{"report_id":"b86691ae-b3d6-45f0-8ce8-86c7710bbbe2","version":6,"status":"done","tags":[],"date":"2025-08-12T11:57:27Z","url":{"schema":"https","addr":"ahcu.online/","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ahcu.online/","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"title":"American Heritage Credit Union"},"submit":{"url":{"schema":"https","addr":"ahcu.online/","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-16T11:57:27Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-06T15:10:32.619142Z","alert_count":0,"request_count":6,"received_data":216388,"sent_data":3124,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ahcu.online","ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2025-02-18","domain_rank":0,"first_seen":"2025-08-12T11:57:30.203146Z","last_seen":"2025-08-12T11:57:30.203146Z","alert_count":73,"request_count":73,"received_data":5762789,"sent_data":34600,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Bootstrap:4","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"Weglot","description":"","website":"https://www.weglot.com","common_platform_enumeration":"","icon":"Weglot.png","categories":["Translation"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-08-06T15:43:25.81396Z","alert_count":0,"request_count":2,"received_data":177044,"sent_data":856,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2025-08-06T18:49:35.024477Z","alert_count":0,"request_count":3,"received_data":224964,"sent_data":1643,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2025-08-07T06:46:55.554534Z","alert_count":0,"request_count":1,"received_data":79455,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maps.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3442,"first_seen":"2012-05-22T14:23:23Z","last_seen":"2025-08-06T17:55:24.853893Z","alert_count":0,"request_count":4,"received_data":709915,"sent_data":1751,"comment":"","tags":null,"fingerprints":null},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2025-08-06T21:47:28.803822Z","alert_count":0,"request_count":9,"received_data":677511,"sent_data":4059,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-08-06T15:25:08.133512Z","alert_count":0,"request_count":3,"received_data":25255,"sent_data":1574,"comment":"","tags":null,"fingerprints":null},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2025-08-07T06:23:43.056434Z","alert_count":0,"request_count":3,"received_data":5064,"sent_data":1493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-06T15:14:12.503348Z","alert_count":0,"request_count":2,"received_data":46412,"sent_data":887,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"col.eum-appdynamics.com","ip":{"addr":"35.162.195.24","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-16","domain_rank":21158,"first_seen":"2013-07-18T09:24:40Z","last_seen":"2025-08-06T14:12:19.665698Z","alert_count":0,"request_count":1,"received_data":115,"sent_data":1935,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ahcu.online/inc/lightbox/js/lightbox.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"518c953f31f7299691a1621b803cbf44","sha1":"b26b64be947c86d14cbafc10de84149c462ed8bf","sha256":"b537a80c14d7d295dc304619d62df5605d71b93b9783cf9368a8df14e9ec5598","sha512":"ad7cb937e7d273f52ad98d2696d99b256bfc715d9bf961ee6b3f58fbb6e72c5f40128c33b7d50935770668f69d5eae152d366ae2c164437e6cf1e50b0255500e","ssdeep":"","tlshash":"3a21c155d3943a5b05f10a0aed3e79b4eb63266f0401ada9bb7d4f510fb03b47490d8b","size":1377,"data":"","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.959932Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/wow.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1f1ff6897992a9165e8ce009b4039e3","sha1":"e297207404fea99863aea60a1dcd3770f8ecddee","sha256":"37461d9b50fd93b2e6d064c4aa48cbc16d5b1e82c27f47270b87a39225cc00ac","sha512":"9cfad3881d20ef539ccf5c90eb30009ee1313795a03aba7ea52b9124cd6c5f9642d964f9b57badcadd639c2debef6efe8039d662dba8716887d03193a2d9c934","ssdeep":"96:DrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Dry9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"870267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8416,"data":"","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-07-22T16:33:13.0567Z","times_seen":6879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/color-switcher-active.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18f7448eeb34f28416249b3686401d97","sha1":"253492d3c65b783fe16ab992338c159bc6b5ac53","sha256":"71db57f3351df83722dd3b6c35f24506ef04a7f6464b9eca4aae9fd4658c5d26","sha512":"7a479412decb34cc96daf07580182f72957bb8b0da883ad670b0382e36af57974332a6a23b5cff680e596e95283d906581e91172080e638afb924feaffc71394","ssdeep":"","tlshash":"31116d668ee0b2276877572c45549000e50623afc9cb4b0f3e7dc2132f31a26b4d3e8a","size":881,"data":"","first_seen":"2025-03-18T23:07:37.669599Z","last_seen":"2026-04-05T05:35:11.934969Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/custom.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4591e618ff24176ccec82f552b9330c","sha1":"36daaa5a527140f997f00161d62effd6fe01371b","sha256":"ecc579c8a5c04b1c2fe74efd57f9e6942bc960fe1121e2915b9193f4e1bd7e67","sha512":"17688e832e7c682df59ddae3e5b97ca4e798783e6237feaa2e446103e65a577934e0802405200880fd62382419d37579c0162602d11ebb9d18a4ccb36bbab2df","ssdeep":"96:EfSFdNo/gUjEEIG0YCa62HBBDa+kSHBBcaeL9H6lHUf+BgBBcj7DeY/MCp:rdNajEEIG0K9a+LCaJw+8CjLMCp","tlshash":"2ac185a19aae24219853327a069d94456f7c4533e8087c9dbcfe142a5fc851d43ff3f8","size":6117,"data":"","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.888663Z","times_seen":1088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/toastr.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8309849622865e0321015ec2482645d","sha1":"5ee2d93004b15046be73afc88d29d0b780d165bd","sha256":"3bffa2cee14e483c528eeade0e59f4705555bf047c2400b0bf9fda105129b638","sha512":"ab01b20bf9f714db876acd866a2641dae72ea17562e6a9a69609e340c9ad109a9f56f8c72a0815d966a505f16540e4c75f34978df34f5b487908b76ce6d0cd0e","ssdeep":"96:N6mApHxN4DcSDaeD88DG+v+LxyX5Y7LuQpbnt4g4EDNHChmGTotgl4NZjOKjv9:NBK+vxpYnPD4eNCfTo6SNZjOKh","tlshash":"38f1f0c1331fa75b4edb239c9036944cfa7de232854a147bb8a996986974708d3e32dc","size":8035,"data":"","first_seen":"2023-03-08T22:47:56Z","last_seen":"2026-07-17T18:55:23.042032Z","times_seen":1007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/etc/clientlib-all.min.2f2dbb3959c1dcdb1f3b1f52f1375b62.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d95abe64f17c7a573ff60dd644a1e43","sha1":"ff29e996be8195af48eeef617b5c6a20c77dafc1","sha256":"ca9fb3233fb99405b67fb2770c2b1860f03db4275c790dcd181e58ce5f60288f","sha512":"9dd7c6695771eae49da9b6f588e3908fb80ee07b088ca388a60e52287d6b0434fca7e4c21f71618d932e4cc8de559a6eab502c3dda12bb2794b12fd585299cdd","ssdeep":"6144:qE+1ODHKVVGY11RWBZkoVIY/qjHR8sVbSmBxqMx6iDTiHkp:hRByoPq/qvop","tlshash":"eff44a8d7290717242a76074605f160bba3aa529b51a805cf57cc4fa3eb8c6473bbf7c","size":723763,"data":"","first_seen":"2023-03-09T11:05:47Z","last_seen":"2026-07-17T05:53:23.941706Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/cdn.weglot.com/weglot.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f2efd52c68e5a56f2317f9b5ed22704","sha1":"25bfc4447fe2cd7da24f94195b8ac0ea0c5f067c","sha256":"9d88bb54b2b3656afa6dcb8edca86757929e05d3faabe5c0c08a474750615ab9","sha512":"45a341f2fc77c892af44ac9ac291e12b7b549feefcd39ef9e753624d1166199c49618afceb0047df2c52a37f8fec955fdcf45d08e4163e860ed008b839c3fd23","ssdeep":"768:hGvgyNqiZCkmg1nDOR+R84lj3WqfFlMFe81r18ll3RpGYKLdHAscncIVMsDlAKRO:hG4yNZZegtR537rs8rcHAscsKR43CGRB","tlshash":"b3231ae9f196b1332bd7207551af6406f1396c96280ec860d722d8d66cbce8c41bbf5e","size":48484,"data":"","first_seen":"2023-03-07T12:23:45Z","last_seen":"2026-07-17T05:53:24.009933Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/_/translate_http/_/js/k=translate_http.tr.no.ou0c5oo_pW4.O/am=hMA/d=1/rs=AN8SPfrxv6PFvhkb4QnYTEbwBPkzEByPuA/m=el_conf","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb65eb2d02b4483d97ff36c881074a90","sha1":"2e6b0927ed976d550def051ad02c41d649cde034","sha256":"28a32a812acaba6cebaf38639ab5eeed2f43d51a738d1296e8ce42989b888bb9","sha512":"f4d238a60b0100439896179d85d301a59aa6fe50e91a4f768c57381dbca516cd82e9ee583b67bfb731b03a745573eb2a366b971c7b541a2cbb1cfd0b201fe0ee","ssdeep":"1536:XL5OBUXAex+GUw2vCzFsgKbTiK/Hb321LcgumlL1HviEwNWTq:XdLtzhKbTXmx1viGq","tlshash":"e273c7c8b6a674668367f5b5513f000fb23f5899e80c4cacb288d8e16eb5949413bf7d","size":78885,"data":"","first_seen":"2025-08-12T11:57:35.123962Z","last_seen":"2025-08-12T11:57:35.242001Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fa10dcf4f10ed95d30a3289b13b3119","sha1":"ff78f21c79f2cbe995a68000111bc5656f8f7806","sha256":"2268be37d2658e7f4e87482d961da148ca5a98d769ac11b5b6236d5727caa824","sha512":"f1e29026acee679018c9e346c76979fcdacb0eee230d5c58231134b2ce4ce683d48f87ed6d8a0af63a5c41aba15c3800c921f32b60f601396d61b8e939220d02","ssdeep":"3072:mepYBWYqWzhT9d9WFW1WL+fMAfOkq1rQYaM5dLMz9ew/S:69WFW1WCfMAfoJtLMz9t/S","tlshash":"8634c69df186b43606a37134501f320af23a685ab44ac4d8f636d8e1bd799ce6133f79","size":238742,"data":"","first_seen":"2025-08-11T01:37:30.148174Z","last_seen":"2025-08-26T02:22:34.746583Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0cb796ac99f11a254d9e9f15ce0b9870","sha1":"51bb8503b7fe625b14146193a4f31ac85a3fb738","sha256":"b190352728af320b263b7d46746b52165e46b8ecb82ce2500dff740540bc6f76","sha512":"36b13126d46eb509664f28cfbf044487be7f23365e318ad36478b181b5fe5b6ad4a0b50a974972ff94b6557e5d5f215421b23586511fc5e6edaa92fd6de82951","ssdeep":"","tlshash":"6dc08c43f030080a2886a129c386468c3234840800360d242a40608a38b3f8c030e8a8","size":151,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-07-16T11:09:08.006766Z","times_seen":2368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ou0c5oo_pW4.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfos9n4o7OqZMMHeaGTikhQ9yIYmaw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"350c5e2cd2d9677a96f4c2847fb11f58","sha1":"46f29b46270d52f1860be04b9a66c440cb2c04fd","sha256":"c52a1f82550c424bcc64bf4856385562e11debb40e36bca40ec7d0c4048ac1eb","sha512":"812889353fb79a6e09cc72e0c96115b666d8bf6a647cf293884fbdc398d43b16ae54f6b0e7926c6562f2d490cc762870a4e067ceb0c3c5393eef82f376c2720f","ssdeep":"3072:ZzFV9KRr8lAgEaVyLZMrJUeCqVPJJjN8aZxu/9rjDP+ae+rYm6u:JPAgEaJ3YUu","tlshash":"b524d8d9b39270669363f4a6917f000bb13b5869f9484dacb28de8e25ef48190177f7c","size":222140,"data":"","first_seen":"2025-08-11T19:49:47.511594Z","last_seen":"2026-02-24T05:09:45.783207Z","times_seen":1065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/jquery.magnific-popup.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-07-22T21:26:53.199463Z","times_seen":24092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/63aea7b4c2f1ac1e202ad814/1glh3u6j9","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12491e3ef850aa9796503cbf41dc0b6b","sha1":"9731b657712bc14bbc9dedcf1828df146c9a562d","sha256":"d630835223c02a0f8dcac42a20f254e7e5bed4d40fe93c4b45cb7d61edcd017c","sha512":"df03f73c6a9ba7910be0a308ff86289b1442883dfd6874d758da2f6ec18319a039b66d604daf7e969b61f746fd31818ddceda9a22548e7c6ba558e58a6966b72","ssdeep":"","tlshash":"684120da7b8f5863a33710d80caff90e307372e644e99982db0940407275aad2acdd28","size":2123,"data":"","first_seen":"2025-08-12T03:36:47.242224Z","last_seen":"2025-08-17T04:55:51.522886Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/fakeLoader.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbbc2dce21db4ede54f377af673a14e4","sha1":"6744ee1c09c777c03dd645e1feef863bef36afe0","sha256":"019ac00d99daed25891f79aa2560c46ea37cd3a263a21b5c0ee4c9e14cfabd89","sha512":"89e6eaac73b752ab8510144893b4a4e0450ba69c865a6542d8d0ab057e56c0c5e38f22133aa7142d2e63727bdcf80c779a113a06cc7792791d8c3619b2cc16b2","ssdeep":"","tlshash":"0b419d3092496c32452b9ad4747e1b4f75e3c21eca07882a12bcd3c55ff1c9ead6964e","size":2181,"data":"","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.940972Z","times_seen":1106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/bootstrap-4-navbar.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"19692f564401574998529b3fc97e08ce","sha1":"1b790552a374ea3a7856ecd1fb147e695275ed8c","sha256":"00b8431e30ab00475d6c7050e50b9bc2538689894048107875e3416dbe8817b0","sha512":"e5a9039594d64b7e8859c92256c4990ccc4f6ada51fe4eaf2ec444e5128d3c6e95d442b1dfa2a4ed6d18561133b6940a4fa28bc018ccace87105e7936acc9522","ssdeep":"","tlshash":"eb218c8a66c6a47241fa2bb40e0fc809fea70817d2054364382f759d2ff402515c6f6c","size":1126,"data":"","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.987695Z","times_seen":1087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0ee026917c32e8a6da66642d9460cd2","sha1":"e3291127132eb79427ad5d0792e7e93bbfc4cb41","sha256":"60735758c186f54b2843614e83be903067a0a03d9feb85b26bc382a19cde058c","sha512":"80fadb46b9c1e42fc9d4fdc68282a879d4fcdcaf20ec530b4a411376dfcad5ceecc5a052b03c6db67616423494a49dee9349354881de378ff98a716cab949adf","ssdeep":"","tlshash":"8b1121ba36c764a61326a46307bf400db3e527821a2a04f0e4a4d44d6f94e85a56fb8c","size":1002,"data":"","first_seen":"2023-03-07T01:38:59Z","last_seen":"2026-06-19T09:05:33.051465Z","times_seen":1821,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#239","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-07-22T18:01:16.825711Z","times_seen":37065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca06f64750b12e3beb7a4f99a8443ab6","sha1":"5dd8d5c447b11152e9075253acf3f104b3d91ed2","sha256":"625b9f963281d5456630f7c18d9b8db6559d3d2f2c91f8c9f6e526e90718733c","sha512":"63a9d8205e40cb47574898eb4fe7d763db9ea363c9329fa6ad4f608782142fac92ca0635b9a5b32753d43388ff4a015df6baed8a0007216b1833beb5be4d6e92","ssdeep":"","tlshash":"fd4183d936e8f9b6434318a1043f9016f6352976097be5c0531dd4f5bc78889815afb6","size":2306,"data":"","first_seen":"2025-08-11T01:37:30.340388Z","last_seen":"2025-08-26T02:22:34.763464Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"01cece45c90a71db7d3616eb1b64ee64","sha1":"51ec46279d524491393c8a9d3ef1835c8947b961","sha256":"3a62321995cd73f8e559e86048958d42a12bedd237f56310881e8eff6cfb4ca7","sha512":"952bfdec446a7acfef9800e976fd6c9e12cb56c988c854644015a5b446171d2d90a8ca5c0b42b6399a57e2f952db2b83aace4f2a1b608a7aaaacaa1ee89679b3","ssdeep":"","tlshash":"8f01cb9376d41439c0ad102273bf81a6f8b126e75d3261e0541edc458db0e081faeeb9","size":724,"data":"","first_seen":"2023-03-07T01:10:28Z","last_seen":"2026-07-22T06:08:55.004846Z","times_seen":4275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a0d852373c111de4ced8bd78baf1659","sha1":"6d19de969c2456ce2b7342b5c8c4093549abca85","sha256":"0e9bd4ca792c8431012e9ca8efcbc9fa0dbac0cdae75eed27bfa15def69a85d9","sha512":"532a64be72c813cb4404de1b13da93fe5b3229d08a7c6a1577fdc04836bbcaa372f5cd230bfca4c311739242270866ef7597a2cb7bdb2c4c478f45df8df64c43","ssdeep":"","tlshash":"1ab0928f7ad42874657b787ea22f534d3435a0027908c722892ce7406c30469893fad6","size":125,"data":"","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-06-04T12:00:38.625742Z","times_seen":853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-07-22T21:31:35.311553Z","times_seen":91189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0aee47eebb1c44dbf43eee9717de55d8","sha1":"6b95093ef2eabbb6f1c9e15c00c20347169bde20","sha256":"fe991a5a146532a3f08910933b6d87d4a98e2a282a30bf243a3083e6ae8aec73","sha512":"a2f4f5a699a0d87621cc7af8977d0d69a9cd486c9f30c32224bf9c495faa1313db426e797db8b9233ad43f33833b71f148d6c79e6604ba681f193c2e18745a5a","ssdeep":"","tlshash":"03018bc1f35c15a67670144f2e7fe65addd809282ff3f1b2f0a00860619c12e72aa8f6","size":852,"data":"","first_seen":"2023-03-08T22:47:56Z","last_seen":"2026-06-06T16:17:13.674189Z","times_seen":654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/waypoints.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fe14337a62d710389f42e8a5d1043f7","sha1":"5f3e0f34b6d7460c5f160db4fe568cde29f3ffa5","sha256":"069b3ff0c0e6c33e08368f94906ae49ec76ab1ed570819c768148ced15b138bf","sha512":"1640c47e1fec258203fdc02be6722ecb46f941bc9deace00cd4efb9a90203c09562cb43b7284d7dd9b4a4d3975a96130d0c214d73de567d8f88487487d88491f","ssdeep":"96:fdBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:f5G3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"94f1fac9b4c7b4221befa0b5d43f060bb33a9d4561098068f194e4da3db4a6da567f38","size":8051,"data":"","first_seen":"2023-03-07T01:41:57Z","last_seen":"2026-07-21T22:19:24.849612Z","times_seen":6289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/filterizer-controls.