"741c0bd9a2abb26210ff7a7366f885eb6035087f536a8e3562788fde3772b4ade9ce0fb62f19bcb91cbc8cd26f54382343cb0e2e07e069a5145ed0bacd454cff","ssdeep":"384:ahn0aZlItyDGwV4/7h4irx5Mb0+LlZxfi+Vb+6fFn7NsKsh1+b+AvSluPMVmdGFf:ah0a8tyDGwV4/7h4id5MPbfFVb+6fF7q","tlshash":"92a2e840f4d2b5345bbfa9ca84a440a2b10a2b986439d4e0f1a55f9c2699c48f3f5f7f","first_seen":"2025-10-05T07:48:41.069098Z","last_seen":"2026-07-16T16:15:02.710142Z","times_seen":15,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/lazy-BDqZamjA.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.890Z","timestamp":1783435464890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/lazy-BDqZamjA.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pt%2FnDx3XrsvBs2bmNMMMpgZIUzbhsYBKVstLIWbpRM9FqtUiz%2FFy6SHsSxw1vyGzRxVlXIqKESPwGi8Nc6Eer%2FErjIcEVY0krlnZpOAYCoxAHbghLkj5V8YrpZyioFKVKjpRA%3D%3D\"}]}\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Jul 2026 12:26:18 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-11f\"\r\ncf-ray: a177a087fb8bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":287,"size_decoded":942,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"d70d0163773ec1c03e815bf60a98e190","sha1":"6bc4fdc7761c6774afb2b1dd7e3983920709f29f","sha256":"87a44e1f9363c6ece5d949f79a1d3703c210c8cccc314c9e04bf12742ebcf79c","sha512":"a7d8f595e85a9b129a44e671803677cb5f39533077e7524af40bea54521c6b0d198d3130ea8459f2321fe1229aae5501b0e154d4e6f1eb8c5fcdd0a85b6ba8c6","ssdeep":"","tlshash":"c9d02b9dfc4462b4d7736e94a43a1d2903b7c755391287c01002899e46bb8d5436bd6b","first_seen":"2025-10-05T07:48:41.095282Z","last_seen":"2026-07-16T16:15:02.713513Z","times_seen":15,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VTextField-DLin2W5T.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.952Z","timestamp":1783435464952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VTextField-DLin2W5T.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-e90\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEZiRubqwD%2FKVcTq8nZgfQ1ctHjMCOlc%2Fx%2Fsr%2F31%2Fa8qyuWqfiZMs31PSS7TthCG4L4HnMGsGZymib4ehenq7%2BonE6SuPYJfqShmgf%2B7UHxkY7UB%2ByVsYj3BfajvzI7hKmG98w%3D%3D\"}]}\r\ncf-ray: a177a0883bacb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1757\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3728,"size_decoded":2547,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3727)","md5":"89b0d9d4135d47720471bf6164593c90","sha1":"6007b19b0d99b2bf17951632be65ab4613d642fb","sha256":"4ffdd6a8bd10b21269a909eb4e2d051c56f85428ce3f8a6e3560690a7eea5455","sha512":"92d1b64a2e6c8eec79980ef3c514521688c0465e4d9b2e3ce0122b25bf4a0bbcee7b6a39eaefd8ef8d132a0d700225b7620dabcdfa1a35fef010c4d144a56b4d","ssdeep":"","tlshash":"c671d99878b9787347fb81aeb59148259b189b4b402604d1c4fec81232dde98f193b2b","first_seen":"2025-10-05T07:48:41.052872Z","last_seen":"2026-07-16T16:15:02.689738Z","times_seen":15,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/3-hKX9QVnV.png","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.728Z","timestamp":1783435465728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/3-hKX9QVnV.png HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\netag: W/\"68a22512-23988d\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTocH358kKImdG2eD9AxV2FywttbvEQkgHi%2FAgmSUh8EbN1piR3SlFbZFPZDIYFuqom9SpC2o0c88WP9An%2BIaKohzvRBIJ3sZ0d6mQYapOap6nnqRf4QIBYA616xSvczxmmQhQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a177a08cddd6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2332813,"size_decoded":2316954,"mime_type":"image/png","magic":"PNG image data, 1149 x 2509, 8-bit/color RGBA, non-interlaced","md5":"ba83a6c0f2fad6da627a4fc8b3182b78","sha1":"d902c3c3c16dd1e05936ed4ed99b81a11f2d99c4","sha256":"6aeec0abdfc2092f88f7cb5d213ba9ebfaf474af80a60a22afab8dfe83e30582","sha512":"34bbe1570d4692cdc88bfbafb4c9ec4c7bca70615521ab6a05c91ba16ec3bc6e3a605eed095e2ab9614b7408877d57f5257325567ffdd37b308420f58249be0f","ssdeep":"24576:+OmKpFm2dPbZiVc7BmSMMmgEHetr3/xrtGlmbaV62:+1/2Z0WUSMMmgEHep3/xrjbaV3","tlshash":"b425331dd12f1f1a8aa38812ce1354f49b9f380d3b462567ee7b196f481ed9fae6c041","first_seen":"2025-10-05T07:48:41.065867Z","last_seen":"2026-07-16T16:15:02.691068Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1569,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":420,"receive":1148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/6-DxUB74R_.png","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.733Z","timestamp":1783435465733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/6-DxUB74R_.png HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\netag: W/\"68a22512-4ca5\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ewp5oH0x%2BCRXUthDwbW%2BXqxeZcYmNFPBgog6F4OWljXdoAlYdxUdXhzssrHXij61kU6TTpJyWLK0HFojcUmgWlX12%2F4dlyyH3%2F976wjUbk4lqFGuxfh9Ai5nPFJLrBO3Ymhakw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a177a08cddddb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19621,"size_decoded":19073,"mime_type":"image/png","magic":"PNG image data, 1033 x 284, 8-bit/color RGBA, non-interlaced","md5":"36a63d52c59e06f7d69385bc038e245e","sha1":"897c0c55a7c977762e5462d3843390ffde31063c","sha256":"2a61d432a4a9939951926a9dc2d8abfbb126ad914ac0e1a70167872cb6f8f599","sha512":"11a64e09fd27996593cd64fb1efc885b4701a2891d0f16c4578845486e4f63c65b9e12ad85dc26984a3b91bf4ee75ccc8bb403038ebcb853952ee0d7e570b96b","ssdeep":"384:dF2mGHUwdpv31ERXbf2yCPboyYVR8ThAajlbH9DFk0uQgY:dFinv30GNrA2DxD","tlshash":"d592b0f6916d9e7ce2289ab2070e9a20b2b97444d385174a0a5c1e3c31d67ccfa6cd1b","first_seen":"2025-10-05T07:48:41.096752Z","last_seen":"2026-07-16T16:15:02.71865Z","times_seen":14,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/login/bg.png","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:26.543Z","timestamp":1783435466543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /login/bg.png HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/assets/index-BUCxgJm7.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\netag: W/\"68541db2-d855e\"\r\nlast-modified: Thu, 19 Jun 2025 14:24:50 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZIWrr8LghKY16oB%2Bpwle0zR95Wd8cc2Dc5a%2BL9GfPgT35gbelairmvlkAMrc6Nj6qjQ9EG20ju3eu5I5i4y%2FxPse%2BX6VPxLPt%2B6waii8smaB5vSLQSbRELrGhGod0qUSlpeNQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a177a091e870b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":886110,"size_decoded":885158,"mime_type":"image/png","magic":"PNG image data, 1150 x 2489, 8-bit/color RGBA, non-interlaced","md5":"9f794e166c724707494a7590914984ec","sha1":"9ea1e295d8556aa44a3d03e05a83308804498e87","sha256":"2aade06bf11906bf025e47138811c24f5c9c41c095b883aa5e9399e3dca20955","sha512":"e87ece1cddf7b42d30f6be64c13c83ca83137a6d6647b16f9dd7b3b5a63d40186f1696bfe6ddf5db49f08d9f5b548bcb8ac89883edcb3418da9fff525a1d7f24","ssdeep":"24576:9ofCkbq7GoWc9+bz+oqmvCBYDiJiZYBXe2b23MjcMAyycR:9oqkf0gz+IaeDiJCYhNC3McBc","tlshash":"8d15339e142d69baf4abee2149dc0d541b82b4430d23345709fadde53749ca3fa8caf0","first_seen":"2025-10-05T07:48:41.117631Z","last_seen":"2026-07-16T16:15:02.714365Z","times_seen":14,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":425,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/home/video.mp4","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:27.456Z","timestamp":1783435467456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /home/video.mp4 HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=4849664-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nage: 1\r\nserver-timing: cfExtPri\r\ncontent-type: video/mp4\r\ndate: Tue, 07 Jul 2026 14:44:27 GMT\r\netag: \"68541db2-51846c\"\r\nlast-modified: Thu, 19 Jun 2025 14:24:50 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-range: bytes 4849664-5342315/5342316\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aVC9ZsGkyFbOC3buIenc96YJlZe5kiBN0gPjO8qHZoRdzwyPJ7j%2FFAeGz%2Bj7lK6GsYNrOHSeX77QAU0NtrvdpM%2BJmiijtGKENRBGDoFXQMbsfQPlbJSe%2FkCm7D9W2icig4I8pg%3D%3D\"}]}\r\ncf-ray: a177a0979ae6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 492652\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202219,"size_decoded":202972,"mime_type":"video/mp4","magic":"data","md5":"2aeb8850d745c1c0255a6cd6b116bad9","sha1":"0ca65c0cbc5bcc2a731c8f2862d068ee9c7942be","sha256":"f0de6999ff9ffce0161a2ae913b5037bc64f53daa04bb7a5f89fd163442fa9a9","sha512":"93eef2af29857b241b9cc305e53ad6220c798cfb3b445198bdc3f9369bc4d8122f5107d9506aaecd2717990d6e7e72535e1729e1ca26a73af496c9d2527aca5b","ssdeep":"24:jggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggp:/","tlshash":"801400caa0e0083e830b8b8e8aa0303c23c08abae08fc30b202802000238008028b222","first_seen":"2026-07-07T14:45:00.620827Z","last_seen":"2026-07-07T14:45:00.620827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:23.672Z","timestamp":1783435463672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Jul 2026 14:44:23 GMT\r\ndate: Tue, 07 Jul 2026 14:44:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":2611,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a763918f3b1cf01f5127eaaaa4e5ed36","sha1":"e5932e684c5249dece73f827719829b05315deda","sha256":"316e33bfe6ab63fbb1920bfcf23774c4a779aa22c0707c7831064f9a1bb87c43","sha512":"adeeb53b0a7524e78f035b88e7993fee8484360c90ce3e6d3d69536ebf2aea3dc5d1cd45a94f0dbf8ce9ed4989351a1258ae07663871bd407bd3baa6b33d7f0e","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVK7:Xxyllff","tlshash":"04e210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:46:21.252973Z","last_seen":"2026-07-17T09:57:30.98314Z","times_seen":2485,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":5,"connect":18,"send":0,"wait":38,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VGrid-Cb7FdSrp.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.915Z","timestamp":1783435464915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VGrid-Cb7FdSrp.