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"09092616c6c92eadf3ac73e85dbbcfb0","sha1":"b7e28ee5a4cc047b4d5d196c22b24eedf5c58dc1","sha256":"da484791ac65c3a3c67de883ccbc8b6a651ec08b85df451913a8870b0fe2facc","sha512":"34296154f8e588bd332511148b0f4569cf14eed116620f1f401f1c06f06bd43128d4b3408e996fcb097ab48971aa89cbeb8b695a7a947ed3ad60b46d90ee3cc1","ssdeep":"","tlshash":"7af0960af194a6a5403b767ee336e084ed2ca457e3044249bc6d5ac86f720d4e013b0f","size":593,"data":"","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.915325Z","times_seen":1085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/map.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"074d18a20690c9e786a7e8ea5c505067","sha1":"f7d4d1717a6f83b912ded783212799555a730dfe","sha256":"ac463348ed7518f3e8482361b2efdfaf6ec5cfcf907b8b37795f522280b59cbd","sha512":"7f6d303bd10b10cd3f8d6c371033ac74e5b516de380ded9b1eace21a906d17c88a15b780d3bcd09b67019ae895098ef0c6532686027c1802a153d38c19b03a9f","ssdeep":"","tlshash":"97410393b35dacdf02ea5316007dd1c8187cc17be21806f674177568d2dce51617eba8","size":2135,"data":"","first_seen":"2023-03-07T12:23:45Z","last_seen":"2026-07-17T05:53:23.940245Z","times_seen":1046,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/inc/lightbox/js/jquery.fancybox.pack.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ca8cd384931d74c4b6a9f592e987f69","sha1":"ae6318aeb62ad4ce7a7e9a4cdacd93ffb004f0fb","sha256":"2be721560b8cae178785531dc523d2f7b9b173bb6571536fed94a85c0d31c525","sha512":"08dc6dc5920101af800a446d10afc847548876ac8daa54f3b16d2d24e062b64e8dfa6d2374c0dbb025677e2f5843cddb57ec3e264fd26973e34c5974431468b7","ssdeep":"384:tNNKhdLEEmwXDJdKEuYcIOJxHcihYF/AxQ6SNp2ZWwYUduSh:tNcLEEmwrzuYcIWxHcihY9AOXQLduSh","tlshash":"c4a21861b2603d53d07b2a26414f550ea0320423fb078dfa746de9e85ba5bc426b3fde","size":23180,"data":"","first_seen":"2023-03-07T01:17:46Z","last_seen":"2026-07-22T05:28:26.222448Z","times_seen":2518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?key=AIzaSyCa6w23do1qZsmF1Xo3atuFzzMYadTuTu0","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"485701190bb38274f612a3536ec672c7","sha1":"9ce7a4fbbdce5e1788723c92ca322d0c524beb34","sha256":"3d12bf6bbfb83bb4825ef12e69ad90f837e9c4c7587ba16e9b093f35ef31a1a0","sha512":"70d14801e3c8740cbd1b5cf407ae587ac8d0617e6b5ffb1c1e2ccae37e0802a11e55a3e7b49985ff8ba889883dcc3269ea87df2ff4d83ca11457b68935f8cecd","ssdeep":"6144:GXSeD5jGx7eBwKFhnldJncQUX5wb/L+CHPnGtjtS6wKqSPnNNvbr50H00AOvCWjw:GXSeVjGx7eBwKFhnldiQo5wb/L+CHPnS","tlshash":"04441b9472623462c3a2e4e460370106b67e54aaf04cc9ecbb9dddf2aef59460177f78","size":261074,"data":"","first_seen":"2025-08-12T03:27:11.11301Z","last_seen":"2025-08-12T11:57:35.262656Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/jquery.bxslider.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7658757f3908f59389898e30f4de4067","sha1":"f8f94befddf4def914df3fae70d106fc525819a0","sha256":"7bc204a8009323811c2888323b9626d4417b02358aab7fdfabdcf0153385c621","sha512":"2e06fceb4237f3e3e73bbbf2faa5f6df0c63797ed7dd4587adc441b4b3ab96f3723cbbe42cab82ff897029be166ff345062f1ba270a7a4bfcfcd265143f7b48a","ssdeep":"192:YLGoLN83BRKmfL+ClFVPDhjfHGTgiD3VARMWvdO34AgEJrv/T16OsQon05rzIH0Y:YnZ8WjOVRXy16/kXIHHSHruwc","tlshash":"9692541b713436fe46b632b5b299cf487276908ac537f8f86175d85819e8cc4301badb","size":19368,"data":"","first_seen":"2023-03-07T01:40:02Z","last_seen":"2026-07-22T10:43:55.231488Z","times_seen":2717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/61/14/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cb4a09ec13fe79da15c5a8268ecdc21","sha1":"af89766b7eadbf299a168ad9ca97847a469996c1","sha256":"c1f56d1aa2a0b630079a13f1cfd7fc38f910e09f5a7b17ce4bf2264c734ec87a","sha512":"75b3b1501ac4f8309b7217508dc59f2a8e8b43579b16e4159d50477f3c6d0b9ac0f9d8f2cf57cf3e2a7a8b4937e34a79bf7d4b216184aec672faed03d716a374","ssdeep":"3072:lcfHVEUWndbtkpN983QMPMdVR+g6waCL9gsoow/LMvGoE6Gtfb:lcfHVEUWndbtkpNq3QMPMdn6waagsoo0","tlshash":"3fc3c48972536067e760b4f914a70102b17aa495f05dc86cb2fecdf2aff096521b9f38","size":126333,"data":"","first_seen":"2025-08-07T21:33:17.004159Z","last_seen":"2026-05-15T12:31:33.607447Z","times_seen":8889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-07-22T21:39:25.722834Z","times_seen":137504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/1.12.4/jquery.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"618538b4ab9639d444e962729a927f15","sha1":"dacc1f76630a9708add066819b1aabf8dce01056","sha256":"27d92130c0321dad5a03760fd5ac98a3d04ed4c94d88418fe6d50da1f7fc5cbe","sha512":"bcb6754ea246939a19a917cc0b810e1753c1b0f1a8b1b7e652128ef15dee4fc79111e4d88fe12f9188449a307e82240d0261af402d783428edfe5785c860372d","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp96:y4J+03jL5TCOauTwDhFdnCVQNLa98Hrc","tlshash":"9693d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97168,"data":"","first_seen":"2023-03-07T01:12:12Z","last_seen":"2026-07-22T21:03:30.518026Z","times_seen":5603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/owl.carousel.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"56b28ad35f1816c6894b14190a0a006d","sha1":"967ceaa9e6f67e636d818f42b4d5d15c7a4a254e","sha256":"b5757aa153f991c82c949e638c56b4913042196240f3a41cec5a40c3366d1bdd","sha512":"78aa17ca7c163b0cbe846efcd2ebc78aa55b760b737faf5a837a6fd7971604a0829c6b4a35915a02ceffc6173408a67b06885d68013e21059d2c105fa1ad5569","ssdeep":"768:8BA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7YCORUQuFBt33:gAIMFFdYMxAcEQDV","tlshash":"01137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","size":42772,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-07-21T21:36:01.360286Z","times_seen":7955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/sweetalert.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3b8ce97ff6ce324da6232da353adf40","sha1":"2a3daabc70232c6350ab48d32605dc4a6ac1f1fa","sha256":"2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b","sha512":"000d41ce9e50d0ad4a6a728a9af37fe1ddc844a565bfd3d883014fbe6df69cf3ba412f321f51ceecb6e0075a6088ec4fb5f7a0e73127d9b6bae0c51ca89c7a08","ssdeep":"384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"96031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","size":40808,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-07-22T21:22:45.384265Z","times_seen":11510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/jquery.bxslider.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7658757f3908f59389898e30f4de4067","sha1":"f8f94befddf4def914df3fae70d106fc525819a0","sha256":"7bc204a8009323811c2888323b9626d4417b02358aab7fdfabdcf0153385c621","sha512":"2e06fceb4237f3e3e73bbbf2faa5f6df0c63797ed7dd4587adc441b4b3ab96f3723cbbe42cab82ff897029be166ff345062f1ba270a7a4bfcfcd265143f7b48a","ssdeep":"192:YLGoLN83BRKmfL+ClFVPDhjfHGTgiD3VARMWvdO34AgEJrv/T16OsQon05rzIH0Y:YnZ8WjOVRXy16/kXIHHSHruwc","tlshash":"9692541b713436fe46b632b5b299cf487276908ac537f8f86175d85819e8cc4301badb","size":19368,"data":"","first_seen":"2023-03-07T01:40:02Z","last_seen":"2026-07-22T10:43:55.231488Z","times_seen":2717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9a532e0c50d86e2635456d5340d53e3","sha1":"3c0a38464b4fdde1b728302ba2929d6bd1d917bc","sha256":"c87d95b6678b92ba0013516fea63f1ba8b23a89abb7bf698730d6abda7d838dc","sha512":"bfc5e6dbddb429d4d77088e580ba02ed1594d2144ddf79e98662ec3d22e0637bc112960b40d0757ea79af3f21f3fdff20f88d59b58936942e1a14252421dd4f4","ssdeep":"","tlshash":"1de068793b6ca0b8e99b21050e2d1749309800831206f985787cd4660f28d5330fbbf4","size":379,"data":"","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-06-06T16:17:13.674855Z","times_seen":832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-07-22T21:31:35.376395Z","times_seen":91162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/61/14/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2319a0f5abe4cbde80aaf37f03719982","sha1":"947466d155f46c8999aaf1c5d700c146d0f546b6","sha256":"bcde6e9f5fca2d4babd2e376269df8b0cb1c5f94b3ba34facb3ec9fb2fc9fa91","sha512":"01436ac2162d33dbd0b54a317eb768fd534fb2144df77e8388c13104f7c585e24b31a2a05fe20e69fc93eb18a4f6b69ee64605d5969a0944531cac383e197ff9","ssdeep":"6144:i85U3/Dwh3Mydt6aUPYl6c/1pGcram04w+SmgNgYCsGsRtW3gG5Q:i85U3/Dwh3Myz6aUPYl6c/1pJram04wz","tlshash":"5464c62c71326f4ea833c857c266310e90356edbf964c8bdffe65554eaa5944f0e0a38","size":319784,"data":"","first_seen":"2025-08-07T21:33:16.987149Z","last_seen":"2026-05-15T12:31:33.565051Z","times_seen":8889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/scrolltopcontrol.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4b429f9967aa1c8266040f0c3a8af06","sha1":"68ded267a97e354b790812e7621e6b0cdbf1d1b1","sha256":"8fa3dcf37f804c3ff9d561fedf2fefece267e4a18ac47a14d5aab0028870a8c0","sha512":"cfca8b77aeb4ac3c940329b095142a4032cee26236a4f0ba3f3d94c67aad5628c11cda7c45b0ec34415c230c256b7be48d38d506b1f32fc95e7f9a56bb607678","ssdeep":"","tlshash":"f5713100b2a9123e05ee406df77be7296e16d01be1b2605b746a5cf438d063d535bafc","size":3802,"data":"","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:24.013785Z","times_seen":1064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-22T21:19:27.110317Z","times_seen":140588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/etc/clientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"af2968fceb7f237e56363e001bbf407f","sha1":"245b56bf8b91af47031b8f1141c59979429dc039","sha256":"d43a868701070b5ce6966b7000acb506c8b519635e284b4f824e26b63b2b444a","sha512":"164a999a2845a625ce786a748e6912be0f562c66ba086a3457eab49345021196d738af2708fab2f2920273272f9951dc7ced23c9d5495c2cd9e78abb6f401f14","ssdeep":"768:kXBKgsCOnCU4FFW57mLM6APBHuKrSZYEg58ijcIoY5ReTYy/g:IKjnCU4FFW56LvaQKdzGbxg","tlshash":"3303f89cf690b85592632074e02f0b0d773b5baa6568809eb4cddcd43c758ad3467fb8","size":38468,"data":"","first_seen":"2023-03-07T12:23:45Z","last_seen":"2026-07-17T05:53:23.93253Z","times_seen":903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9454e2e25f5f7487962d2f2e20242b1","sha1":"9b1097a47c2981b2e7a5f8679aad5f35fe210cfa","sha256":"f6812d0eda63c4a49ebcba6abd7170fd0bbab7d9ae3f4f8b7a8c6a5c5f64fa13","sha512":"0af3e00eeff06c753054c9d13ce2fb6d6704664a3329df08edf3a33456c09b23ffeb82673b6f4fdff95369dc9b878f78a9810ff9d6d900edc6316ed195c2f57f","ssdeep":"","tlshash":"d2e0c69c2a403d30a3130a9760b2de0c30b33028b154e800a98f8c492a18889c428b88","size":334,"data":"","first_seen":"2025-03-18T23:07:37.670996Z","last_seen":"2026-04-05T05:35:11.991109Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-07-22T21:31:35.347453Z","times_seen":64669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e0625d5c6d365e5db5c9081315badbc","sha1":"3353fbb8dbb85a3f936a40320817faa49e18b988","sha256":"6d79a22566f07530402bfc8b87289129e8f3376b2dcde223196b57f7c4bdf7a4","sha512":"0203b2a5bd2b2abb24097026fe8e684a84bbfa9dcbdd2a4ebc95cc2e395d1a7815b7e6dcb1e14f88166db3ca0150fd7f6d6cf707371f545f2ee77f7197c564b0","ssdeep":"","tlshash":"efd05be181060c115f7a50ba4596e1033fd9c1dae182c4e6576cd45631ef9e72b49d02","size":264,"data":"","first_seen":"2023-03-07T12:42:10Z","last_seen":"2026-06-06T16:17:13.676351Z","times_seen":650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/jquery.counterup.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"465906f7e86adf960de5784a9cdb40fb","sha1":"124337b64842cb55e7d480f99a83159ac6104d58","sha256":"05231ca1268f3f7b2cdbc4daba734e7718a03a0ffaf79cb376bc5a49d85bbdfb","sha512":"c7a151c3cfe8c52380fb0560c996e490f1fb547c555c03441ecf9c173597dddb4aeead7f08f13e3c17201d6abbb776d30c829460f37bb726f93184a9a0722a2f","ssdeep":"","tlshash":"8a11c0b93a0b298d7a50e01df2efb0989076bdbc0c80945b51c158401f91dbc3f57730","size":1078,"data":"","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.898527Z","times_seen":1093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/color-switcher.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"07e0e829a35fa6e171ca38846cfcfde6","sha1":"c038677cc1072e2df4b2a1d8997bdfb41da44590","sha256":"45312d094380e813ad3ccef98fbce8734a737fd9b6c9a520b7b0c915a9f652df","sha512":"d0999f70593e960d1a9f54da8364c18888f360b7cd9db6e45929035dfc052425f416396f11f230f36f081a9eddd20ddda56b732ef4b1232b3e810af2acc462b5","ssdeep":"","tlshash":"a9415ba8d27226638577231c2b2be604ffa16873040cc74c3d7e8d981ff6d84a9a6e55","size":2384,"data":"","first_seen":"2023-03-07T12:23:45Z","last_seen":"2026-07-17T05:53:23.916122Z","times_seen":1060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/bootstrap.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"95697eefe013ce1a1e69c14105d09696","sha1":"7fcbfe254ff0b171b13c21c7a86d4db5a32fa676","sha256":"44a7e1e6e7f4f6ad49f162ce33dfd72f05d3162e150415b7ac9cefba8d51acc1","sha512":"991986b8dae98c7b0afdfc82a09563fc3af5292430fef5cb25e3427896d4c12a7a1b1be4a9c24a0213f81f5a3d2245edf09221a9b9b5fedad9c3b7979605b377","ssdeep":"768:5DYbgh0GBxTHVmcmjWSLsynS/zZ/AcyUenY8yiKKdHPPm26Ro1FH4nx4PV:5Djh02Lh+SbZ/AbYqdm2mx4t","tlshash":"3233b94a725478a201df9466513f450bb73b389eaa0b816cf95d98ed1e7cd88312bf3c","size":50682,"data":"","first_seen":"2023-03-07T01:06:24Z","last_seen":"2026-07-22T09:31:49.247457Z","times_seen":1213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/jquery.filterizr.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5eb0077b399d38f31eef66c00d150980","sha1":"014c05a2ca80b0066631dc8e48267ddb4bbfc057","sha256":"03c9a5d09cf0714352a12a9233626ec69367822b520550955bd7bab074f11a09","sha512":"36346854877cc315f5a877c6d6c96c4794aee79630235b4e7d9514c0c801e418733ae44d9e3157d835d1fe0e3f0579002c58bfaf89ad8fde76016486eb811e62","ssdeep":"192:Xbyvfee/oYBk809WkIV5xZ1n2Uj/0lmuSFO6MM7pvZ/wIR:Xbyfo0QWkYz/4mZFVj7pvtR","tlshash":"4d42b801bad1332bd19b37b0f1eb594d713bbab5590508c0736d8dd2da66a88c2a7e1c","size":12034,"data":"","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.919884Z","times_seen":1118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7187987440ee544ae011125a0c9ee40","sha1":"fa2bfdc9cc470a9e8277d6b3f4321fa2ffc6e8cb","sha256":"cacd267bd8b2bea1cab5cfed54427fb06c73c6b286a3de34310b4a72288c9c1b","sha512":"5b4387976dc30301ce68a621164086650a0d708a85206308600498f599f5d567839d33dc60f424c70f47bb2c654ba7f0db468e6e331de239790fc0db33d347d3","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJ7MoZm+odXsJ5Ar6VKkOP6I/:FGABPVhO5wdKJVMo4sJ5Ar6kSI/","tlshash":"03644bc8f183b0b606e6a1a5009f5207737a151968ed8498f574dfe968e8e5c633bf3c","size":324017,"data":"","first_seen":"2025-06-13T09:29:49.213683Z","last_seen":"2026-04-10T07:58:25.860572Z","times_seen":6944,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/jquery.sticky.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb9e65fc3638c9c96ab909c51882b0a6","sha1":"9109c4c710cfaf3be7fba3b12b348a79262e4923","sha256":"8a0fb587e2399fa57291795510001b9e5de7b0c6f8ee097ded2e7a66ad149492","sha512":"8550181294cefb16d706fee131440127ed7aaae8f6d60d499b07c15ca4ac2562760d37a674fd5b98693f10e1b7f33e3b89b64e213b2db60bcf2421e16a084b8b","ssdeep":"192:tAPo0HYtNeO8ChAkd++aMsuIqD6SmCO4VV1voO78US+FqxY1mGlU:qAt9AkdDsuRDHmCON3USjY1C","tlshash":"8d1231866322617658bbf3be8b56924cf3b341b3929365147dadc9840fb295001f1ff4","size":9544,"data":"","first_seen":"2023-03-07T12:23:45Z","last_seen":"2026-07-17T05:53:23.962499Z","times_seen":1092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ahcu.online/css/font-awesome.min.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /css/font-awesome.min.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6647\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31025,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30858), with CRLF line terminators","md5":"f4232088435e47914bbc280dbf56c8df","sha1":"9e6aff916f2be32dbc9a053f83f906aab6527c7f","sha256":"562bd1e9b6d71357cb209821a63ebb8324b5498fa8e144c48c9a9ec2b49e6d10","sha512":"3d756ffa53d7471f125e7618728c90e7644b1fa0b41b29f67195b0e19fe59692f787ffa4028cab35adfeadeaf5c10163d4ec26ad8eac24a2b99cc9875cd824ac","ssdeep":"384:ju5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8Z:slr+Klk3Yi+fwYUf2l8yQ/e9vC","tlshash":"85d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d22a512c6fb9","first_seen":"2023-04-15T05:54:03Z","last_seen":"2026-07-17T05:53:23.895061Z","times_seen":746,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/map.