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-254a\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DkEc8s6GL6c8RUfXGPM%2BkxLEyqk0u7mLOSgnoDUVgIJgiHtErnBdnZgnY5fYoYcYxJNXQqib7NoamxrMMc9Md5RGbUBM8vfxMe7o0y8NxH63YE%2BhuscoClEFFsFrs6DbWZmClw%3D%3D\"}]}\r\ncf-ray: a177a0883ba3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1407\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9546,"size_decoded":2172,"mime_type":"text/css","magic":"ASCII text, with very long lines (9545)","md5":"2fc771ba69129cafb322e82e05ab5e3c","sha1":"9703a28260dedeb09002b7e299f12ef5b4c4a5a4","sha256":"58f30f378a078b06f3dd886b31f669db5dc79d45499f8e5eaba9f83dbd2a7384","sha512":"e653e35176da4ddb17a72426c5c4ca1a0dd4a3c171e2276a60fe179326772a3cdf7764a29ebac5923170d01d23720c97706061cf913110ce8fe040b803ba41eb","ssdeep":"192:r3jUOkEsX2iy5aiCj2IqRgYtrJqWW8ej3Ff/B9gOkTjGjUEzbRtMeU3zWnEUlhwR:rTUOkJF+","tlshash":"0d12f547942a229d4923ba0f3291746ca15e18bf77b5ecf6b39a4de2203e3d01977c47","first_seen":"2024-08-20T10:56:39.009429Z","last_seen":"2026-07-16T16:15:02.731191Z","times_seen":51,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/avatar-Bft0snVW.png","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.654Z","timestamp":1783435465654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/avatar-Bft0snVW.png HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-1526\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=msubI%2BTY0BRi%2BCohA%2FD3HJFfd5F3dEA4Ib0AdUeajhuyktvN%2BlxvixdPuacTfNwzCRsHT0RMjhEwf%2BA%2F4mDRe%2BwCeyJlmOxPqoanPubAk%2BTfMM7bTV7Lk7P5v5S3u%2FgfjfrnlQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a177a08c5d9db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5414,"size_decoded":6175,"mime_type":"image/png","magic":"PNG image data, 142 x 142, 8-bit/color RGBA, non-interlaced","md5":"ebee0872ae1993277e10e3f49060227b","sha1":"b9584fdbca851b4bc5955dd9be4fa9f060a1396a","sha256":"b5266738a3b3bf28bb6afaf100dd0984d703428b0666cd427b200263c72e7376","sha512":"ff9527326b7b2422d3cdd554c18be508e8e1b8e835fa7dc69169821d275def62515cdb9bf80d578d9b9ce9a2227b07b88baa774d917f1d1d307ca74e3c344519","ssdeep":"96:ysx3jyXuQZXB1pF2gYZ9/UoRTWqc3Rpr1JHwEOBosWD:rSu2b1Y3tWqc3RpcS","tlshash":"08b19e97458efd974506dc604eef082cceb7bc1bb9dd059aa710a833e5d91053ae5218","first_seen":"2025-10-05T07:48:41.110481Z","last_seen":"2026-07-16T16:15:02.703803Z","times_seen":14,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.712Z","timestamp":1783435465712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://itemexpansion.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 02 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 448007\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-17T09:40:40.583691Z","times_seen":231587,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":16,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/index-BUCxgJm7.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:26.182Z","timestamp":1783435466182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/index-BUCxgJm7.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\netag: W/\"68a22512-4f5\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0PMa%2BXM0NCcez%2FwX1bnY9Aq6hJ5SSVqCWnIgeoTkPEwC41l8rt%2B0YWhmLo0gL%2BZzw8T3kIBTnVRWHLzzYA8mq%2F5Xyu6G9%2F%2FbTqj%2FvkoeV2noPtSZw6MLIqxaajFtRulMXBBaQ%3D%3D\"}]}\r\ncf-ray: a177a08faf49b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 552\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1269,"size_decoded":1327,"mime_type":"text/css","magic":"ASCII text, with very long lines (1268)","md5":"d77e739ca79d5cea56fd74f4560532e5","sha1":"d5c30a270b576049f150ee0f4675add86b0f382e","sha256":"f62c1b5397d3e61b1ce24f3507f8f40ffce075563d1be88dcf582f3c2cad4f32","sha512":"199af64ca95aedf3f136347f4d191d7eeb00150e0be98655b05b8db1615b2f93e83b803e41e29a0c0295deeae5b192a1d956d41e17902a389a348bf0b91d44ba","ssdeep":"","tlshash":"5f21ed3b4a88b12df8dfe12069f257cef169c549e323072ead5e36f6d487191043669c","first_seen":"2025-10-05T07:48:41.103203Z","last_seen":"2026-07-16T16:15:02.70022Z","times_seen":14,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/materialdesignicons-webfont-CSr8KVlo.eot","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:23.676Z","timestamp":1783435463676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/materialdesignicons-webfont-CSr8KVlo.eot HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://itemexpansion.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p5HXRpnpGeLjAHeKuhisSHrbO7I3pq9yH%2B6EPxKL9qTeDwJSCLDjpAcgLxMdNTkI%2ByuNettCH6FURhQEaLYBqCUMM4YJKQUVmdMF0IsaQA7YiBPYfc10itT5q723F8n20uSoww%3D%3D\"}]}\r\ncontent-type: application/vnd.ms-fontobject\r\ndate: Tue, 07 Jul 2026 14:44:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Jul 2026 12:19:59 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-13f4e8\"\r\ncf-ray: a177a07ff84eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1307880,"size_decoded":578796,"mime_type":"application/vnd.ms-fontobject","magic":"Embedded OpenType (EOT), Material Design Icons family","md5":"a305c55dd21bf6ebd695fc311391b568","sha1":"4960f40808090f98d67cf4c0121479c7341fb4c0","sha256":"7cf770f2f0fce3fe835840738b3c3f502ac768c69c45cfdf1affa81bdc8f28ce","sha512":"89097a1d59a469cbcf7ae65c81ccc2c0c03e97d88d2ca0c214df8fba32291818a0eab9be8e4033b403412f971b6ff66a4908058733f2ce0e26628177e7c93021","ssdeep":"24576:kzYBDYLDSOjaJZA7sj/N1ALFUDxdpr1AdqEdS5091JqPuePAituydp829:WWHRAib9","tlshash":"8f254b09a3bfcf67d24be7bd48d1316671795810270763a38a8c6925a81ffe88cf4758","first_seen":"2025-07-29T09:15:12.450195Z","last_seen":"2026-07-16T16:15:02.730528Z","times_seen":97,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/index-BmLSZBZ8.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:23.690Z","timestamp":1783435463690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/index-BmLSZBZ8.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:24 GMT\r\netag: W/\"68a22512-926a3\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SjTCjdFYJQwnAs6Mww5htq5Jd4E1GxqTqsS5fNpYeLjYJZ2%2FAzv3c6sdpu5jyMgtMG4YqilTZZZ1Vjm0uOyBJYRhN7oM0znC%2FSz65c4wjKWcynHlIBohQLVj5%2BRrrP0r63nj5w%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a177a080085bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":599715,"size_decoded":110495,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (61129), with no line terminators","md5":"622799f501fdd385934045933e2f727a","sha1":"d89d490149dd08ad5283829f00b39b087690f21d","sha256":"1ce93b2f0f888821233854e117691547ad2d747f561040c86044aa0b13e654cc","sha512":"560a976ff791f5624a84f03d95f290b912bf170dd1665752d31a6f4200f35e1a1ef6d5a1f6dab1c27601c0097a13f37cecf8bbe5b9a675ba3861992fe0e6e88d","ssdeep":"6144:Uw+pHrtZczRZ4+rO4AHC9WCKePMh8xZXNLxdyyw5wGMz4RfD89BFEL1k0DVW+1tL:78ZYZ4AO4W+MhkZX6ZVW+1HGC","tlshash":"44d454e2f18900c6a32bd513c390f7be652ff5b1c6095c56fa1a272d5ac329715c2e2e","first_seen":"2025-11-16T04:02:50.360901Z","last_seen":"2026-07-16T16:15:02.68358Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1027,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":378,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VCard-Ckq9XVQu.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.847Z","timestamp":1783435464847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VCard-Ckq9XVQu.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-1a1b\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TyBUwWmrHrOE7h4%2FHszC%2B1wmsASBgYKKL5wzuYhmePOJiTYcGh3Y8s8%2BIQN3A9w95ehx3IooUv4gX1yZPN8AVnheplUMM09lEXSRcNbQEcMIgzrYyJQOsmw7vzWNYGRT1xH9og%3D%3D\"}]}\r\ncf-ray: a177a0874b3ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1686\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6683,"size_decoded":2453,"mime_type":"text/css","magic":"ASCII text, with very long lines (6682)","md5":"30e0a394c364c4422a6f130d2576a1ad","sha1":"e51c64101b8f2206b6add8f87a841ce3ec0c9b58","sha256":"169668ac7bc09c087645648cef7bc84acfce5ff7389d060a57bba618fccf35aa","sha512":"08b6a411bbd640d44e9e0a65630672a5ce6bb3c638c16eed1295d4bb0507824cbf19cd6fd37af09b31895f53203fcc93feea85a7e23d9700546017441c9ac1f2","ssdeep":"192:xZ1bdK0yaKkEwKJEMKKEYXeBs8F/KMeBwNPWnQImWGWyUWJ09:j1bdK0JKklKJjKKNXeBsU/xeBwNPWQIv","tlshash":"76d110ac464814799d4ee99ef79afb7dc371a1c8df22004ae4c627d583ca3f6990421c","first_seen":"2025-07-02T15:23:56.522614Z","last_seen":"2026-07-16T16:15:02.687958Z","times_seen":25,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/AppBarLogo.vue_vue_type_script_setup_true_lang-CFnjSkH0.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.957Z","timestamp":1783435464957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/AppBarLogo.vue_vue_type_script_setup_true_lang-CFnjSkH0.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-3959\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=foI8VZMa%2FOEl%2FMLgZS1gC3uoRxxRdGoMM93%2FcInNukqKFzLM6cYfNNTccjzK0IDq7vdlN4usUdPJ2LR%2FaDC%2B1rU0PgmVC30DieSX74AxHSmO81A7dlvgh34LXM%2FMLl3I5ah2%2FQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a177a0883bb0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14681,"size_decoded":6729,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14664)","md5":"48ce84e06cc7617be46a474af8958575","sha1":"cdb7eec761667b7404ca41e911eae60d98ee2885","sha256":"f8ac7d6037746dd1a4f403adf147ff5693ffd5d9ecf92d62dea4442151647db0","sha512":"ac586ecee3ca4014ef7c28c0c344e681216ca75031df99f4ff2cbbbc57d1598e196ec9c8deee89a3414c6421a941cb799628caa49088148fe8c0751bb12366b4","ssdeep":"384:BayagZLa+gyx5y/dfVJnXJNXOU4VTUebsou0vBTKBja2couDhSG9PVCx:BayagVa+gQy/dfrTXOJJUebsou0vBwj5","tlshash":"33622a66b6d46575537b025af05a8200a37f07d9e122a1d0f9bf392d2090d9c23f5b3f","first_seen":"2025-10-05T07:48:41.07806Z","last_seen":"2026-07-16T16:15:02.717403Z","times_seen":15,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/home-DChlDvFK.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.985Z","timestamp":1783435464985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/home-DChlDvFK.