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/map.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 569\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2135,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"074d18a20690c9e786a7e8ea5c505067","sha1":"f7d4d1717a6f83b912ded783212799555a730dfe","sha256":"ac463348ed7518f3e8482361b2efdfaf6ec5cfcf907b8b37795f522280b59cbd","sha512":"7f6d303bd10b10cd3f8d6c371033ac74e5b516de380ded9b1eace21a906d17c88a15b780d3bcd09b67019ae895098ef0c6532686027c1802a153d38c19b03a9f","ssdeep":"","tlshash":"97410393b35dacdf02ea5316007dd1c8187cc17be21806f674177568d2dce51617eba8","first_seen":"2023-03-07T12:23:45Z","last_seen":"2026-07-17T05:53:23.940245Z","times_seen":1046,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:05.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 02:19:59 GMT","end":"Sat, 11 Oct 2025 03:19:41 GMT"},"fingerprint":{"sha1":"F6:B2:D4:07:34:AA:36:B0:31:B4:46:F7:C0:F1:42:C1:22:C7:52:88","sha256":"3B:B7:7C:41:B1:9A:61:31:E5:4D:BE:EE:8A:62:A0:B7:7C:C0:A9:78:00:77:1E:13:EC:1C:EF:7C:5C:FF:D5:2A"}}},"request":{"raw":"GET /_s/v4/app/6899416770a/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 11:57:05 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96dfcb0ae8d056bd-OSL\r\nlast-modified: Mon, 11 Aug 2025 01:04:18 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-07-22T21:31:35.347453Z","times_seen":64669,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/waypoints.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/waypoints.min.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2469\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8051,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7808), with CRLF line terminators","md5":"4fe14337a62d710389f42e8a5d1043f7","sha1":"5f3e0f34b6d7460c5f160db4fe568cde29f3ffa5","sha256":"069b3ff0c0e6c33e08368f94906ae49ec76ab1ed570819c768148ced15b138bf","sha512":"1640c47e1fec258203fdc02be6722ecb46f941bc9deace00cd4efb9a90203c09562cb43b7284d7dd9b4a4d3975a96130d0c214d73de567d8f88487487d88491f","ssdeep":"96:fdBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:f5G3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"94f1fac9b4c7b4221befa0b5d43f060bb33a9d4561098068f194e4da3db4a6da567f38","first_seen":"2023-03-07T01:41:57Z","last_seen":"2026-07-21T22:19:24.849612Z","times_seen":6289,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/inc/lightbox/js/jquery.fancybox.pack.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /inc/lightbox/js/jquery.fancybox.pack.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8271\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23180,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (645), with CRLF line terminators","md5":"0ca8cd384931d74c4b6a9f592e987f69","sha1":"ae6318aeb62ad4ce7a7e9a4cdacd93ffb004f0fb","sha256":"2be721560b8cae178785531dc523d2f7b9b173bb6571536fed94a85c0d31c525","sha512":"08dc6dc5920101af800a446d10afc847548876ac8daa54f3b16d2d24e062b64e8dfa6d2374c0dbb025677e2f5843cddb57ec3e264fd26973e34c5974431468b7","ssdeep":"384:tNNKhdLEEmwXDJdKEuYcIOJxHcihYF/AxQ6SNp2ZWwYUduSh:tNcLEEmwrzuYcIWxHcihY9AOXQLduSh","tlshash":"c4a21861b2603d53d07b2a26414f550ea0320423fb078dfa746de9e85ba5bc426b3fde","first_seen":"2023-03-07T01:17:46Z","last_seen":"2026-07-22T05:28:26.222448Z","times_seen":2518,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/blog-5.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/blog-5.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78295\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78295,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 971x649, components 3","md5":"69ce9bdf66f0c76eb1a80ef7baf41260","sha1":"adfb7cd1a2f9a9b53d38cbef3b7f4e52b38fd170","sha256":"75343815a2e8e1c48c82100b40b1bfb6e5b74b028e8b708d9db1efee89f646af","sha512":"167102b09649c8471be1e4194c01375b485555b368da38844492b1c1805dea30282089dd9ada748b216151657b31e88f3ba68721f63be1f607dad5a6674abaa7","ssdeep":"1536:tWphZkTUudNAa4pCDkDCKXek0MsBB9zW6RSsrpJxgFRnNr9PV1hz1k:t6m6a4xGWUW6RS+0Brr1I","tlshash":"9473027c63d19f96b1040b31400e3165bd61e6b9bf27e2a44b08a1cfed6476c4eaef25","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.963935Z","times_seen":1035,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/blog-6.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/blog-6.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 42180\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42180,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 812x540, components 3","md5":"dd8fc778f54121666896bc7e399323eb","sha1":"4abc3d9b8bf97a9914d65807ef04a8e99b4ffa67","sha256":"ebe230389404c32af8df72ddaabc5102477eea6693c1af9c53ebfdab12a7ab36","sha512":"d64db77e080761af783e97d03b26ed4d73f1a1a4a54568bea2791cadf07f24ff8e75f525a81affe33902513752a2279f0238d6e072f1270422adf49976abca41","ssdeep":"768:Flmg8M2XGcqOZJ1a2aA4gQ8ZWYOcAVBIAoSU4vHBvnhW7jqfFVQZ4sjugP5:FlZ62VOZJ1HagePVBRjU4vHBPhOQ0","tlshash":"ec13e1577f15d6b6c5072132c7b69fb5205aca14d8708976818c1a6c1fa8ffecccc989","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.95167Z","times_seen":1032,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":331,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 08 Aug 2025 05:42:07 GMT\r\nexpires: Sat, 08 Aug 2026 05:42:07 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 368096\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-22T21:19:27.110317Z","times_seen":140588,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":94,"dns":1,"connect":17,"send":0,"wait":18,"receive":16,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/custom.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/custom.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1622\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6117,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c4591e618ff24176ccec82f552b9330c","sha1":"36daaa5a527140f997f00161d62effd6fe01371b","sha256":"ecc579c8a5c04b1c2fe74efd57f9e6942bc960fe1121e2915b9193f4e1bd7e67","sha512":"17688e832e7c682df59ddae3e5b97ca4e798783e6237feaa2e446103e65a577934e0802405200880fd62382419d37579c0162602d11ebb9d18a4ccb36bbab2df","ssdeep":"96:EfSFdNo/gUjEEIG0YCa62HBBDa+kSHBBcaeL9H6lHUf+BgBBcj7DeY/MCp:rdNajEEIG0K9a+LCaJw+8CjLMCp","tlshash":"2ac185a19aae24219853327a069d94456f7c4533e8087c9dbcfe142a5fc851d43ff3f8","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.888663Z","times_seen":1088,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:14.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://ahcu.online/\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"clearcut-frontend-http-prod-hiqos\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos\"}]}\r\ncontent-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos\r\naccess-control-allow-origin: https://ahcu.online\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Tue, 12 Aug 2025 11:57:14 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T21:24:26.350516Z","times_seen":17460679,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/css/fakeLoader.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /css/fakeLoader.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1286\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9055,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3373236010f4791905b4243523c852ae","sha1":"f0518b67f831bf7ae4a8fae2873dda32cccee71e","sha256":"dc917074047f65fb36f2683634b4df05900d1ce0c30102679e170419c2477339","sha512":"b1c0c23aad958ade41e963e7b7b2e54c4353153077022a6ca7d53fb4ed1dc2a3933d5ad7dbc5a164e15b102de2cd15e73abbcdfd48b2700c8a31e41748e19a47","ssdeep":"192:28JwyOChjnPVhyXGsp8EKH4aWd0I0b8uDTYJ+y7CF7ZVGfql9UFkV6yqGxpvuf/c:28JwyljnPVhyXGsp8EKH4aWd0I0b8uIW","tlshash":"37129ce509411545d6330f66d7ed0d74af3888632a070deab2e7784dc7a1e3c2396eab","first_seen":"2023-04-15T05:54:03Z","last_seen":"2026-07-17T05:53:23.937764Z","times_seen":1033,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78885,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1801)","md5":"fb65eb2d02b4483d97ff36c881074a90","sha1":"2e6b0927ed976d550def051ad02c41d649cde034","sha256":"28a32a812acaba6cebaf38639ab5eeed2f43d51a738d1296e8ce42989b888bb9","sha512":"f4d238a60b0100439896179d85d301a59aa6fe50e91a4f768c57381dbca516cd82e9ee583b67bfb731b03a745573eb2a366b971c7b541a2cbb1cfd0b201fe0ee","ssdeep":"1536:XL5OBUXAex+GUw2vCzFsgKbTiK/Hb321LcgumlL1HviEwNWTq:XdLtzhKbTXmx1viGq","tlshash":"e273c7c8b6a674668367f5b5513f000fb23f5899e80c4cacb288d8e16eb5949413bf7d","first_seen":"2025-08-12T11:57:35.123962Z","last_seen":"2025-08-12T11:57:35.242001Z","times_seen":2,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":138,"dns":6,"connect":15,"send":0,"wait":178,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/wow.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/wow.min.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2576\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8416,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8385), with CRLF line terminators","md5":"e1f1ff6897992a9165e8ce009b4039e3","sha1":"e297207404fea99863aea60a1dcd3770f8ecddee","sha256":"37461d9b50fd93b2e6d064c4aa48cbc16d5b1e82c27f47270b87a39225cc00ac","sha512":"9cfad3881d20ef539ccf5c90eb30009ee1313795a03aba7ea52b9124cd6c5f9642d964f9b57badcadd639c2debef6efe8039d662dba8716887d03193a2d9c934","ssdeep":"96:DrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Dry9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"870267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-07-22T16:33:13.0567Z","times_seen":6879,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=hMA/d=0/rs=AN8SPfoSvcbOnFdaxQP_x8te6jzGQof28w/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=hMA/d=0/rs=AN8SPfoSvcbOnFdaxQP_x8te6jzGQof28w/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 18:50:55 GMT\r\nexpires: Fri, 07 Aug 2026 18:50:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 407168\r\nlast-modified: Thu, 22 May 2025 01:09:21 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-08T04:13:28.550133Z","times_seen":37899,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":163,"dns":1,"connect":27,"send":0,"wait":15,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/css/bootstrap.min.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19047\r\ndate: Tue, 12 Aug 2025 11:57:02 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65319), with CRLF line terminators","md5":"1ad067ebd7eeff73b19e1be8b2b17ee2","sha1":"6fa78a66c58e4cb3053cf7ddf265c9c3d08fd4f8","sha256":"e933713de6bd4985a9cb2717e015c07d83213b634128b4596924dea79ef225a4","sha512":"d1b9dcc938cee15f1722a1880a847ef028d9e73256bf5d8ef2c267c8082d222e93fc8ee488083a52086e700bdc04dbb78bf3a5a7c2eed4d1b1ca90527ce92edd","ssdeep":"1536:FQ1w8TP+1+QYYDnDEBi82NcuSEz/oOO/RgIENM6HN26y:21TPse/yIENM6HN26y","tlshash":"58d362a7f5a0312da467c61960d0bafe156f8285d7221bfbf42737644b895cb0a73e0c","first_seen":"2025-03-18T23:07:37.606478Z","last_seen":"2026-05-26T06:58:52.895738Z","times_seen":23,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/credit_card_PNG87.png","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/credit_card_PNG87.png HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 47221\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 310, 8-bit colormap, non-interlaced","md5":"d3875c4084ba2064cd9883e918508429","sha1":"154b283762d0d138b379d0733ccbc9aaf3d4c800","sha256":"92aaac25543bbaf662bd04e661a1b8f96ab8c3ee1f6b35367596cb4efc743639","sha512":"e8f245189c0bc2572ac5fa7af64c1d8960e5aecb0680d924eaea844c0ce3f29b85f89eec395f45bb2625282b4411bea2a2b8709a96cf5630e3543dcb7b156221","ssdeep":"768:dRTif1O7QYPcTjdrq4NxJNMJWnacVhK9O0cC90u0QYuQnNSjOqK/xQku:dRTqOXETjdrqWxJuyacVhC10vnNSjOo","tlshash":"2423028ac0d4a854cfbab9407d2c9d5b3b745c8d1b11d51af1224cef692ef0aacef215","first_seen":"2025-04-01T12:00:10.366289Z","last_seen":"2026-05-24T22:21:50.666237Z","times_seen":21,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/color-switcher-active.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/color-switcher-active.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:31:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 228\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":881,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"18f7448eeb34f28416249b3686401d97","sha1":"253492d3c65b783fe16ab992338c159bc6b5ac53","sha256":"71db57f3351df83722dd3b6c35f24506ef04a7f6464b9eca4aae9fd4658c5d26","sha512":"7a479412decb34cc96daf07580182f72957bb8b0da883ad670b0382e36af57974332a6a23b5cff680e596e95283d906581e91172080e638afb924feaffc71394","ssdeep":"","tlshash":"31116d668ee0b2276877572c45549000e50623afc9cb4b0f3e7dc2132f31a26b4d3e8a","first_seen":"2025-03-18T23:07:37.669599Z","last_seen":"2026-04-05T05:35:11.934969Z","times_seen":20,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/1.12.4/jquery.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /1.12.4/jquery.min.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:08:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32859\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97168,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077), with CRLF line terminators","md5":"618538b4ab9639d444e962729a927f15","sha1":"dacc1f76630a9708add066819b1aabf8dce01056","sha256":"27d92130c0321dad5a03760fd5ac98a3d04ed4c94d88418fe6d50da1f7fc5cbe","sha512":"bcb6754ea246939a19a917cc0b810e1753c1b0f1a8b1b7e652128ef15dee4fc79111e4d88fe12f9188449a307e82240d0261af402d783428edfe5785c860372d","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp96:y4J+03jL5TCOauTwDhFdnCVQNLa98Hrc","tlshash":"9693d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:12:12Z","last_seen":"2026-07-22T21:03:30.518026Z","times_seen":5603,"resource_available":true,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:05.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 02:19:59 GMT","end":"Sat, 11 Oct 2025 03:19:41 GMT"},"fingerprint":{"sha1":"F6:B2:D4:07:34:AA:36:B0:31:B4:46:F7:C0:F1:42:C1:22:C7:52:88","sha256":"3B:B7:7C:41:B1:9A:61:31:E5:4D:BE:EE:8A:62:A0:B7:7C:C0:A9:78:00:77:1E:13:EC:1C:EF:7C:5C:FF:D5:2A"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ahcu.online/\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 11:57:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nx-served-by: visitor-application-preemptive-r8vc\r\naccess-control-allow-origin: https://ahcu.online\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 96dfcb0ff89156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T21:24:26.350516Z","times_seen":17460679,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100i,300,400,400i,500,500i,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Roboto:100,100i,300,400,400i,500,500i,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 12 Aug 2025 11:57:03 GMT\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43174,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"46cb0934abb89cb3d14a6e09ee4aefee","sha1":"5cdf29473de4da8bc3cfe2b118ad95c4ac8c6e63","sha256":"100c38dec5c92e7bcb4dfe2462cb648a05b9c7c41ea81f4806d76b6d81e7bddf","sha512":"fd27d166e0d079497ec07b98553cd7cde97a96664ea50f293943930902524bb44d73e43d7293ed2752a2d32588e2c41450a115be75cf199daa362843b1f43309","ssdeep":"768:yFDFjFKFjFaBFeKFpFNF7qK9KaEe9cowV1S1afeS3TVFHFYFZFNFO4F/LFYFgFGS:aLqtZ2pVn","tlshash":"07131ea1041b5040a7835ce223ce7e34fe0f92547241d075abfc9b6beedbda6526836d","first_seen":"2025-06-03T17:42:12.876335Z","last_seen":"2025-09-07T00:59:31.530835Z","times_seen":353,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":161,"dns":1,"connect":14,"send":0,"wait":39,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/mortgage-protection-png.png","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/mortgage-protection-png.png HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 165169\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":165169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 960, 8-bit colormap, non-interlaced","md5":"ec441a81f8c81e24ee201f23b5323712","sha1":"9b11f693b53199fe5ad7d3c0cd64053da7ea9a3a","sha256":"857846a44b8212afd3f6524d4af30d10c158150651ebe541d75bd019e38615a8","sha512":"a6235fcef65c9e64f29d483596dc0ddf4a7e87708cf6fd977efe41ce8fb60134649580973a7a88d6a880fc0fbd36127fa62556bff091155711825284e6bd69bf","ssdeep":"3072:Qn+u7SEuKUWK0dYO5SFylj9CLt8JLiUcJoLfJNaNQPrhGDTLPl3LM304g+4P:Qj7SlW12cSij9/iUrLJNaNQTQDnyE4Ne","tlshash":"edf312b07d007f54bd43a40d56711cbc3da5a2de3c1b35484eaa642ab9b76d8af60f0a","first_seen":"2025-04-01T12:00:10.347752Z","last_seen":"2026-05-24T22:21:50.549838Z","times_seen":21,"resource_available":false,"data":null}},"time_used":926,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":444,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30774\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 06 Aug 2025 03:43:31 GMT\r\nexpires: Thu, 06 Aug 2026 03:43:31 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 548012\r\nlast-modified: Mon, 13 May 2019 14:37:17 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88145,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-07-22T21:39:25.722834Z","times_seen":137504,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":274,"dns":1,"connect":18,"send":0,"wait":19,"receive":4,"ssl":333},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/bg-1.