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nMLr3JK4ZaUK6NdKdPyD7HkTaxXUTjLrExqUGDfQdXrIaCYyeEH2L%2B7NXXocuWpu5C5MD0Nt9oh7EqbpcuDXlnKmLsmu5e%2FPEYguw7w1f4gJ6HhIe7ZNXpslWPxp8cJZzaJ9ww%3D%3D\"}]}\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Jul 2026 12:26:17 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-132\"\r\ncf-ray: a177a0883bb3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306,"size_decoded":896,"mime_type":"text/css","magic":"ASCII text, with very long lines (305)","md5":"cf2b13679cb37c3a34d29668f6f37c4b","sha1":"fb3fc9fdf52805117b9b1c27d7ef0fe1a6cc31bd","sha256":"c0606c0c4c7c2d171a80706c6fa91b90a1e344197b2f742358e208b6aac9a82f","sha512":"82b5f55a247a7052ea9bd2bcaacc5a1e116eff650e852a7fb775dc918fca9b1a925dcd2da69060b1320f846896493782aff161948b79cabfd0d22f808361f03e","ssdeep":"","tlshash":"e2e0c2080b36544988ef9225d9d05fde023cd793e337ca4a3b841af92716e79376e8c9","first_seen":"2025-10-05T07:48:41.119849Z","last_seen":"2026-07-16T16:15:02.70914Z","times_seen":14,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/materialdesignicons-webfont-Dp5v-WZN.woff2","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:23.678Z","timestamp":1783435463678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/materialdesignicons-webfont-Dp5v-WZN.woff2 HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://itemexpansion.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\ndate: Tue, 07 Jul 2026 14:44:23 GMT\r\netag: \"68a22512-62710\"\r\nlast-modified: Tue, 07 Jul 2026 12:26:17 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VUI6XfTD9uLojdosVILGGCoyZ3Hm%2B0v6d6KiBcRiDfgIgTGpaBNnes0%2FDicZiMBf%2FpeU9W59y4D0m0%2FS%2FAQr9wensMqYxl5YD23uIkh8ZB8uexTAA4opJnzLKXhWqs8pFDX58g%3D%3D\"}]}\r\ncf-ray: a177a07ff850b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 403216\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403216,"size_decoded":403956,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 403216, version 1.0","md5":"1d7bcee1b302339c3b8db10214dc9ec6","sha1":"4e20f6ccf43199dea5c85b23a0e0f0ba81ffee26","sha256":"662fefa8f2f8a95c18588d21774789c107c64e771cbe65a69af46291c4311afc","sha512":"6c9b5097ac35698b84624f36f39847aff57b9edd115279cc62f88f024631a6d0f5bbfde22264b71a5169c4cb865f47c4aacba11cd91ab5a7f8ba43a42b840190","ssdeep":"12288:Y2qKg4wwAtPRHbF+tHN+kGU98Qk4p9Am3nVQ0Sd:Y2qKg1bt4FD4o9AmnVQv","tlshash":"31842318e2c5f30931e05ec24c3bbfb491304e63b7aadc9c74add71903a959a1ec7a95","first_seen":"2023-12-27T10:53:37Z","last_seen":"2026-07-17T08:41:09.570518Z","times_seen":4793,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VCard-CJ2zn4kY.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.822Z","timestamp":1783435464822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VCard-CJ2zn4kY.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-13b1\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ulg7FH1ZFGVSzzhJ%2B%2FJQxzk2%2FjsC5xnumsV2J7dxp%2FJtjy3ond8CXMRYr%2BaXoKWs91uYwWLg%2FJkejyiIs56aSZf8JHwMjqtnt9kPyCDhHFFlLXd%2FHVI01tid7IdzYp4xo%2BXvXA%3D%3D\"}]}\r\ncf-ray: a177a0872b29b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1873\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5041,"size_decoded":2664,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5040)","md5":"bc62f1211de13440492561ca01cb0e25","sha1":"fb025f1ea05d71572b2673596eb06d14ff47dc37","sha256":"53fa499061a24df05dec0a5884913e1c2cc144bcba0023f0114910aebc5d9038","sha512":"f8e5e54264311d366d9b6e45ec63816e4883ddcd0c3ee0831000d8e3a9a5d3965159c738a87a6521a1972a9a2aa9bf32b74f5eb1ebb18653e428df1585f990dc","ssdeep":"96:j718HeFbhEbYVV2OCoyuW82H4Dk+YcaaTbVfC4kYLtpUSbUSHb1:1we9hEbYVwOjyu/Fk+XXT5PkYJpUOHb1","tlshash":"f5a18515657aea39aa3bd08ce4ede12153245bcecad994d0e4f24e1c53c9480b35433f","first_seen":"2025-10-05T07:48:41.049323Z","last_seen":"2026-07-16T16:15:02.72151Z","times_seen":15,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VList-CTyMq2-M.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.872Z","timestamp":1783435464872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VList-CTyMq2-M.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-3a04\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rwuRTyTLofA2kH69pnC4QEIaUVUyT7%2FHO0Z7K9l2p0BDt9eEn33gZ9v%2FTapp1v7Jnh%2B5n0xsVb0K9adNJ0Dsk7c%2F1BV5B8rNPGH6aB35RtM%2Bal2nQ0%2FGNCB7bAGKbL3mWa7G5A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a177a0877b5fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14852,"size_decoded":3754,"mime_type":"text/css","magic":"ASCII text, with very long lines (14851)","md5":"0c0030789d6ae6807c522ae241ba28a1","sha1":"af5e3e3a9dc51fe571eb5a87a2adb07d3f25ee08","sha256":"ceb79b4c559ad0ad5f439564db764c4f40851784b37d5e06db9651b4c3e0a597","sha512":"0cf280275cdd5aeeb4c96e902895e46d6096246b07e5301873dcf294821b32bdae5e712f9a259beb1a50344dae5424652f18711a106276d9bee1ae47d209989b","ssdeep":"192:UGPXiiL17Yl3/IeKXNodipTeL1FIN8lOu+IWpXWcWHO+Y+hm1Y2:UG9p7mnK/eLDkOOhLWcWHOlcm17","tlshash":"3462ff52da68287cd7ebb5f7d943a218ee1dd663df310055cb82232883c97f469f5908","first_seen":"2025-10-05T07:48:41.100917Z","last_seen":"2026-07-16T16:15:02.716498Z","times_seen":15,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VRow-CXizTpyx.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.910Z","timestamp":1783435464910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VRow-CXizTpyx.