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/bg-1.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/color/default.css\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 128804\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128804,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 944x689, components 3","md5":"e197355547cbef209427632bd7b2b866","sha1":"8f9da60df1b9b6014cad7e830a4cb6fd1fb4f225","sha256":"7f7c832aa8b7cc957e2a58427a62e6add5f054a88b24e0693f3d7490ac17c689","sha512":"94a2bbd2584ef7d4f33bba26f597c37effabd9aa42074deab95c10313ad78e98b886ec9524d9d08615c2bd03dfb0605038814098676f61b6a6541f01b5227409","ssdeep":"3072:chHRqOnEcJcvdIZhChw+mtjbu651To5upAJERqhsI3lstTWOZG:8EcJcvfhm551To53mmGCf","tlshash":"54c313065d696bc7f3f14984a302ff04b9e6e21f97c63fc4e7706ad549849a09ef4920","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:24.007079Z","times_seen":1036,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/blog-8.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/blog-8.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31177\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31177,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x511, components 3","md5":"804b8e44e1c43286f78b89a422c9a620","sha1":"93c2a2097512c6949df2e0b6de0f3d0b1338266e","sha256":"d8bf28bd319981ed47b5d871397b837f84f311716fdb0ab92c3686103bfd285c","sha512":"e73ee4bd09535e8fba6e6d7eb361e381ba7c8b9dd888bb2e2a6714d8001e4264a96db54c9fd0ee5701df6717193f5a068cf5f2d1e76314659f341a7d60cd4b4f","ssdeep":"768:aZAzbDpdbriym4LsRUui5j6pUOKgxSZa9z9LaCwm/QCKNu6:SAzbFdvZ5xj61z9pV+CKNl","tlshash":"7ee2f1f2a153370afc201a33f3868f3507aad9c012d939ad998c2566665fd2157163ff","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.885629Z","times_seen":1037,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/footerlogo.png","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /footerlogo.png HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 18 Mar 2025 05:59:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 142602\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"8534f1f24b861d03b2f3850147d3add6","sha1":"027fc958cfd186226522006ffccbfdd2a9a8a3c6","sha256":"5564cd19de841080647a21377ff2a75acb5bf0faf48c721a01167b9e0be64c22","sha512":"7397f5903fde7b4e29933e0f7d59962ab71748d9cc2284d7fc1205ef0390b5b14802865cc9a548492a4ef2f184aaf7acd0738a56d1a2f7ff26a31a0863a011b4","ssdeep":"3072:GYxOlNxYiKtpL5bz5vw/mEoTGYtfXdMkWtjHuFCtHqGHXbhIvHTwh1y:3xsitpL535vamBGIdULuF7GlG01y","tlshash":"5dd312d228e0748597dfed1d7cfcc1b8b7956148d3a3a71f01808419aa52fa7438e772","first_seen":"2025-03-18T23:07:37.624722Z","last_seen":"2025-08-12T11:57:35.249736Z","times_seen":6,"resource_available":false,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":433,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/bg-2.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/bg-2.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/color/default.css\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 68737\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68737,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 570x370, components 3","md5":"a5147fb69b0d501b6690f6548b1a9af6","sha1":"7bfd9304ac9fd82aeaeb9e4e95ea9ba919149b28","sha256":"3ff0e12658143c927418c8783fed132470717b9ea46c05536a4bc677c7690390","sha512":"683b99bcb2ccaf260bc10c8aff800f4b32fe991b5eab55ade24961cba157ce84f7ab18984491c3067f3e45f67afbf7d0c35ab9c8ac773466a201b180b63b2392","ssdeep":"1536:H7/Scg0P61jBv9h6Ha+viJ5le3sLKoEMRLFgy9W/KkdKdYagkUJ:bjg0PUtFhz+viJ5las9EMRpgVKcKPm","tlshash":"c763026ef0810e3c5a9473d27d37b263068a37a50cbb747792d75c317eec64a9020ab8","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.891412Z","times_seen":1031,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:05.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 18:17:02 GMT\r\nexpires: Fri, 07 Aug 2026 18:17:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 409203\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-07-22T21:46:14.234714Z","times_seen":52358,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:05.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 02:19:59 GMT","end":"Sat, 11 Oct 2025 03:19:41 GMT"},"fingerprint":{"sha1":"F6:B2:D4:07:34:AA:36:B0:31:B4:46:F7:C0:F1:42:C1:22:C7:52:88","sha256":"3B:B7:7C:41:B1:9A:61:31:E5:4D:BE:EE:8A:62:A0:B7:7C:C0:A9:78:00:77:1E:13:EC:1C:EF:7C:5C:FF:D5:2A"}}},"request":{"raw":"GET /_s/v4/app/6899416770a/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 11:57:05 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96dfcb0ae8d256bd-OSL\r\nlast-modified: Mon, 11 Aug 2025 01:04:18 GMT\r\netag: W/\"a7187987440ee544ae011125a0c9ee40\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324017,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"a7187987440ee544ae011125a0c9ee40","sha1":"fa2bfdc9cc470a9e8277d6b3f4321fa2ffc6e8cb","sha256":"cacd267bd8b2bea1cab5cfed54427fb06c73c6b286a3de34310b4a72288c9c1b","sha512":"5b4387976dc30301ce68a621164086650a0d708a85206308600498f599f5d567839d33dc60f424c70f47bb2c654ba7f0db468e6e331de239790fc0db33d347d3","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJ7MoZm+odXsJ5Ar6VKkOP6I/:FGABPVhO5wdKJVMo4sJ5Ar6kSI/","tlshash":"03644bc8f183b0b606e6a1a5009f5207737a151968ed8498f574dfe968e8e5c633bf3c","first_seen":"2025-06-13T09:29:49.213683Z","last_seen":"2026-04-10T07:58:25.860572Z","times_seen":6944,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=63aea7b4c2f1ac1e202ad814\u0026widgetId=1glh3u6j9\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:05.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 02:19:59 GMT","end":"Sat, 11 Oct 2025 03:19:41 GMT"},"fingerprint":{"sha1":"F6:B2:D4:07:34:AA:36:B0:31:B4:46:F7:C0:F1:42:C1:22:C7:52:88","sha256":"3B:B7:7C:41:B1:9A:61:31:E5:4D:BE:EE:8A:62:A0:B7:7C:C0:A9:78:00:77:1E:13:EC:1C:EF:7C:5C:FF:D5:2A"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=63aea7b4c2f1ac1e202ad814\u0026widgetId=1glh3u6j9\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ahcu.online/\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 11:57:06 GMT\r\ncontent-type: application/json\r\ncf-ray: 96dfcb0fd86856bd-OSL\r\nx-served-by: visitor-application-preemptive-hdg3\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-5-0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3065,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8bb9ec62d65e58b1df238316fe271260","sha1":"0769ba79808f85d388d9151069d317f769c055f3","sha256":"bdc600a5788497f1cbfc46f3d2ac216c5d4c84f56d17e18c0862403551a5e789","sha512":"fe201db838891b589f7d612917ebf95300724f5af1b2231f743e06f73b1d5f34dd864574ccd604b5641cb59f846e75762e090b943a4b70f814775ead3649a38d","ssdeep":"","tlshash":"a55125298916dd3563c9c25765de3a23b93dd123e384191df4986d2883efacd221174b","first_seen":"2025-05-29T13:04:53.842018Z","last_seen":"2025-08-17T04:55:51.572605Z","times_seen":13,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Montserrat HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 12 Aug 2025 11:57:03 GMT\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4137f5e0f6b6adf4f44f93be9af3054d","sha1":"62bd011a7c9594d30b310ad10e6cf89104585380","sha256":"45d16b1f93ad37eebeee1ccdeffc09c03d1bdc8bc152b2d4574f2b38e6e17d9f","sha512":"d1ed1cf20d7f04af167661f7fbeababd932f0458dcdbed0e7a50a2bf03147d32fc7bd17b2bf4e6a44eb938acc7681f3b854f1f1d852b33047b17f1730fefa03f","ssdeep":"","tlshash":"0631bb411217a500a7431cce23ce7d26ce8e626274a0c03aaffd5ca4ade5c620735b6d","first_seen":"2025-05-29T18:58:38.94929Z","last_seen":"2025-09-04T23:13:41.715544Z","times_seen":2569,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":131,"dns":1,"connect":16,"send":0,"wait":34,"receive":0,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/jquery.sticky.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/jquery.sticky.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2318\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9544,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"bb9e65fc3638c9c96ab909c51882b0a6","sha1":"9109c4c710cfaf3be7fba3b12b348a79262e4923","sha256":"8a0fb587e2399fa57291795510001b9e5de7b0c6f8ee097ded2e7a66ad149492","sha512":"8550181294cefb16d706fee131440127ed7aaae8f6d60d499b07c15ca4ac2562760d37a674fd5b98693f10e1b7f33e3b89b64e213b2db60bcf2421e16a084b8b","ssdeep":"192:tAPo0HYtNeO8ChAkd++aMsuIqD6SmCO4VV1voO78US+FqxY1mGlU:qAt9AkdDsuRDHmCON3USjY1C","tlshash":"8d1231866322617658bbf3be8b56924cf3b341b3929365147dadc9840fb295001f1ff4","first_seen":"2023-03-07T12:23:45Z","last_seen":"2026-07-17T05:53:23.962499Z","times_seen":1092,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/jquery.bxslider.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/jquery.bxslider.min.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4928\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19368,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19040), with CRLF line terminators","md5":"7658757f3908f59389898e30f4de4067","sha1":"f8f94befddf4def914df3fae70d106fc525819a0","sha256":"7bc204a8009323811c2888323b9626d4417b02358aab7fdfabdcf0153385c621","sha512":"2e06fceb4237f3e3e73bbbf2faa5f6df0c63797ed7dd4587adc441b4b3ab96f3723cbbe42cab82ff897029be166ff345062f1ba270a7a4bfcfcd265143f7b48a","ssdeep":"192:YLGoLN83BRKmfL+ClFVPDhjfHGTgiD3VARMWvdO34AgEJrv/T16OsQon05rzIH0Y:YnZ8WjOVRXy16/kXIHHSHruwc","tlshash":"9692541b713436fe46b632b5b299cf487276908ac537f8f86175d85819e8cc4301badb","first_seen":"2023-03-07T01:40:02Z","last_seen":"2026-07-22T10:43:55.231488Z","times_seen":2717,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/filterizer-controls.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/filterizer-controls.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 156\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":593,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"09092616c6c92eadf3ac73e85dbbcfb0","sha1":"b7e28ee5a4cc047b4d5d196c22b24eedf5c58dc1","sha256":"da484791ac65c3a3c67de883ccbc8b6a651ec08b85df451913a8870b0fe2facc","sha512":"34296154f8e588bd332511148b0f4569cf14eed116620f1f401f1c06f06bd43128d4b3408e996fcb097ab48971aa89cbeb8b695a7a947ed3ad60b46d90ee3cc1","ssdeep":"","tlshash":"7af0960af194a6a5403b767ee336e084ed2ca457e3044249bc6d5ac86f720d4e013b0f","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.915325Z","times_seen":1085,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/color/color-switcher.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /color/color-switcher.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jan 2025 00:58:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2678\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10674,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4431)","md5":"f889742ff269f7adb0fbb26c39ca5e7a","sha1":"b93664ec0fff1d3274acb73333b48f9f4b5d20db","sha256":"4367a98c9dc53e6d00e22e85f63d4e6bb2f1559a5684f079c142b54ebbbb7dc7","sha512":"3530553b262e2a8e73f4a8e52fdfc0a47a1325601da355aa4c5b32894de374e03227443ddc3690dd58905e9d57f8809db5d85ade70af7e2e626fedcaa7fd1539","ssdeep":"192:aPEgygU8tHlIlZ3K+MxfwKMx/KtQpHlIlZ3K+MxfwKMx/itQnpZXnZXy:aAlKDxfwj8lKDxfwjnY","tlshash":"2922853244cdb4963239ef5ba2ad1b062776e877ac82cc71b49c1e600fcd65c7987788","first_seen":"2025-03-18T23:07:37.642997Z","last_seen":"2026-04-05T05:35:11.948471Z","times_seen":28,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/blog-2.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/blog-2.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53321\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53321,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 570x370, components 3","md5":"893353112665ee1c944f520846722007","sha1":"a08a84f88e61b3f1a5e4b651cc6ba558f6d324ee","sha256":"f65ad81e6d7ea52e0c1018a7bdaedf037228be46cc1022462d308003fc5521e2","sha512":"cd12e08f1d9aae88dd969f1ee872e878ebcb9e9f78f29d979056b889b1622c4068911fe1fd840cbaf1ef553536d20e3b20f82625265f861ff835a00dd8ec4616","ssdeep":"1536:THLHMcSVeLcmE0tPDYOuIAuzcpgU7pRWKYKlNkTj0hccAHU:TrscSV8cmE0tP0Od9EgUvzhhcK","tlshash":"6533f193f356f8defb726a7845c36e6dd8d1f8bd73024a856e81254a250d2ecbc40826","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.963161Z","times_seen":1033,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":327,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/jquery.counterup.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/jquery.counterup.min.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 503\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1078,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (917), with CRLF line terminators","md5":"465906f7e86adf960de5784a9cdb40fb","sha1":"124337b64842cb55e7d480f99a83159ac6104d58","sha256":"05231ca1268f3f7b2cdbc4daba734e7718a03a0ffaf79cb376bc5a49d85bbdfb","sha512":"c7a151c3cfe8c52380fb0560c996e490f1fb547c555c03441ecf9c173597dddb4aeead7f08f13e3c17201d6abbb776d30c829460f37bb726f93184a9a0722a2f","ssdeep":"","tlshash":"8a11c0b93a0b298d7a50e01df2efb0989076bdbc0c80945b51c158401f91dbc3f57730","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.898527Z","times_seen":1093,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/css/bootstrap-4-navbar.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /css/bootstrap-4-navbar.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 654\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2598,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3121aca3cb99cd03f95743a56b310f4c","sha1":"deb82d89faae0f8b6bd1e20297c9d42dc788a08c","sha256":"c894be19c38522da4f1984ed993c8238b1ab293311105611d96dc825c417a9ab","sha512":"0b68235a9f3a1ab96069fb7a5f76d15f88699d54f1f73b2af23c68f1057f5857d86d93b048a668b3164f3d92508229a1b5ab27025af39e7b7b97ef8b9150f7ad","ssdeep":"","tlshash":"b651b18b8bc1784514b2d33856d621a0fbdf6651cb80a0be353da2786fdbe805ad7f44","first_seen":"2023-04-15T05:54:03Z","last_seen":"2026-07-17T05:53:23.917735Z","times_seen":1030,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:05.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 02:19:59 GMT","end":"Sat, 11 Oct 2025 03:19:41 GMT"},"fingerprint":{"sha1":"F6:B2:D4:07:34:AA:36:B0:31:B4:46:F7:C0:F1:42:C1:22:C7:52:88","sha256":"3B:B7:7C:41:B1:9A:61:31:E5:4D:BE:EE:8A:62:A0:B7:7C:C0:A9:78:00:77:1E:13:EC:1C:EF:7C:5C:FF:D5:2A"}}},"request":{"raw":"GET /_s/v4/app/6899416770a/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 11:57:05 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Mon, 11 Aug 2025 01:04:18 GMT\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 96dfcb0af8e556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-07-22T21:31:35.311553Z","times_seen":91189,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/css/owl.theme.default.min.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /css/owl.theme.default.min.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 336\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":941,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (846), with CRLF line terminators","md5":"58fa0eb0891a7bcb0f2ee822cce62ed4","sha1":"34e714fc4d078105e9a7b1ababd192d6e544685a","sha256":"fedfa62c29729ccdabb5e90b287385f13ef1c5c8b4e5efbc000702b110e40fdd","sha512":"5100d6e457f47bceea2444ce7c4be7c66a0a2a5c3b0a17db42804a082359ea4a6185cccb6fca2193d600c667a6a381fb75fe35f010c1643585e6cd7ee5e5261f","ssdeep":"","tlshash":"dc11bac0b28a221d3023c190539843cb6b1e287f429c0af6f89d9120c22dd452a6fbf9","first_seen":"2023-04-05T13:43:19Z","last_seen":"2026-07-20T22:03:57.005589Z","times_seen":1955,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/css/responsive.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2440\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15829,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e256adcdbe2f9480a7dc6e5f0beb715b","sha1":"135fbf0541692b363e7a81790a5bb130afecdc6e","sha256":"95d10df44c77d308c6656eed015a103063ad0ca02362c51b9fdb93947c9a64da","sha512":"66d690ba01720d034ed3716aae6136ee7c72c76e98057bfcb53e77bb5097a9a31951a042b3963bf91ee94ee267c3a51f597899d2e2b5f212958df42027cf4071","ssdeep":"192:DjcjJQM3zAi1Zuo+nJCwTLrxJx+liu9sqQJDbLMLVsJsR4Orj:DjcjJQM3dZzerDYWJKVz","tlshash":"4762c80be6903c087c7a7775d7a322e0ea234953d342d0a23d6c72a9cf7da594291f9d","first_seen":"2023-04-15T05:54:03Z","last_seen":"2026-07-17T05:53:23.972229Z","times_seen":894,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/blog-9.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/blog-9.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30616\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30616,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 812x540, components 3","md5":"a5c44207c57853163a53a23d43a89726","sha1":"74a2a6a0ba70788bad4ca07e88aab235aa82289b","sha256":"c1f74b20c558359aba86eacf49a3bb469f527b963161bbd68b3608ee27f7333d","sha512":"5052041b3d4c1e538b6924c0b555dc3e21656e919d0ac74dc97965a2f61c51c8f03935a8ac570e15422191a0e3eea69f2fcce47048fc2685eccb99fd00c0e589","ssdeep":"768:hg+rDF5C8gB2Ijpnu5Pkwov00KsZtKlFYqTaTjA6v3NeI:yWHC8+jXvhbCYQcA6PNeI","tlshash":"72d2f1b6df705e7ee5441c9f027542a47a124826e95dc3cfbb80e40b58a3b31acbd12e","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.985688Z","times_seen":1045,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":320,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/bg-5.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/bg-5.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/color/default.css\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 97824\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97824,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, components 3","md5":"7f096f50c88548931dd0df7831200e8b","sha1":"30dc16e18926dd80bd73e3b4c291307f86d90b7e","sha256":"861d9ce39e5a4852c9dbacb24a8f20a5121995414c8d0e431e1586689c4fccd2","sha512":"ee5969addd4f208cafe187b4aa0fa50a2fe35a21da36f9c80e3d4c3026bc094cafcc0f4309a4b971d21ac0b056e924a99017fe60f17a2df4dd9a55637b271d5f","ssdeep":"1536:WfyO8/hHBv70cp87YxxTjhOlbdq5LPwJS6V4Ut7FD7mcBRFlZossFLoZtmDFxWH7:WfOhHx0+8s7xOjnJVV4Ut7FDKebGv+kU","tlshash":"7da302378a983967ed6f97b5b9cb27527a831d24970ce85099c233f8c455070cdbe324","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.899816Z","times_seen":1021,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/blog-7.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/blog-7.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28606\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28606,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 812x540, components 3","md5":"58042d50e2139db5e3b4d265c1aab916","sha1":"d100a0db9c6b7c011562be7b153252466ef18259","sha256":"1230940cd7817047fb178deadc01b3900a3854089bf24c8f305f16ca8d30adf4","sha512":"1338794e5cb309dcfea92d359ff8c36e89810838ab383bf49dc6a965bcd473e796925e7925368c620baa6726ce78e39ea050df561efddea949a0345ba33bc754","ssdeep":"768:t5wvYySyVGToeqbzKByDh6Nipe/BS7RKQ5YXcVS:uSaUojfI6MQ5YXcVS","tlshash":"76d2e135ac8a3745c19279ff2a5ff352cb15829cc011aadb1e1caea171ae7e07f10554","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:24.01989Z","times_seen":1039,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":318,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?key=AIzaSyCa6w23do1qZsmF1Xo3atuFzzMYadTuTu0","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /maps/api/js?key=AIzaSyCa6w23do1qZsmF1Xo3atuFzzMYadTuTu0 HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Language, Origin, X-Origin, Referer\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\netag: 05186a06\r\ncontent-type: text/javascript; charset=UTF-8\r\ncache-control: public, max-age=1800, stale-while-revalidate=12600\r\ncontent-encoding: gzip\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 87156\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":261074,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11710)","md5":"485701190bb38274f612a3536ec672c7","sha1":"9ce7a4fbbdce5e1788723c92ca322d0c524beb34","sha256":"3d12bf6bbfb83bb4825ef12e69ad90f837e9c4c7587ba16e9b093f35ef31a1a0","sha512":"70d14801e3c8740cbd1b5cf407ae587ac8d0617e6b5ffb1c1e2ccae37e0802a11e55a3e7b49985ff8ba889883dcc3269ea87df2ff4d83ca11457b68935f8cecd","ssdeep":"6144:GXSeD5jGx7eBwKFhnldJncQUX5wb/L+CHPnGtjtS6wKqSPnNNvbr50H00AOvCWjw:GXSeVjGx7eBwKFhnldiQo5wb/L+CHPnS","tlshash":"04441b9472623462c3a2e4e460370106b67e54aaf04cc9ecbb9dddf2aef59460177f78","first_seen":"2025-08-12T03:27:11.11301Z","last_seen":"2025-08-12T11:57:35.262656Z","times_seen":7,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":86,"dns":4,"connect":24,"send":0,"wait":65,"receive":43,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/fakeLoader.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/fakeLoader.min.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 587\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2181,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2181), with no line terminators","md5":"fbbc2dce21db4ede54f377af673a14e4","sha1":"6744ee1c09c777c03dd645e1feef863bef36afe0","sha256":"019ac00d99daed25891f79aa2560c46ea37cd3a263a21b5c0ee4c9e14cfabd89","sha512":"89e6eaac73b752ab8510144893b4a4e0450ba69c865a6542d8d0ab057e56c0c5e38f22133aa7142d2e63727bdcf80c779a113a06cc7792791d8c3619b2cc16b2","ssdeep":"","tlshash":"0b419d3092496c32452b9ad4747e1b4f75e3c21eca07882a12bcd3c55ff1c9ead6964e","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.940972Z","times_seen":1106,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:05.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 02:19:59 GMT","end":"Sat, 11 Oct 2025 03:19:41 GMT"},"fingerprint":{"sha1":"F6:B2:D4:07:34:AA:36:B0:31:B4:46:F7:C0:F1:42:C1:22:C7:52:88","sha256":"3B:B7:7C:41:B1:9A:61:31:E5:4D:BE:EE:8A:62:A0:B7:7C:C0:A9:78:00:77:1E:13:EC:1C:EF:7C:5C:FF:D5:2A"}}},"request":{"raw":"GET /_s/v4/app/6899416770a/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 11:57:05 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Mon, 11 Aug 2025 01:04:18 GMT\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 96dfcb0ad8c056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-07-22T21:31:35.376395Z","times_seen":91162,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/blog-1.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/blog-1.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41726\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41726,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 570x370, components 3","md5":"bab4874be3238db6dab8c701f427a96f","sha1":"d21d82a83b8bde19fd16ffea616f75ffe37e3a6e","sha256":"202d5e31c8db7a1b0c9a8a75de061f53b357223d6c6e0afe8375bc2d0b98f217","sha512":"c36f6ff75eeaf399afa266196e850cc198da735b3ecec0df1ee0b3e2caa53e00b7a5bfd88b9a8dd61032da716152e4ee4e5d8b54d05c451392a7e0a1ad1277a1","ssdeep":"768:90vywSv/uaRUt9p46Z8zP93h6D8BbF8MTYYYRPy196k/Dc:CvjSXR44l93h6D8UZhY4mc","tlshash":"7e13f1750a8dffaed7a21dd0c068ccbdfd32215c4b2096812aa5bdac569fc6d48e0653","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.88365Z","times_seen":1032,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/toastr.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/toastr.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1996\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8035,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b8309849622865e0321015ec2482645d","sha1":"5ee2d93004b15046be73afc88d29d0b780d165bd","sha256":"3bffa2cee14e483c528eeade0e59f4705555bf047c2400b0bf9fda105129b638","sha512":"ab01b20bf9f714db876acd866a2641dae72ea17562e6a9a69609e340c9ad109a9f56f8c72a0815d966a505f16540e4c75f34978df34f5b487908b76ce6d0cd0e","ssdeep":"96:N6mApHxN4DcSDaeD88DG+v+LxyX5Y7LuQpbnt4g4EDNHChmGTotgl4NZjOKjv9:NBK+vxpYnPD4eNCfTo6SNZjOKh","tlshash":"38f1f0c1331fa75b4edb239c9036944cfa7de232854a147bb8a996986974708d3e32dc","first_seen":"2023-03-08T22:47:56Z","last_seen":"2026-07-17T18:55:23.042032Z","times_seen":1007,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/favicon.png","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:04.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 18 Mar 2025 06:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 266263\r\ndate: Tue, 12 Aug 2025 11:57:04 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"696b7711708bb3bdd2d050c854bc987f","sha1":"ddf55bae0f024bbbf195c8391f4a89fe36e28255","sha256":"dbc233196604bd48b6d23ecb67c12bb5c312324ca8c9596a97fdaeb5fee09771","sha512":"37a7b24fb6ef0c34a3a3724ae5b771cea77d4bdf210f113ff4c9934dc42aafec826e2d0746850907f3f52e40fadcdf400bff272763e065bc45e9f5903e06afdb","ssdeep":"6144:4zrfOtTCO/9+EAA9sSCUOSQmK25vlVMy7ZSzMuEjhKT:4zbOd7/9z9sSCt+X5vleyNiEjUT","tlshash":"bf442324efaa4992949f43a642440f1cc6d82799ef8cda4dcc0866b47c4b737e718bdc","first_seen":"2025-03-18T23:07:37.647622Z","last_seen":"2025-08-12T11:57:35.266457Z","times_seen":6,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/css/animate.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2789\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1c7ad0a97d2dc2da70b8d855ae946cae","sha1":"7f3596852663437b7f89231cc750628a0d86e403","sha256":"cb09ab0572c6a6549a782e2843218c00285cb737ae50fe29a5061ca96aff0234","sha512":"c8a8a7fd2fb0793981faa0cd80ed876b58e0959784662360cc65b523f88d0a3c25067c00f3db353d2d432013c4d2b9a81cfd42e41aaba0fefc9581598883c958","ssdeep":"192:uNavX0fZtAXf4j3GQ20de0te8H9nlNApz81cV+DVa/ndCJZZPd3WKmj4CYPyNpu6:ujf4qGc0QsFtdk0j3qOkS","tlshash":"e5b249492d42144487b24779d7ebcf1cef2a54771c231abeb2c1058b5fa46b8638ed8b","first_seen":"2023-04-07T04:18:17Z","last_seen":"2026-07-21T22:59:22.286592Z","times_seen":2364,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:05.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 Aug 2025 18:55:13 GMT\r\nexpires: Wed, 05 Aug 2026 18:55:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 579712\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-07-22T21:40:12.716806Z","times_seen":74397,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-12T11:57:01.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 Aug 2025 11:57:02 GMT\r\nstrict-transport-security: max-age=16070400;\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Bootstrap:4","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"Weglot","description":"","website":"https://www.weglot.com","common_platform_enumeration":"","icon":"Weglot.png","categories":["Translation"]}],"data":{"size":55042,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2395)","md5":"2194798d26a1a9e6b9a73a4ead120ae5","sha1":"1be9c798c32a354fa1dae2715fba7d94d4326752","sha256":"f9d177ce9cf007e05a8e17a71162f47467ba7abc336e5779aa88700fb8d55457","sha512":"484d60a9b9211431117cbfbbb2d11e61726a66a1709aacb00c23ad656ca7ce0336ba43f742d853f779635d3d02082464668a061e9ace354f2bb42883c852f27a","ssdeep":"384:4jNbDR8bcjJHxd7GbLrV2GV2IXV2ZV22/ZxKvXB7VtoTYVGcV2IXV2f9lV2Q/ZxH:4jNb98bcdvU0SxChLxchCVDlv2x3AGCh","tlshash":"dc335120a6cc1c3f061322cb28657b1925ef4f32e52795a2f3ff06891bd6d859d1b867","first_seen":"2025-08-12T03:36:47.203326Z","last_seen":"2025-08-12T11:57:35.268552Z","times_seen":3,"resource_available":false,"data":null}},"time_used":964,"timings":{"blocked":331,"dns":110,"connect":107,"send":0,"wait":295,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/jquery.magnific-popup.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7046\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20219,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-07-22T21:26:53.199463Z","times_seen":24092,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"col.eum-appdynamics.com//eumcollector/error.gif?version=1\u0026appKey=AD-AAB-AAC-WHN\u0026msg=M10%20%7C%20onerror%20%7C%20TypeError%3A%20wrong%20type%20of%20url%20value%2C%20number%20passed%20in%20but%20should%20be%20a%20string.\u0026stack=g%2Ff%5Bd%5D%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A287%3A13%0Ad%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A299%3A6%0Af%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A335%3A61%0Af.prototype.Ac%2Fwindow.onerror%3C%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A352%3A153%0Ae.around%2F%3C%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A222%3A13%0AOnErrorEventHandlerNonNull*f.prototype.Ac%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A352%3A22%0Af.prototype.setUp%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A349%3A6%0Ad.Zc%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A9%3A6%0A%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A710%3A11%0A%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A711%3A3%0A%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A1%3A13%0A%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A1053%3A3%0A","fqdn":"col.eum-appdynamics.com","domain":"eum-appdynamics.com","tld":"com"},"ip":{"addr":"35.162.195.24","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:04.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.eum-appdynamics.com","organization":"AppDynamics LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Jun 2025 00:00:00 GMT","end":"Tue, 14 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4F:F8:14:7F:15:3F:1F:85:B6:E9:16:06:36:16:F6:8B:23:33:79:C9","sha256":"04:8C:5F:A7:C4:EC:9D:17:5C:11:93:2B:D5:C3:88:EC:DC:74:68:09:22:C2:74:32:34:4B:42:8E:83:B8:25:A0"}}},"request":{"raw":"GET //eumcollector/error.gif?version=1\u0026appKey=AD-AAB-AAC-WHN\u0026msg=M10%20%7C%20onerror%20%7C%20TypeError%3A%20wrong%20type%20of%20url%20value%2C%20number%20passed%20in%20but%20should%20be%20a%20string.\u0026stack=g%2Ff%5Bd%5D%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A287%3A13%0Ad%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A299%3A6%0Af%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A335%3A61%0Af.prototype.Ac%2Fwindow.onerror%3C%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A352%3A153%0Ae.around%2F%3C%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A222%3A13%0AOnErrorEventHandlerNonNull*f.prototype.Ac%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A352%3A22%0Af.prototype.setUp%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A349%3A6%0Ad.Zc%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A9%3A6%0A%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A710%3A11%0A%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A711%3A3%0A%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A1%3A13%0A%40https%3A%2F%2Fahcu.online%2Fetc%2Fclientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js%3A1053%3A3%0A HTTP/1.1\r\nHost: col.eum-appdynamics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 12 Aug 2025 11:57:04 GMT\r\ncontent-length: 0\r\nserver: envoy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T21:24:26.350516Z","times_seen":17460679,"resource_available":true,"data":null}},"time_used":1214,"timings":{"blocked":517,"dns":1,"connect":171,"send":0,"wait":172,"receive":0,"ssl":349},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/61/14/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:09.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /maps-api-v3/api/js/61/14/common.