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-619\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2b61PN5ib3%2FeCu0pLSAksAOQ5GoyF6X%2B8XB%2FZ8PB%2Bb8d990tuvp0N8nhP1O8Lqm5CuOj0fQI0Vvh%2FsItGN%2FbHDoVyMi%2FjUuYckCTijWEsPVcv3eeIsconxHEwbpYZVcim1QT%2Fw%3D%3D\"}]}\r\ncf-ray: a177a0882b9eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1561,"size_decoded":1573,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1560)","md5":"0c17587d784559b175314fe7a86f3a5a","sha1":"cc714cdbb82ae4797376e17cc10f853826160c88","sha256":"155e28f71abf639dfc4c00fdce3c24c7a365c44ced4c5a0ed4d56f3c566d0a2d","sha512":"c34573276121d1f3f317e201c29e593a49b317726d04fbbf7bee847e83d4dc7d019072743326123e7807014d0e401da377c4e473d450ac5f8e1da715808c7166","ssdeep":"","tlshash":"a83113647868e2b71ec64c94d5b46061fcdd2e4bf091e5e0b1ef09ac63861d82376e8c","first_seen":"2025-10-05T07:48:41.085689Z","last_seen":"2026-07-16T16:15:02.697194Z","times_seen":15,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/4-CflE_33a.png","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.730Z","timestamp":1783435465730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/4-CflE_33a.png HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\netag: W/\"68a22512-1d71b\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2SqXWzyr5%2FkSL%2F2DZstGoI0pg52YaIo4tYQ%2F6Rma4X2JZAbzjwM6ygIwk%2BuYLkh4bugSq3R2ZRe1njjfyX2WN4vvE5ILZ32MU06eEmWZOxBwfrgyFHeAd9DQcf2dnHe3q8oIw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a177a08cddd8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120603,"size_decoded":105646,"mime_type":"image/png","magic":"PNG image data, 1042 x 2279, 8-bit/color RGBA, non-interlaced","md5":"97464e53b310d0c08313beaad866994a","sha1":"2ff5541ab8b63fdd71bcaa9e96ff47f3fc58a59b","sha256":"99942626feb40ecd6cbf137f535fe26d26070b7dcc49a2a8dfc9ea1654796368","sha512":"a841993d2499ff0a49bc0bf61838262d4475afeed005ec4b363d236943f65290fa59be544aeacec618b32eaf166ac1262e4eedfc685807af9dbf3f80e17cd4e9","ssdeep":"3072:8kYZwSPPjY2NlM1Ysz8Q56Hwqil6qN2BGR0WAzv:cZwgSz87mN9rAzv","tlshash":"4ec3f19bf3069c28e4bf1d31de4d2a6537b256d7c1480b7a293a666408d902c75ff38b","first_seen":"2025-10-05T07:48:41.124874Z","last_seen":"2026-07-16T16:15:02.728979Z","times_seen":14,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":368,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:26.548Z","timestamp":1783435466548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://itemexpansion.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 02 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 448008\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-17T09:40:40.583691Z","times_seen":231587,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/home/video.mp4","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:27.474Z","timestamp":1783435467474,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /home/video.mp4 HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=131072-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T14:44:22.669Z","timestamp":1783435462669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=0,i\r\ncontent-type: text/html\r\ndate: Tue, 07 Jul 2026 14:44:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eC%2FrrsGfNIcb4NTo6GvVx4Ux59rx2cgzHFs%2FiLau7jXpe%2F7o8ZLcQzBKZMms0ofECFXNczUM4WEIs5gt51y9p8MJzxNAD0Fjea6Do%2Ft2I%2BqPy7yDJ%2FPQnshsSLzpysVGcnV14Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a177a079ee32b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2807,"size_decoded":1732,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"e726ba025db88d9e44f67f38c5264224","sha1":"89eefa411a549f5f2f6d0015d1e1ba632204c5ec","sha256":"ba7cd0071e9f5c9274be93e98d81499f33a6862fb3aa898cde6fb2563827c36c","sha512":"2f2843600759f4ac2de474ecda8b816d21fd28486266776d9f737ffa9300e62f7f0db955ac9657442f3a7c8cd2b0eee13b931dbc803fbc159959dbb01c6b8a86","ssdeep":"","tlshash":"a651345424d609051273e2012de0a909fb51e307930ede9475ef71ae9fc73ca8d97b9a","first_seen":"2025-10-05T07:48:41.045625Z","last_seen":"2026-07-16T16:15:02.729655Z","times_seen":14,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":10,"connect":21,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/forwardRefs-B931MWyl.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.884Z","timestamp":1783435464884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/forwardRefs-B931MWyl.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-b61\"\r\nlast-modified: Tue, 07 Jul 2026 12:26:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqEVY4OIGXrSYhMVZasYnipj7mGtUqbZ355uvymw5kgBilh7HEtA9UH7ecSfY%2F6zT2D8uJhme%2FRmoEUKCiGg9cwMtrVu2sIEXMlqiL1YZwt5qIcaD4hg1%2BYjvpT6Bi6zkynYug%3D%3D\"}]}\r\ncf-ray: a177a087fb8db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2913,"size_decoded":2019,"mime_type":"application/javascript","magic":"C++ source, ASCII text, with very long lines (2912)","md5":"bd28678f96913a6c83a91a858a3247e2","sha1":"a4caf2f94a05f90225844ce18d1243181c214957","sha256":"28b1c10b953288ca7b90f9803cef52218ff0ea67dc55fb644a8ac6060d33faa5","sha512":"e4a4b826fde8d7fe8a7af98444d2616be444c285485f91af04fc76c82c7e4a6da0c19df6f2855cd7059c62a1b50dd6840591f0c37faca69af74f04b68408a6d5","ssdeep":"","tlshash":"175183e035e3605917e001a710ea9b08f2145e30322ff58caa792046bc7be46f9b7226","first_seen":"2025-10-05T07:48:41.106848Z","last_seen":"2026-07-16T16:15:02.724798Z","times_seen":19,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/Sign-CmsB_s4W.css","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.981Z","timestamp":1783435464981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/Sign-CmsB_s4W.css HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PciRpLHfmYADkx97BQne7n0U%2BJ7GU%2BkFKbaUhkXki%2Fvn4hKp65DysxN3edhlPEy5V5pneQyXyFklJbTuj9MrVFDXpkYWJ2B5z4tkGbA3nrdz89vdaEBXPFKVbTNcn5QuiLJKYw%3D%3D\"}]}\r\ncontent-type: text/css\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Jul 2026 12:26:17 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-163\"\r\ncf-ray: a177a0883baeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":923,"mime_type":"text/css","magic":"ASCII text, with very long lines (354)","md5":"4657b4d186fc09605a91d6d016c1bbae","sha1":"8ea4c903feb1d4a642fbcab6a6c3d04d606c2e10","sha256":"ce9e5633b1075e67d796d41eed79b9a6f725904cb2bdcd1cd4e39c609ea64f10","sha512":"0aaeabe4330e33f9e0debfd7745f97f6adbd57af3471ed2281720f7b6c04e5724cf37df193d02c34073a516849764ab133ec4fd11a101ea307426ba58d07a2e5","ssdeep":"","tlshash":"9de0d832841a2005c4afbe09bed046fe1024a31366a28a19531d752b8a571da33997c5","first_seen":"2025-10-05T07:48:41.109305Z","last_seen":"2026-07-16T16:15:02.702292Z","times_seen":14,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/api/user/info","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:25.657Z","timestamp":1783435465657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /api/user/info HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: no-cache, private\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZs1%2FZnn522wgiyChMiyW8yn%2BWcunp8AZ2n3XupUnpGSBqa8Br8g%2FuOoogFM3C55WAz5jWDoVyqXuGnAgbayraVqsE1X11ikKzICfTxpT%2BRhzZBPJc39XbIT9tV2LXnqZBk2ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a177a08c5d9eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 56\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":772,"mime_type":"application/json","magic":"JSON text data","md5":"1075f551d021f32994e78a7a1b4e9048","sha1":"87f7905d95ea687151e51d8a1fdde8c15617926d","sha256":"24277e48911688267a6e029876bfd8a41b33c632aaa57c348e1a359a40115133","sha512":"ad7103a60c9347a21fb8d2600d80b8e9033977818d5dc25f93d7cda183552fbc65f69cae85e5992ee82f2b83f56bef982957941af15cf680127e32b57d99efe2","ssdeep":"","tlshash":"3a800410c14d0c17f1150374410c01440155515100c10f00cc3c15f0c10c0c45055151","first_seen":"2025-10-05T07:48:41.123657Z","last_seen":"2026-07-16T16:15:02.726498Z","times_seen":14,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/modalWindow-CXzJBlO7.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:26.177Z","timestamp":1783435466177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/modalWindow-CXzJBlO7.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6syCHwBsI%2F%2FLnFtOmrCBJEGEYtWSrqsNrQEJvik1LjSE6ERyMzT21s%2FIo9OfKMe8Ej7s8LdIins1zNMPDnc9WpVBKvZ1u0knL1iLQQmDGJHSq11%2FhX2nLoZmHklnLRLF%2F2NdLw%3D%3D\"}]}\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-1fd\"\r\ncf-ray: a177a08f9f46b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":509,"size_decoded":1049,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (508)","md5":"7ccec51a02c5d7809ff4fe59fd317dcf","sha1":"527be28f8854b18fa0515fa132417c20d13f911f","sha256":"282a244c03b5e7f73526714ca77d584235c4825396df1f7c0f4019947a1a155e","sha512":"7c77cac475ca7e473773cbc728994ab5a637065bb12a3565c187fbcb14c7fa833b8a7b228800d9433e42f54d3f4819240dd312c25c4d8dfdb995d88081fb1ecd","ssdeep":"","tlshash":"c3f0540cf424e3f595ebd8684534b402e14728ccabf194c0e19e413f56a106f532e748","first_seen":"2025-10-05T07:48:41.114067Z","last_seen":"2026-07-16T16:15:02.706374Z","times_seen":15,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/login/desc.png","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:26.541Z","timestamp":1783435466541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /login/desc.png HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 07 Jul 2026 14:44:26 GMT\r\netag: W/\"68541db2-d77e\"\r\nlast-modified: Thu, 19 Jun 2025 14:24:50 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q786Awfa0SfDjcpmINyhy8WJr3Q%2F%2B5qBEOO46e773UwPbTei%2FOF5dT7TrXB12rg5Y%2FUs7RaEVFSuiY8N02iROj9sOAFfhnd5y639OILrzfU%2FBBJrYiKaRkCTPqPsZZnlKRf6YA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a177a091e86eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55166,"size_decoded":53951,"mime_type":"image/png","magic":"PNG image data, 1068 x 535, 8-bit/color RGBA, non-interlaced","md5":"dd27c9de4698722d8ea4ea9630216d68","sha1":"c1743d7cf68952e1b9f9ead41bb8995aa9f1f5f9","sha256":"e54dc32073213075389486a0d41634f32585e24c9fbb0ccd6246e03c07a04266","sha512":"0b68bfaf6cf97c9534a859763dde0e49c33e1895e07472b38a133b3af6eae16d1e2b78cee8054e283eb252a9b16c4438ab0f0a08c260ebba85c34f91276c6b01","ssdeep":"1536:NZeGztfck1TeknU9Owb+EpI1Kqy8pbpRd:NIGhfDlBnUowbrxj8pbpRd","tlshash":"1e43f26f02f3e4268caf4861d4ce47b8f4597a06576fbf354ab2521ec190b7624b4c5c","first_seen":"2025-10-05T07:48:41.098127Z","last_seen":"2026-07-16T16:15:02.69563Z","times_seen":14,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/home/video.mp4","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:27.386Z","timestamp":1783435467386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /home/video.mp4 HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=4816896-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nage: 1\r\nserver-timing: cfExtPri\r\ncontent-type: video/mp4\r\ndate: Tue, 07 Jul 2026 14:44:27 GMT\r\netag: \"68541db2-51846c\"\r\nlast-modified: Thu, 19 Jun 2025 14:24:50 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-range: bytes 4816896-5342315/5342316\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAo2tSQeJ7MkifUnmiRDzzvtwDvccdViwvSUr4c%2B67qRCPRm9Ta5EwS9Reg4P7ub4U%2BClQa856iCXXCaF98N%2FNmKYbpdmM8A%2BQKDjL%2FnTHRt%2FuItJ%2FhgXfeCEDu4Q2SfkXeGHw%3D%3D\"}]}\r\ncf-ray: a177a0972ab6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 525420\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40956,"size_decoded":41715,"mime_type":"video/mp4","magic":"data","md5":"d16e253c6e195358abc5be234f3cc0ea","sha1":"c32ae114bfa2eb5e5456535b2b16c4d93eefede9","sha256":"48fcc39de47c5660ab39c861b3a9a513b7394fba788b0834e90df08883d473ec","sha512":"9b664841a9f9089871f9cc7a7aa76c1f81adc48312b6f7b6472f892ce24f021453466025751ce09321d443b2a57aec9586296bad2d8d3b0fe9be98fb3a11a9a6","ssdeep":"768:fFsoKrhDxRylRlnS6JS6wIRaksaNzBIcoO7:NsogtElna6pMks8ay","tlshash":"71037dcda0f55d7f874b9bae8e91b93d23d58dbad14fc30720b80645667c8190287a63","first_seen":"2026-07-07T14:45:00.643614Z","last_seen":"2026-07-07T14:45:00.643614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/VImg-CiMmmK5C.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.830Z","timestamp":1783435464830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/VImg-CiMmmK5C.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:25 GMT\r\netag: W/\"68a22512-1445\"\r\nlast-modified: Sun, 17 Aug 2025 18:53:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U4JSEWwiQDzynUQyoNPmbXiQe2CYPxzR8lxBrkVcR0OhAZsdDAtf9Z%2Fv%2F0hsCjRguVgyog3rQiN4Miz6wLChunMLrqBEjOAoJ%2Bdb%2FhnNPQcoW8krKAQ4dbX0ZxuQlzm6ef4PXQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a177a0873b2eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5189,"size_decoded":2934,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5188)","md5":"ff720f71171e199d11c5013a93565638","sha1":"962d0e7a2b41f9e0c3975389fbc7c594edc6cca0","sha256":"d1f555f3b6bb94b3eee92a9385bcd1761d8490a9cbab9af984af39b44ac82365","sha512":"9947d0623f8d90629acea951b16afd741288c4bd72c97e5465fb68f1d1144e7fba44dc8e007d8bc3f922a8cc138d19abbc934817b82a83fa304a4ae4ca403aba","ssdeep":"96:hG/Iq6ZHC5U1vCeg5JhHNneEx/vEE/bw5JDLCCBs+31M/UIx/ABYpfCtCVz:IQq6QCvCDHNeo3boLCCy+FUUIBAWyUz","tlshash":"58b1c70c398af9bda736a44c50b74011613c2b9b7310d8e450fa294ec3e9e64f35a67e","first_seen":"2025-10-05T07:48:41.094136Z","last_seen":"2026-07-16T16:15:02.698549Z","times_seen":15,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itemexpansion.com/assets/ssrBoot-BrUVC5_y.js","fqdn":"itemexpansion.com","domain":"itemexpansion.com","tld":"com"},"ip":{"addr":"172.67.136.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itemexpansion.com/","date":"2026-07-07T14:44:24.867Z","timestamp":1783435464867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itemexpansion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 11:46:20 GMT","end":"Sun, 09 Aug 2026 12:43:41 GMT"},"fingerprint":{"sha1":"AC:21:DB:C4:65:4D:0A:C5:0C:6F:FD:ED:0A:72:76:25:42:12:D9:9E","sha256":"A5:38:EA:B3:0C:A7:D7:67:92:27:54:5F:9E:E3:1C:A7:F3:88:55:C0:42:1E:00:3D:55:E3:8B:4B:2D:F5:D1:E3"}}},"request":{"raw":"GET /assets/ssrBoot-BrUVC5_y.js HTTP/1.1\r\nHost: itemexpansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itemexpansion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=weGm4%2FSKYG5krJ9va6IBxkTGsjTukLbiU%2BfWK%2FUT9Q0NSWfVUup5FKU3uaE9XHxOs0yHWALVvemfbSQDHt4yi79iyPGWx7GtGBcokHNPkF46EuNaE%2F%2Bl0KsUZzA6X7pjJiykcw%3D%3D\"}]}\r\ncontent-type: application/javascript\r\ndate: Tue, 07 Jul 2026 14:44:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Jul 2026 12:26:17 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68a22512-fd\"\r\ncf-ray: a177a0876b58b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253,"size_decoded":933,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"a6050e511467c9dc373d189d4193655e","sha1":"d55e91ac72002e52d3bb68c84b49cee00909ff8d","sha256":"88242a9e8f19ca068c517ff62bd8c762a86ea063989aa0d84c1fc85cfb5cb7af","sha512":"1af587322e32c4c710e9bcbbba2f38d7e3b2db6f840612c05effb7ba9a78e351da54488549a2b40f10888d547966cae71393d8028648da59e858d5a4a21c6c22","ssdeep":"","tlshash":"82d02e8eb04443f506938ae9436e4a24603a6238275a86e2702b099406644aa836bee6","first_seen":"2025-10-05T07:48:41.088048Z","last_seen":"2026-07-16T16:15:02.677395Z","times_seen":15,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itemexpansion.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}