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 21:01:30 GMT\r\nexpires: Fri, 07 Aug 2026 21:01:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 07 Aug 2025 18:01:09 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 399339\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":126333,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1189)","md5":"4cb4a09ec13fe79da15c5a8268ecdc21","sha1":"af89766b7eadbf299a168ad9ca97847a469996c1","sha256":"c1f56d1aa2a0b630079a13f1cfd7fc38f910e09f5a7b17ce4bf2264c734ec87a","sha512":"75b3b1501ac4f8309b7217508dc59f2a8e8b43579b16e4159d50477f3c6d0b9ac0f9d8f2cf57cf3e2a7a8b4937e34a79bf7d4b216184aec672faed03d716a374","ssdeep":"3072:lcfHVEUWndbtkpN983QMPMdVR+g6waCL9gsoow/LMvGoE6Gtfb:lcfHVEUWndbtkpNq3QMPMdn6waagsoo0","tlshash":"3fc3c48972536067e760b4f914a70102b17aa495f05dc86cb2fecdf2aff096521b9f38","first_seen":"2025-08-07T21:33:17.004159Z","last_seen":"2026-05-15T12:31:33.607447Z","times_seen":8889,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/scrolltopcontrol.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/scrolltopcontrol.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1487\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"a4b429f9967aa1c8266040f0c3a8af06","sha1":"68ded267a97e354b790812e7621e6b0cdbf1d1b1","sha256":"8fa3dcf37f804c3ff9d561fedf2fefece267e4a18ac47a14d5aab0028870a8c0","sha512":"cfca8b77aeb4ac3c940329b095142a4032cee26236a4f0ba3f3d94c67aad5628c11cda7c45b0ec34415c230c256b7be48d38d506b1f32fc95e7f9a56bb607678","ssdeep":"","tlshash":"f5713100b2a9123e05ee406df77be7296e16d01be1b2605b746a5cf438d063d535bafc","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:24.013785Z","times_seen":1064,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/sweetalert.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/sweetalert.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11427\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40808,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (40808), with no line terminators","md5":"f3b8ce97ff6ce324da6232da353adf40","sha1":"2a3daabc70232c6350ab48d32605dc4a6ac1f1fa","sha256":"2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b","sha512":"000d41ce9e50d0ad4a6a728a9af37fe1ddc844a565bfd3d883014fbe6df69cf3ba412f321f51ceecb6e0075a6088ec4fb5f7a0e73127d9b6bae0c51ca89c7a08","ssdeep":"384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"96031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-07-22T21:22:45.384265Z","times_seen":11510,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/bg-4.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/bg-4.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/color/default.css\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 87406\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87406,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, components 3","md5":"4e630e7ac70b8485413ce35c6b375966","sha1":"c188d6e67310b5b93b22debef7fdd0323c8d08d5","sha256":"b3721db605cfd56e61cd25e1cfde2527226f0a528b03c480eaaebdba77384782","sha512":"6213454c345b2fbce4e35c3be2b53c2d449bd0daf764948bdf5964628b72bc625c8bebdc5bc4034ac586b1fff1e8008ea9251a1e8fd3a4299923d2c283e105b1","ssdeep":"1536:bV1WB5fGdUcVqiLZyAjJ8hLgu4Nml1HZjiCj9r7svK1wXH1ZwaFqzgzmeV:a34e03jihLfnrViUJYvK10HkCqdg","tlshash":"1e8312e04b79bcd3f4cf462f38c4bd2d5445963a4840d78e6536223a9ead26b0bb5378","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.973955Z","times_seen":1008,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/etc/clientlib-default.min.001bf72e86ac4a5150822ce748c8d0ae.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /etc/clientlib-default.min.001bf72e86ac4a5150822ce748c8d0ae.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 25 Dec 2022 14:04:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 61375\r\ndate: Tue, 12 Aug 2025 11:57:02 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":562942,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"11c2fedc258a33a78dbd89d85bda9562","sha1":"66a93f44841b6666b748340f9580486b096c3fe7","sha256":"ea0eed3ac657f69fab9be7ec82e84e54e8e26a1e6dd47b242600551766030d2f","sha512":"c8eb6b57f05d2f53611be51ba6b8f6f7e76b7ccd2daea114278ad630557289eb04a2ad8466ec3f50cc3e6ea305bd1d182a749635aa9204c5789937c6b42b9d4d","ssdeep":"3072:COwKc079R9LLRsz+lDhXD73KXofOEFEg+3O7SONZvVG1EBJvNajIwVtp6xHYTc0w:nwKc07n5g6jHk2b","tlshash":"c0c482681a07374eb31b97d8afb426d19e15047eef6b42febc9a5448c3dc86025f11b8","first_seen":"2023-04-15T05:54:03Z","last_seen":"2026-07-17T05:53:24.008745Z","times_seen":881,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/css/toastr.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /css/toastr.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2936\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6988,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (821), with CRLF line terminators","md5":"6f3bc1fed2acd85204fa04c82b6c872d","sha1":"ee57a6e6fd2ee673e0f14d4647f92d4e8d1eab0b","sha256":"bf3687811bb3e963a9fabd3d280d0c7f670257b151be140936dfc6c6cefa00dc","sha512":"623490a79cf3e7004d3cf62b79ccf45d90aeaa5adf613118982dca9bb64726b20c8fa3ddcf00d4b4e955cf82124c7b5165728202f548ff6f0323f2f9884d20c7","ssdeep":"96:N6mQU2sp5h7UkfnqHyweI2AJV5bUbLcTWQ78GhJZCjt+TWP+zLmlDUTWKG8Czym7:NBQU2C4yweItJVdQLY8sybttjGZVM/","tlshash":"bde1b539c7407608aaf20669b71a5607ef2a6053db9c5d6a7d9f916cf387b908c30e84","first_seen":"2023-04-15T05:54:03Z","last_seen":"2026-07-17T18:55:23.039338Z","times_seen":974,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/logo.png","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 18 Mar 2025 05:58:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 266263\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"696b7711708bb3bdd2d050c854bc987f","sha1":"ddf55bae0f024bbbf195c8391f4a89fe36e28255","sha256":"dbc233196604bd48b6d23ecb67c12bb5c312324ca8c9596a97fdaeb5fee09771","sha512":"37a7b24fb6ef0c34a3a3724ae5b771cea77d4bdf210f113ff4c9934dc42aafec826e2d0746850907f3f52e40fadcdf400bff272763e065bc45e9f5903e06afdb","ssdeep":"6144:4zrfOtTCO/9+EAA9sSCUOSQmK25vlVMy7ZSzMuEjhKT:4zbOd7/9z9sSCt+X5vleyNiEjUT","tlshash":"bf442324efaa4992949f43a642440f1cc6d82799ef8cda4dcc0866b47c4b737e718bdc","first_seen":"2025-03-18T23:07:37.647622Z","last_seen":"2025-08-12T11:57:35.266457Z","times_seen":6,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":455,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/jquery.bxslider.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:04.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/jquery.bxslider.min.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4928\r\ndate: Tue, 12 Aug 2025 11:57:04 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19368,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19040), with CRLF line terminators","md5":"7658757f3908f59389898e30f4de4067","sha1":"f8f94befddf4def914df3fae70d106fc525819a0","sha256":"7bc204a8009323811c2888323b9626d4417b02358aab7fdfabdcf0153385c621","sha512":"2e06fceb4237f3e3e73bbbf2faa5f6df0c63797ed7dd4587adc441b4b3ab96f3723cbbe42cab82ff897029be166ff345062f1ba270a7a4bfcfcd265143f7b48a","ssdeep":"192:YLGoLN83BRKmfL+ClFVPDhjfHGTgiD3VARMWvdO34AgEJrv/T16OsQon05rzIH0Y:YnZ8WjOVRXy16/kXIHHSHruwc","tlshash":"9692541b713436fe46b632b5b299cf487276908ac537f8f86175d85819e8cc4301badb","first_seen":"2023-03-07T01:40:02Z","last_seen":"2026-07-22T10:43:55.231488Z","times_seen":2717,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/css/filterizer.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /css/filterizer.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 296\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":795,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0c77b2adffa1884df02e4f956f01b470","sha1":"bf192c93ba2e0ceefd02f6f072483e2be62438d8","sha256":"89d3e611d3c764ff08d2510c4943c9e91e52edfcf78f28caade28821301831a1","sha512":"bee37e12bf385999274ba8738e28c4633752d3b0a2fac2cee145845e385e8ce9309f10e530643c407b88fee2d2f9a8ac692aa800089176bdf749923feec89664","ssdeep":"","tlshash":"fd01fd49ca821a01b23aa5bdeba18b44d3585083cc11876cb78d61806fb70d1f1eaec8","first_seen":"2023-04-15T05:54:03Z","last_seen":"2026-07-17T05:53:24.013255Z","times_seen":900,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/bg-3.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/bg-3.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/color/default.css\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 117544\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117544,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, components 3","md5":"d706c5bf6e1f46d37f538863b2a18825","sha1":"0a043a00e318b7b500c86a7b272eeb9e140ef4ed","sha256":"ee8d71964c7c269d013737fbe04e23839cece9814c39c00e4ca396b9d4758125","sha512":"a56efb2803d27ca2e59556b1fb1ca00a214765f27c1d36dcd06090b8ca20534f577468ec80f067a4e36b801c7edbdff574393185435bfa48047624c62f8b2445","ssdeep":"3072:9kAHDISok/Qow7iBR9pBtTf01HWVIcpRPOAj51vkj:XHE1j7off0tWVIoUAP+","tlshash":"d2b312d53a0d08bf89fc7ab68ea016ce1fcbd4d895b135526c5893fd2424df6a0b1415","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.933251Z","times_seen":1019,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:06.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 02:19:59 GMT","end":"Sat, 11 Oct 2025 03:19:41 GMT"},"fingerprint":{"sha1":"F6:B2:D4:07:34:AA:36:B0:31:B4:46:F7:C0:F1:42:C1:22:C7:52:88","sha256":"3B:B7:7C:41:B1:9A:61:31:E5:4D:BE:EE:8A:62:A0:B7:7C:C0:A9:78:00:77:1E:13:EC:1C:EF:7C:5C:FF:D5:2A"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ahcu.online/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 173\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 400 Bad Request\r\ndate: Tue, 12 Aug 2025 11:57:06 GMT\r\ncontent-type: application/json\r\ncontent-length: 64\r\nx-content-type-options: nosniff\r\ncf-ray: 96dfcb116d485696-OSL\r\nx-served-by: visitor-application-preemptive-k2dg\r\naccess-control-allow-origin: https://ahcu.online\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c47b08e2837e768f93dcc6ae85c8d329","sha1":"3de2151841c3ec9591d2d7be6be800ec23367cfa","sha256":"fe384d6150fae0d1a52854c9a928969917ca8f715d6eb6045506292d0d017b39","sha512":"8bc5d931a6c2118d2d24d7fd288b7145825091f761d8e495496f7cbfa282c0e97c2969f29b2d2cdfe42882b62a558f1debf6273a9e6e81cdfff54f8589dbe8eb","ssdeep":"","tlshash":"87a0023513dc7ddf5b834401fc28f5101799e1c178982c634a0c6e56624366edd11519","first_seen":"2023-04-05T10:29:08Z","last_seen":"2026-07-22T19:40:35.154434Z","times_seen":7514,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":178,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/etc/clientlib-all.min.2f2dbb3959c1dcdb1f3b1f52f1375b62.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /etc/clientlib-all.min.2f2dbb3959c1dcdb1f3b1f52f1375b62.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:04:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 193477\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":723763,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1421), with CRLF line terminators","md5":"7d95abe64f17c7a573ff60dd644a1e43","sha1":"ff29e996be8195af48eeef617b5c6a20c77dafc1","sha256":"ca9fb3233fb99405b67fb2770c2b1860f03db4275c790dcd181e58ce5f60288f","sha512":"9dd7c6695771eae49da9b6f588e3908fb80ee07b088ca388a60e52287d6b0434fca7e4c21f71618d932e4cc8de559a6eab502c3dda12bb2794b12fd585299cdd","ssdeep":"6144:qE+1ODHKVVGY11RWBZkoVIY/qjHR8sVbSmBxqMx6iDTiHkp:hRByoPq/qvop","tlshash":"eff44a8d7290717242a76074605f160bba3aa529b51a805cf57cc4fa3eb8c6473bbf7c","first_seen":"2023-03-09T11:05:47Z","last_seen":"2026-07-17T05:53:23.941706Z","times_seen":708,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/61/14/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:09.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /maps-api-v3/api/js/61/14/util.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73045\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 21:01:30 GMT\r\nexpires: Fri, 07 Aug 2026 21:01:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 07 Aug 2025 18:01:09 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 399339\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":319784,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (524)","md5":"2319a0f5abe4cbde80aaf37f03719982","sha1":"947466d155f46c8999aaf1c5d700c146d0f546b6","sha256":"bcde6e9f5fca2d4babd2e376269df8b0cb1c5f94b3ba34facb3ec9fb2fc9fa91","sha512":"01436ac2162d33dbd0b54a317eb768fd534fb2144df77e8388c13104f7c585e24b31a2a05fe20e69fc93eb18a4f6b69ee64605d5969a0944531cac383e197ff9","ssdeep":"6144:i85U3/Dwh3Mydt6aUPYl6c/1pGcram04w+SmgNgYCsGsRtW3gG5Q:i85U3/Dwh3Myz6aUPYl6c/1pJram04wz","tlshash":"5464c62c71326f4ea833c857c266310e90356edbf964c8bdffe65554eaa5944f0e0a38","first_seen":"2025-08-07T21:33:16.987149Z","last_seen":"2026-05-15T12:31:33.565051Z","times_seen":8889,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/style.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 25 Dec 2022 14:35:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14140\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84041,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (491), with CRLF line terminators","md5":"fcf426749bd07bd4b9b88b8be6db4227","sha1":"784602ddff7495751451d8da084ba2f7846f023b","sha256":"e5d28bf30cab761480d3b82576bf80e0066ba6e677ada2ec81287fd33935d78b","sha512":"d92be8c0c3444d36f3d2a0cf8d68c493c3b6d644d4f0d114c77635d0232983e8fa9779401b53313db86a3cdbb3b4d97155cc3c89b51fbe27131192bcc4ef5c7b","ssdeep":"768:iQ0VgsxOChwVc3zMx7G4bIaDVoG4EK9JzCilrV/Do4DRDsjJznO9zCxkGs:ilIc3zMx7G4bObn9","tlshash":"3083a5acef1020487236dea6a7f15b94df1c00939b0680fabf9422548fe6158557efed","first_seen":"2025-03-18T23:07:37.64586Z","last_seen":"2026-04-05T05:35:11.962169Z","times_seen":20,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/bl-840.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/bl-840.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 145862\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145862,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2018:09:06 12:53:01], progressive, precision 8, 812x540, components 3","md5":"7312b8b13b3be58c8118fadb3f15c8a8","sha1":"24fed7013a2d3459d8641f6231651c63ab49589d","sha256":"c4249eb98c7fa39a43bb8cd1026497cda3112e9e320dfc001e508f47cb025b88","sha512":"0c93b00f23b19940197944cd646559587115f09a31706beac7316341b593e0ce2743c288790a2d4c63b0bab3f2fa2f3b8425a4ce87f3b8c85a6dcd200d13794b","ssdeep":"3072:zO3uwndzRIbhE5TozSbSr5JGD366HK9+TQlxpjAf1nbTb3q:zO3uQyYToqXHK9+QDWfxW","tlshash":"f2e3127c5585fe52dadd5379daf0d385a32a684844e3a9cefa1d36063b30be208763c1","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.884302Z","times_seen":1036,"resource_available":false,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":429,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-07-22T19:30:55.93749Z","times_seen":52195,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:05.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=hMA/d=0/rs=AN8SPfoSvcbOnFdaxQP_x8te6jzGQof28w/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 06 Aug 2025 21:30:45 GMT\r\nexpires: Thu, 06 Aug 2026 21:30:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 483980\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-07-22T20:56:08.412733Z","times_seen":69510,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:05.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 02:19:59 GMT","end":"Sat, 11 Oct 2025 03:19:41 GMT"},"fingerprint":{"sha1":"F6:B2:D4:07:34:AA:36:B0:31:B4:46:F7:C0:F1:42:C1:22:C7:52:88","sha256":"3B:B7:7C:41:B1:9A:61:31:E5:4D:BE:EE:8A:62:A0:B7:7C:C0:A9:78:00:77:1E:13:EC:1C:EF:7C:5C:FF:D5:2A"}}},"request":{"raw":"GET /_s/v4/app/6899416770a/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 11:57:05 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96dfcb0ae8d756bd-OSL\r\nlast-modified: Mon, 11 Aug 2025 01:04:18 GMT\r\netag: W/\"6fa10dcf4f10ed95d30a3289b13b3119\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238742,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"6fa10dcf4f10ed95d30a3289b13b3119","sha1":"ff78f21c79f2cbe995a68000111bc5656f8f7806","sha256":"2268be37d2658e7f4e87482d961da148ca5a98d769ac11b5b6236d5727caa824","sha512":"f1e29026acee679018c9e346c76979fcdacb0eee230d5c58231134b2ce4ce683d48f87ed6d8a0af63a5c41aba15c3800c921f32b60f601396d61b8e939220d02","ssdeep":"3072:mepYBWYqWzhT9d9WFW1WL+fMAfOkq1rQYaM5dLMz9ew/S:69WFW1WCfMAfoJtLMz9t/S","tlshash":"8634c69df186b43606a37134501f320af23a685ab44ac4d8f636d8e1bd799ce6133f79","first_seen":"2025-08-11T01:37:30.148174Z","last_seen":"2025-08-26T02:22:34.746583Z","times_seen":421,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/color/default.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /color/default.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Mar 2025 06:30:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1931\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10551,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"951d1c594dbad2c5010fa6772d079462","sha1":"4ee0fefe45d1303eff512603b2da014d1e35d0e9","sha256":"fe57a7a45a0471f4e5f6319ad23d07f42f4e04ce955a3e29e050e267308c1a0b","sha512":"7e5b82727408571a2ad96f6b9a707b6e3a01a664823aacd0635ab276e65b4a6cc5f22a38c0c019b63aae3d2541e0126d3f10c65ed2add28e9648827bdd7cddcb","ssdeep":"96:ynugA+TcVHJ9twPLbzuLnk45xhXhMISqLOyVLrCUZyL:c1A+Tcz9tw7kk45RSqiysUZg","tlshash":"3b223f54b6d23ccf382b40b4267ab6d08b1c8a2bc00d5ebdbabe71b66b450c491727d5","first_seen":"2025-03-18T23:07:37.646828Z","last_seen":"2025-08-17T04:55:51.525068Z","times_seen":12,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/jquery.filterizr.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/jquery.filterizr.min.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3628\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12034,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12034), with no line terminators","md5":"5eb0077b399d38f31eef66c00d150980","sha1":"014c05a2ca80b0066631dc8e48267ddb4bbfc057","sha256":"03c9a5d09cf0714352a12a9233626ec69367822b520550955bd7bab074f11a09","sha512":"36346854877cc315f5a877c6d6c96c4794aee79630235b4e7d9514c0c801e418733ae44d9e3157d835d1fe0e3f0579002c58bfaf89ad8fde76016486eb811e62","ssdeep":"192:Xbyvfee/oYBk809WkIV5xZ1n2Uj/0lmuSFO6MM7pvZ/wIR:Xbyfo0QWkYz/4mZFVj7pvtR","tlshash":"4d42b801bad1332bd19b37b0f1eb594d713bbab5590508c0736d8dd2da66a88c2a7e1c","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.919884Z","times_seen":1118,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 08 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 08 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 359034\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-22T21:25:22.04023Z","times_seen":941251,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":52,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/Website-Images-b2b-pricing.png","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/Website-Images-b2b-pricing.png HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 627337\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627337,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 750, 8-bit/color RGBA, non-interlaced","md5":"ae5003acb11af5c63737031dcbb87b42","sha1":"583edfc63217e8f455cb21846d51c0c5dc44142b","sha256":"3d89e9dcbe7d14a4f20701ffb8757665204f6d7b9b42e63f1adf039d8dc09f8f","sha512":"ec11b1ace1b290f985e3ff5faf4a9397e79341cad5154c6e91567e3a0f88cdea87faf09d707adbff0d892c24ab1c5d361b723f0f1eccd50da4eac18620fc6625","ssdeep":"12288:a/CPMkQkyeEFlsrDl07y9wg/Wn+m9PIOG7/Y4uKZnIOQLo0hEaPu:a/CPMkQkREFlsrhoyextKO2YEIOQU0hy","tlshash":"8fd42339e8f11f17cd7a9691760a0e2819373d34696b0dd0e3035b459e50a1f8aafef2","first_seen":"2025-04-01T12:00:10.335228Z","last_seen":"2026-05-24T22:21:50.555384Z","times_seen":21,"resource_available":false,"data":null}},"time_used":957,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":478,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/etc/clientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /etc/clientlib.min.b3ec3a2325eaa4cbc74a2e2f0b755b0f.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:04:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11521\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38468,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (873), with CRLF line terminators","md5":"af2968fceb7f237e56363e001bbf407f","sha1":"245b56bf8b91af47031b8f1141c59979429dc039","sha256":"d43a868701070b5ce6966b7000acb506c8b519635e284b4f824e26b63b2b444a","sha512":"164a999a2845a625ce786a748e6912be0f562c66ba086a3457eab49345021196d738af2708fab2f2920273272f9951dc7ced23c9d5495c2cd9e78abb6f401f14","ssdeep":"768:kXBKgsCOnCU4FFW57mLM6APBHuKrSZYEg58ijcIoY5ReTYy/g:IKjnCU4FFW56LvaQKdzGbxg","tlshash":"3303f89cf690b85592632074e02f0b0d773b5baa6568809eb4cddcd43c758ad3467fb8","first_seen":"2023-03-07T12:23:45Z","last_seen":"2026-07-17T05:53:23.93253Z","times_seen":903,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 08 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 08 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 359034\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-22T21:25:22.04023Z","times_seen":941251,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":129,"dns":22,"connect":15,"send":0,"wait":15,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/b1.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/b1.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 189056\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":189056,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x780, components 3","md5":"cbd553b06d5a137ae68f02834f966054","sha1":"9db3ad8ad02581667148d0bdd8553708699fe2b5","sha256":"147407b6a128637d1d5b166422b3b8ed2965f727996050101da0e1278c9a7fbe","sha512":"7953205f2ebd67f38b91f052dffb27b9ccc241474a1a9b39a9dc77d9195135cb3180f464a908fab55ee465fb6b5cff6705bb586194da9e6825208202ad59679a","ssdeep":"3072:h31E4m0bfj2Sfxuzkf6cCZ36JFx7Lpyx7w1vbcENVAhUuwRQN++Oa53hMHgIofyY:x1917ySf5oGFxsSbc+VnQgay3KahZ1s","tlshash":"e9041221f008a52cf631c93d8ec7c7f561096952fe95f7972bdd351bb3daa0480aa68c","first_seen":"2025-04-01T12:00:10.354599Z","last_seen":"2026-05-26T06:58:52.917894Z","times_seen":19,"resource_available":false,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":440,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/bootstrap.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13372\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50682,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (50395), with CRLF line terminators","md5":"95697eefe013ce1a1e69c14105d09696","sha1":"7fcbfe254ff0b171b13c21c7a86d4db5a32fa676","sha256":"44a7e1e6e7f4f6ad49f162ce33dfd72f05d3162e150415b7ac9cefba8d51acc1","sha512":"991986b8dae98c7b0afdfc82a09563fc3af5292430fef5cb25e3427896d4c12a7a1b1be4a9c24a0213f81f5a3d2245edf09221a9b9b5fedad9c3b7979605b377","ssdeep":"768:5DYbgh0GBxTHVmcmjWSLsynS/zZ/AcyUenY8yiKKdHPPm26Ro1FH4nx4PV:5Djh02Lh+SbZ/AbYqdm2mx4t","tlshash":"3233b94a725478a201df9466513f450bb73b389eaa0b816cf95d98ed1e7cd88312bf3c","first_seen":"2023-03-07T01:06:24Z","last_seen":"2026-07-22T09:31:49.247457Z","times_seen":1213,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-07-22T19:30:55.93749Z","times_seen":52195,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/inc/lightbox/css/jquery.fancybox.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /inc/lightbox/css/jquery.fancybox.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 25 Dec 2022 14:05:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1295\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5278,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f7cc36f690e370ee8b85cbd5d1862d59","sha1":"64f621553581eaaf5d56341ff138f9bcba6de562","sha256":"8f29da77daf2aa97c4c482e0f5ae474154f6494e92bca50c8424815af2989883","sha512":"6b184cc9b60826ba94e336e32d9e98c849e73e43f1112e2f3626a9a29d0236dd27e04627d63aeeefa66de0603921f552f43bac6dd6060f6a885dae953c6a7ea9","ssdeep":"96:hZ3GTlOuNurbCJNn5UPZXia2sOTBclSpUqSnvmLz0zO2brwa82mwV5Gj0:hWJN5kp2sEBaA7SI0zbrDmwn","tlshash":"1cb1a89faa51300a643b9f55a77f5a56ce710426b60201bfb1ecf12193e47f670b24dc","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.930389Z","times_seen":685,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/couple-hiking-840.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/couple-hiking-840.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 93653\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93653,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2018:09:06 12:55:13], progressive, precision 8, 601x400, components 3","md5":"fbd399a4fb4cfd05b5786d8608651760","sha1":"332d3ad7975e78c48eeef929609adc63b0170aed","sha256":"96927945a2f7fdcddc4ba1b97e5ee55ade5d16b05ce5a56123321cf47c62bb46","sha512":"99b3c02916506babac6e0d99040cd77e0be96a03a597540452b02ca40b2b5303c02396bee61bb7edeefa4a7b3a21b7bd6c717043631243cffddb402fed322b4d","ssdeep":"1536:fDMpYBO8eXfplpD6BUQRJlBNx5xC1mto0jt9gxWXIp1s/KOBb8w4B+dlMXJ07lX/:fQpsxeX3daLlrxByOAxX6BbGkfMX675/","tlshash":"6d9302546a102c92e2d5463a1019e383913eff5f6553ba74b1bdbc223b7b6978d8c00e","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:24.014985Z","times_seen":1035,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":347,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40572\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 09 Aug 2025 08:11:51 GMT\r\nexpires: Sun, 09 Aug 2026 08:11:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 272712\r\nlast-modified: Thu, 29 May 2025 23:35:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40572,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40572, version 1.0","md5":"c127ab3cd3cd07eb1105370e70d67d76","sha1":"82677e46b52b8d93d5f34c9bbef71032d1cfee3c","sha256":"d758e85352971dffe51a5992405eb8f9b316b1bed82495445c328699ee400830","sha512":"a1fcbe9ac0f9aef7c40681f781a068450953e5cce43070a968b090f9cbd5902bf922e4bce422cb7ceb41c0641f2dd3ecb578d98f4b2852a9f41e9e296a76796e","ssdeep":"768:D0ueU3Qk/Vm6R/b2xzvCaMAqrnKE04AmmeFJlUPbksYiy3EGJIVoGnnq:D0s3QkNm6z6vkrnKEBAmLfUodjJIVRq","tlshash":"c803f1e09e226abcf137c171ac74cc2c94e2606bfa1b393d61316403ebd80f7e1a5956","first_seen":"2025-01-09T19:55:13.017129Z","last_seen":"2026-07-22T15:59:37.748638Z","times_seen":10001,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":46,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:04.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Tue, 12 Aug 2025 11:57:04 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 23\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://ahcu.online\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a80554c91d9fca8acb82f023de02f11","sha1":"5f36b2ea290645ee34d943220a14b54ee5ea5be5","sha256":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","sha512":"ca4b6defb8adcc010050bc8b1bb8f8092c4928b8a0fba32146abcfb256e4d91672f88ca2cdf6210e754e5b8ac5e23fb023806ccd749ac8b701f79a691f03c87a","ssdeep":"","tlshash":"c7200000000000000000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-07-22T21:25:50.621902Z","times_seen":425474,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:14.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ahcu.online/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1163\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"clearcut-frontend-http-prod-hiqos\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos\"}]}\r\ncontent-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos\r\naccess-control-allow-origin: https://ahcu.online\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Tue, 12 Aug 2025 11:57:14 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-07-22T21:30:17.572077Z","times_seen":579582,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/css/sweetalert.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /css/sweetalert.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3492\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23811,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9b8007e29ad2778d449264166a7892b7","sha1":"47418efe84958fcf4a945cbf6c2f54d29967e79b","sha256":"4513f34c44831aab38d5171e7d729e3fabeea39dfc7ffd06722b490d02f20a70","sha512":"419c96b2e49a1118bc6c519bb6c7dd6e2102dcd7c843fca19e390c42e2e7639ccf67b5fecd5f9866fd0153191135412dbf8a357ff5184ea0236efc771a985bab","ssdeep":"384:it3WuGFDc/KqTkzBfGyUkxOi/twFXiBMxa:itnpkxOotwFyBMxa","tlshash":"fdb2256b5d401284a3374735d3de8e18fe3840735a031dad77cd61aa8fb1e5c219afaa","first_seen":"2023-04-15T05:54:03Z","last_seen":"2026-07-17T05:53:23.931186Z","times_seen":871,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/cdn.weglot.com/weglot.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /cdn.weglot.com/weglot.min.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16944\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48484,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48054), with no line terminators","md5":"4f2efd52c68e5a56f2317f9b5ed22704","sha1":"25bfc4447fe2cd7da24f94195b8ac0ea0c5f067c","sha256":"9d88bb54b2b3656afa6dcb8edca86757929e05d3faabe5c0c08a474750615ab9","sha512":"45a341f2fc77c892af44ac9ac291e12b7b549feefcd39ef9e753624d1166199c49618afceb0047df2c52a37f8fec955fdcf45d08e4163e860ed008b839c3fd23","ssdeep":"768:hGvgyNqiZCkmg1nDOR+R84lj3WqfFlMFe81r18ll3RpGYKLdHAscncIVMsDlAKRO:hG4yNZZegtR537rs8rcHAscsKR43CGRB","tlshash":"b3231ae9f196b1332bd7207551af6406f1396c96280ec860d722d8d66cbce8c41bbf5e","first_seen":"2023-03-07T12:23:45Z","last_seen":"2026-07-17T05:53:24.009933Z","times_seen":627,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/blog-4.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/blog-4.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 50781\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50781,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 570x370, components 3","md5":"355e149413ab293e1f8e76f1aab4559d","sha1":"22acb164f38ae80fd8cd5d5984f9b4dadb6f11b2","sha256":"82871af3cb7d32d68779917061f60538324f8262dd1a706448fccea0cf229386","sha512":"c32afca59896b588b92a5158e7ea560e574332b5de46e312ec3e2274c648e409e90760cb1b0505f0d0e96b8dc84f3106212d5f6b30354f2b3f35bf5bc143f536","ssdeep":"768:/8N6BuKz9w48wFc+bc2ha/wpyXK68NlZU0X93gCDH/QEvz8YdLWozBDmcpCZeTdG:5BlzSj+bcB/wOgNjx9g2/PzTrtDhov","tlshash":"953302032812857671b2c42526edb368bddd4d47a6dbfbc7bb1d5b8823002c36ab47d9","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.925735Z","times_seen":1034,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":329,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/fonts/icomoon87f487f487f487f4.ttf","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /fonts/icomoon87f487f487f487f4.ttf HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/site.min.css\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sun, 25 Dec 2022 14:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28379\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52948,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"c0f9a8825c938a3f34c3699831427236","sha1":"265e5236fd5361bc3b80cb169020caf619397680","sha256":"93a180d6de5a94708086d7ceddd1dc5fc2795e503a9c2528e6f0a87fe59a6278","sha512":"33dc561ebd8ba2ca5dada42da37e26e011782af326390ad64c8b90f84f03fb781bfe7872342776c30950af518a39345c98c621fdcfe13047193f8799c9264eef","ssdeep":"1536:UWx2HrnGGkFTx6ggBiKyE3T8+NEDljID/nkNjQf3D8HGa8LEZC+exY3Y7EPm+O9I:UWx2HrnGGkF96ggYdE3g+NEDljIDv4jJ","tlshash":"42335b2be7838f6fc5256ab60e6592711ed2d730c32eb29a96ce0dd2d045ce80d742dd","first_seen":"2023-04-15T05:54:03Z","last_seen":"2026-07-17T05:53:23.945671Z","times_seen":1028,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:05.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 02:19:59 GMT","end":"Sat, 11 Oct 2025 03:19:41 GMT"},"fingerprint":{"sha1":"F6:B2:D4:07:34:AA:36:B0:31:B4:46:F7:C0:F1:42:C1:22:C7:52:88","sha256":"3B:B7:7C:41:B1:9A:61:31:E5:4D:BE:EE:8A:62:A0:B7:7C:C0:A9:78:00:77:1E:13:EC:1C:EF:7C:5C:FF:D5:2A"}}},"request":{"raw":"GET /_s/v4/app/6899416770a/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ahcu.online/\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 11:57:06 GMT\r\ncontent-type: application/json\r\ncf-ray: 96dfcb0fd87656bd-OSL\r\nlast-modified: Mon, 11 Aug 2025 01:04:18 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-06-15T21:26:04.41843Z","times_seen":49917,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/css/customcss.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /css/customcss.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 89\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e74cc393f0eb1c928a61f4a905587645","sha1":"111baad88be18649c64139557f83fdb0053cc2dc","sha256":"3905954654fa396aa0b64496f1394d11e2f932fcf7a2aecfc70d3cf0f6c58a93","sha512":"3369abdf7c5176d6e55d45f6ca5b6502ceb07c89ad6dc3ddd4ece802b7d3db7125bfd14d88a193717d8108f18e6eda41adf529e9397b7ee40a2073215c41451e","ssdeep":"","tlshash":"85b012cad22211049a62224d9751016bc86800876c1a0010326553063f768188d01de5","first_seen":"2023-04-15T05:54:03Z","last_seen":"2026-07-17T05:53:23.907854Z","times_seen":727,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/blog-3.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/blog-3.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 52247\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52247,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 570x370, components 3","md5":"61f44c0098105b666ac8f32e1d8ef5a5","sha1":"8cd4db77562f8fca66e150399b115edfecd6b682","sha256":"6731970a99cfda11c4e5c76eb6eccdd0ac04286d953435180d1d17b458db7429","sha512":"88e21978cf472a845164732d337ac92c94f85a1c62c7b4008f141ed03bc44a8ee72b9d4ad5f065536118ce5f1d4f30aafdbbd75177f8460dd27426eba2798b8f","ssdeep":"1536:dJvsS1Z8MowTcXkt8zt1Jm8UfWJEhbqPaJ:deSfCwQUQ1JwRcq","tlshash":"e6330218d14d416923bf0d36237d1ab37ab667b122128863dcd7b9d0b0b549e609e8db","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.899197Z","times_seen":1034,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":328,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 08 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 08 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 359034\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-22T21:25:22.04023Z","times_seen":941251,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":126,"dns":0,"connect":0,"send":0,"wait":36,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/63aea7b4c2f1ac1e202ad814/1glh3u6j9","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:04.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 02:19:59 GMT","end":"Sat, 11 Oct 2025 03:19:41 GMT"},"fingerprint":{"sha1":"F6:B2:D4:07:34:AA:36:B0:31:B4:46:F7:C0:F1:42:C1:22:C7:52:88","sha256":"3B:B7:7C:41:B1:9A:61:31:E5:4D:BE:EE:8A:62:A0:B7:7C:C0:A9:78:00:77:1E:13:EC:1C:EF:7C:5C:FF:D5:2A"}}},"request":{"raw":"GET /63aea7b4c2f1ac1e202ad814/1glh3u6j9 HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 11:57:04 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: 96dfcb072b6556bd-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6899416770a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"12491e3ef850aa9796503cbf41dc0b6b","sha1":"9731b657712bc14bbc9dedcf1828df146c9a562d","sha256":"d630835223c02a0f8dcac42a20f254e7e5bed4d40fe93c4b45cb7d61edcd017c","sha512":"df03f73c6a9ba7910be0a308ff86289b1442883dfd6874d758da2f6ec18319a039b66d604daf7e969b61f746fd31818ddceda9a22548e7c6ba558e58a6966b72","ssdeep":"","tlshash":"684120da7b8f5863a33710d80caff90e307372e644e99982db0940407275aad2acdd28","first_seen":"2025-08-12T03:36:47.242224Z","last_seen":"2025-08-17T04:55:51.522886Z","times_seen":8,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":28,"dns":3,"connect":1,"send":0,"wait":490,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ou0c5oo_pW4.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfos9n4o7OqZMMHeaGTikhQ9yIYmaw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:04.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.ou0c5oo_pW4.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfos9n4o7OqZMMHeaGTikhQ9yIYmaw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 76789\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 11 Aug 2025 19:26:18 GMT\r\nexpires: Tue, 11 Aug 2026 19:26:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 07 Aug 2025 01:10:07 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 59446\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":222140,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2544)","md5":"350c5e2cd2d9677a96f4c2847fb11f58","sha1":"46f29b46270d52f1860be04b9a66c440cb2c04fd","sha256":"c52a1f82550c424bcc64bf4856385562e11debb40e36bca40ec7d0c4048ac1eb","sha512":"812889353fb79a6e09cc72e0c96115b666d8bf6a647cf293884fbdc398d43b16ae54f6b0e7926c6562f2d490cc762870a4e067ceb0c3c5393eef82f376c2720f","ssdeep":"3072:ZzFV9KRr8lAgEaVyLZMrJUeCqVPJJjN8aZxu/9rjDP+ae+rYm6u:JPAgEaJ3YUu","tlshash":"b524d8d9b39270669363f4a6917f000bb13b5869f9484dacb28de8e25ef48190177f7c","first_seen":"2025-08-11T19:49:47.511594Z","last_seen":"2026-02-24T05:09:45.783207Z","times_seen":1065,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/site.min.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /site.min.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 25 Dec 2022 14:04:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 50816\r\ndate: Tue, 12 Aug 2025 11:57:02 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":483640,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9b5736540fd546e3edb4db4d17d43331","sha1":"1cd4d649f323cc1e0c2c63b0b86d9ac3817beba2","sha256":"7b7a7018e347382945d9615acb9914c03b063ddd1735bb02ad4922fc19a7a123","sha512":"f58257b4b497e9dd4176119c161f1737789fed5dee40dddd4c74acf2501f5dac87323c5479f7712ceb2bd8469e9e2015e3834a16b21d4ae5456d19759312f625","ssdeep":"6144:B9pK4ORdemtQYnbDP3ToZNh26O4sC5piQUu2TsGOc0eaMVy8Q/uX53QjSiAFLBOs:xIiAFLBO6ab2aHU7Vu8","tlshash":"78a4a261b7a53079e137ce2af6c0398477347a1293570af6e62a164dc7c906b538fe0e","first_seen":"2023-11-16T10:10:27Z","last_seen":"2026-07-17T05:53:24.016237Z","times_seen":664,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/bootstrap-4-navbar.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/bootstrap-4-navbar.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 408\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"19692f564401574998529b3fc97e08ce","sha1":"1b790552a374ea3a7856ecd1fb147e695275ed8c","sha256":"00b8431e30ab00475d6c7050e50b9bc2538689894048107875e3416dbe8817b0","sha512":"e5a9039594d64b7e8859c92256c4990ccc4f6ada51fe4eaf2ec444e5128d3c6e95d442b1dfa2a4ed6d18561133b6940a4fa28bc018ccace87105e7936acc9522","ssdeep":"","tlshash":"eb218c8a66c6a47241fa2bb40e0fc809fea70817d2054364382f759d2ff402515c6f6c","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.987695Z","times_seen":1087,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/fonts/fontawesome-webfont3e6e3e6e3e6e3e6e.html","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /fonts/fontawesome-webfont3e6e3e6e3e6e3e6e.html HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/css/font-awesome.min.css\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sun, 25 Dec 2022 14:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"text/html","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 11534.4","md5":"8be1c8f32747c80cb7774b29ec81beef","sha1":"0240c2c024ff55c02a213159bc8937007babed30","sha256":"26611d99cced0a9dfbbc4f47818921a0ebe247d9d4eb2eccac697da36f89a0eb","sha512":"2bdfcbe54dd175b1cefec1d84b1839d7813b9a341fa3c7bbf1b311d98e2cff830f9d13e9e5302753e9eed2380b6d820857d658536c8555f5de01b63c4a351c2b","ssdeep":"3072:PWGmiOeFF7zjktPaEV2k07DURADtJXhlZePWJeyEKAuDSt:PWGmiOCQPK7DUevhHePye/4c","tlshash":"3db3f1068385f3e0d2fb89f994961ae4a3064b95dbc37990c724c3712dca21873efc96","first_seen":"2023-04-09T23:40:01Z","last_seen":"2026-07-22T11:10:47.150049Z","times_seen":2910,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/inc/lightbox/js/lightbox.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /inc/lightbox/js/lightbox.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 481\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1377,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"518c953f31f7299691a1621b803cbf44","sha1":"b26b64be947c86d14cbafc10de84149c462ed8bf","sha256":"b537a80c14d7d295dc304619d62df5605d71b93b9783cf9368a8df14e9ec5598","sha512":"ad7cb937e7d273f52ad98d2696d99b256bfc715d9bf961ee6b3f58fbb6e72c5f40128c33b7d50935770668f69d5eae152d366ae2c164437e6cf1e50b0255500e","ssdeep":"","tlshash":"3a21c155d3943a5b05f10a0aed3e79b4eb63266f0401ada9bb7d4f510fb03b47490d8b","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-17T05:53:23.959932Z","times_seen":1081,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:05.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 02:19:59 GMT","end":"Sat, 11 Oct 2025 03:19:41 GMT"},"fingerprint":{"sha1":"F6:B2:D4:07:34:AA:36:B0:31:B4:46:F7:C0:F1:42:C1:22:C7:52:88","sha256":"3B:B7:7C:41:B1:9A:61:31:E5:4D:BE:EE:8A:62:A0:B7:7C:C0:A9:78:00:77:1E:13:EC:1C:EF:7C:5C:FF:D5:2A"}}},"request":{"raw":"GET /_s/v4/app/6899416770a/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ahcu.online/\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 11:57:06 GMT\r\ncontent-type: application/json\r\ncf-ray: 96dfcb0fe87956bd-OSL\r\nlast-modified: Mon, 11 Aug 2025 01:04:18 GMT\r\netag: W/\"586d518585b166811a617b7f5060f71e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10639,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"586d518585b166811a617b7f5060f71e","sha1":"6ea81179776e5977ac49304b176923e61409393e","sha256":"2cc3a63ae0b79ab96b21a927c9f9a192ff287e877df5e54ee0b0dbe33debb900","sha512":"df7a3a88b5effe5f52c27897e20995a32973ae1b34aa260e42286833c68838afd61fcd0d4cc057ed5d8c941280e2e5167cdf394add607763363bdc96f4a099ac","ssdeep":"192:ImwHJ/LrnzPLEgVE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:sxLrnzXE1iN+xkDOy+Hp8/5Avy","tlshash":"18224369ce504ea702c29646399f35437624829b1f54382eb78891ac0f8ed6f71f77ce","first_seen":"2025-07-18T03:22:00.530906Z","last_seen":"2026-06-13T18:18:43.529078Z","times_seen":30250,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:03.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44192\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 08 Aug 2025 13:22:34 GMT\r\nexpires: Sat, 08 Aug 2026 13:22:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:37:38 GMT\r\ncontent-type: font/woff2\r\nage: 340469\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44192,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44192, version 1.0","md5":"1c278435b6738e80614efd67b0aa1d75","sha1":"553a407dccbf2e476e53a88b9bd5c625c48d8f99","sha256":"9ec9eb9108f1752c30ba316606858d685a112a609d8bef1fb3d5d32c8e0b6507","sha512":"7b05bc06e51a460927d557deb8deea554c692b6edd381ed2e1e98daebb026b3de471c56278114f48a31c075d2dea30200acee2f2a804246bdfde61be1487f9ee","ssdeep":"768:dji8cRMN2W5RiThDSklZ8iD/ZbANTt4V7NIPuezvbzstqP+l7rx4HDgcq:dteE2WriTsOhzVMfTEqPI7rxkDPq","tlshash":"d113e17ba74b08c0638388b867367bedf5e5c0218b5c5ef85221f481f20d759a6d92b7","first_seen":"2025-01-09T01:43:24.38206Z","last_seen":"2026-07-22T19:45:41.378186Z","times_seen":39319,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":59,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6899416770a/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:05.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 02:19:59 GMT","end":"Sat, 11 Oct 2025 03:19:41 GMT"},"fingerprint":{"sha1":"F6:B2:D4:07:34:AA:36:B0:31:B4:46:F7:C0:F1:42:C1:22:C7:52:88","sha256":"3B:B7:7C:41:B1:9A:61:31:E5:4D:BE:EE:8A:62:A0:B7:7C:C0:A9:78:00:77:1E:13:EC:1C:EF:7C:5C:FF:D5:2A"}}},"request":{"raw":"GET /_s/v4/app/6899416770a/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ahcu.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 11:57:05 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96dfcb0ae8dc56bd-OSL\r\nlast-modified: Mon, 11 Aug 2025 01:04:18 GMT\r\netag: W/\"ca06f64750b12e3beb7a4f99a8443ab6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"ca06f64750b12e3beb7a4f99a8443ab6","sha1":"5dd8d5c447b11152e9075253acf3f104b3d91ed2","sha256":"625b9f963281d5456630f7c18d9b8db6559d3d2f2c91f8c9f6e526e90718733c","sha512":"63a9d8205e40cb47574898eb4fe7d763db9ea363c9329fa6ad4f608782142fac92ca0635b9a5b32753d43388ff4a015df6baed8a0007216b1833beb5be4d6e92","ssdeep":"","tlshash":"fd4183d936e8f9b6434318a1043f9016f6352976097be5c0531dd4f5bc78889815afb6","first_seen":"2025-08-11T01:37:30.340388Z","last_seen":"2025-08-26T02:22:34.763464Z","times_seen":421,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/css/owl.carousel.min.css","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /css/owl.carousel.min.css HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 791\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2941,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2846), with CRLF line terminators","md5":"11f8f55299612003d16158106d01f2f0","sha1":"78bead4cb5ce15f16b6554065404a01df5f67325","sha256":"8608c63311f463ed5cb19febda4aaedc756eba9516c345375e5a7e56ec67a46e","sha512":"412103bd30a0424af55fc2c5c211d97f3a9df9291354c9484052a724946fd3931343a25471dd0238fb443f3cc940368e74b7d60fee939216473e6ab47f2fa4dd","ssdeep":"","tlshash":"8d51c0e5354b215f481fc32219d85e87293ecd52d8260a8a92bbd718479ae2d113ffcf","first_seen":"2023-03-12T20:17:16Z","last_seen":"2026-07-22T10:19:49.534965Z","times_seen":6920,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/owl.carousel.min.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/owl.carousel.min.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10657\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42772,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32000), with CRLF line terminators","md5":"56b28ad35f1816c6894b14190a0a006d","sha1":"967ceaa9e6f67e636d818f42b4d5d15c7a4a254e","sha256":"b5757aa153f991c82c949e638c56b4913042196240f3a41cec5a40c3366d1bdd","sha512":"78aa17ca7c163b0cbe846efcd2ebc78aa55b760b737faf5a837a6fd7971604a0829c6b4a35915a02ceffc6173408a67b06885d68013e21059d2c105fa1ad5569","ssdeep":"768:8BA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7YCORUQuFBt33:gAIMFFdYMxAcEQDV","tlshash":"01137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-07-21T21:36:01.360286Z","times_seen":7955,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/js/color-switcher.js","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /js/color-switcher.js HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 25 Dec 2022 14:05:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 593\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2384,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"07e0e829a35fa6e171ca38846cfcfde6","sha1":"c038677cc1072e2df4b2a1d8997bdfb41da44590","sha256":"45312d094380e813ad3ccef98fbce8734a737fd9b6c9a520b7b0c915a9f652df","sha512":"d0999f70593e960d1a9f54da8364c18888f360b7cd9db6e45929035dfc052425f416396f11f230f36f081a9eddd20ddda56b732ef4b1232b3e810af2acc462b5","ssdeep":"","tlshash":"a9415ba8d27226638577231c2b2be604ffa16873040cc74c3d7e8d981ff6d84a9a6e55","first_seen":"2023-03-07T12:23:45Z","last_seen":"2026-07-17T05:53:23.916122Z","times_seen":1060,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ahcu.online/images/Question-mark.jpg","fqdn":"ahcu.online","domain":"ahcu.online","tld":"online"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ahcu.online/","date":"2025-08-12T11:57:02.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ahcu.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 09:35:47 GMT","end":"Sun, 14 Sep 2025 09:35:46 GMT"},"fingerprint":{"sha1":"FB:6C:91:F9:7D:9A:32:4B:57:6B:45:EE:71:48:F7:FE:B6:48:96:0C","sha256":"46:76:FA:44:C5:F6:2E:46:B0:29:11:E4:44:E1:4E:95:27:3A:6E:B3:DF:CE:69:9D:A6:6F:04:FC:36:86:8B:4E"}}},"request":{"raw":"GET /images/Question-mark.jpg HTTP/1.1\r\nHost: ahcu.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ahcu.online/\r\nCookie: PHPSESSID=a83fb7fa8e5358d162b7f46069e9cd87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 11:57:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Jan 2024 03:24:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91165\r\ndate: Tue, 12 Aug 2025 11:57:03 GMT\r\nstrict-transport-security: max-age=16070400;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91165,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1774x2365, components 3","md5":"db34e90d64234eedf1530f4187547d80","sha1":"c0e222b7c416438d4a7c7eff68c70448aeae8300","sha256":"e6b1e3a4498fe376871c68a809d741fe3a828284b7a8715726770c7dee3562a5","sha512":"d885a9d3204e172ea0d183f644f45e6325037a0552aca4470288341bd18945f5c4c667f06b42600f9f2a660217de3255329a02e6626cacb7fb4a6a1ceed87563","ssdeep":"1536:vDDaY2iphnOvaCK1/JfKZU+BpElIOjsB7vlYNz5VFj2kRUMC6R:vlNOCtHqasVYz5XjR8w","tlshash":"e4930233bfbe46d3d88dd5f26a635a077b279066c3e2ec1eb328529876803117d6d640","first_seen":"2023-05-01T23:01:47Z","last_seen":"2026-07-17T05:53:23.970878Z","times_seen":1031,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":349,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ahcu.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}