{"report_id":"bb31cefc-ef4b-48b8-8084-509284cc2dbb","version":6,"status":"done","tags":[],"date":"2026-03-06T22:34:50Z","url":{"schema":"http","addr":"saveassetback.com","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":0,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"saveassetback.com/","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"title":"Wallet Recovery Services - Save Asset","dom":{"size":16965,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"dadcb919789d1fa3b69645c0d23b961a","sha1":"4585b85bf8fe00d8dd439e0a6678d08650ccb9b6","sha256":"d3981089e375926ea74bbe765d68f7c13201dac9395de330d583a52c95437f49","sha512":"23c58c627c7236160509a7f37886ef0ae4d027938f431dcc692ec5ef704fa1c43f93135a8b3cd2fbdd46a760e50b24c3fc31d49ee8c03418fe6fc1e8a957ba17","ssdeep":"384:YjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/V:YFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+q","tlshash":"34720e50041744009b835ce223ce7f30fe4e92517242d0b1abfd9b6beedbda6926939d","dom_hash":"domhash08ae0081c1574fe7e013785c60b9d7d5","first_seen":"2026-03-06T22:35:00.537431Z","last_seen":"2026-03-06T22:35:00.537431Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"saveassetback.com","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":0,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T22:34:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"saveassetback.com","ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"domain_registered":"2025-02-05","domain_rank":0,"first_seen":"2026-03-06T22:34:55.486622Z","last_seen":"2026-03-06T22:34:55.486622Z","alert_count":36,"request_count":36,"received_data":1906148,"sent_data":16536,"comment":"","tags":null,"fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"SweetAlert2:10","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:8.2.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-03-01T22:26:33.479606Z","alert_count":0,"request_count":4,"received_data":115649,"sent_data":2540,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-01T22:30:33.752681Z","alert_count":0,"request_count":7,"received_data":3627274,"sent_data":3350,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":1,"received_data":40962,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-01T22:32:56.293355Z","alert_count":0,"request_count":1,"received_data":74267,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"saveassetback.com/js/bootstrap.min.js","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a08792f518b51f0f1422b5c96df9eb8a","sha1":"3f094f010bfb0c022a51b62778d4361d1cad3fd6","sha256":"5c36e28c9a7bd864b673e223db7e1934923227536ffbdf871f58b6f09b9ac8c9","sha512":"6ba72d23ac35920dc9e1d4a39271e3dda58b11b8e2b405c08cb0d1531a36c326260c545ccf6449b90af93372adf0efd3b544a9f27dab032697632d6c8e82a6ad","ssdeep":"768:ts1v6byWwhC8Y/klELLhigGAl/4TVOhcZ5Il6/2Vm7MTwFxmnMq55wPpHOg9yPpC:ty2hL6q373y/iGp","tlshash":"de43a45a3258b87309de44a6c032470bf7255d94b547816cb9bdacee1b3dc8272b2f78","size":60089,"data":"","first_seen":"2023-03-07T12:03:09Z","last_seen":"2026-08-02T05:56:57.992396Z","times_seen":6477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"596c147c107dc2fbf2aef5c06558aa48","sha1":"a498fbebd7dac300e58c853e515bd958cf25d4c9","sha256":"eab0baaea8e6460d459707e0eaa28dc7818d67d56108519215b7f04133c266ca","sha512":"799b93e50c48b3e5f4325004b5d29e32f75ed0430a053ea36685d626f6c0caca2743bac18669b570c882b6f1c1eebefa1f5cdaa9098da0ac96360570796a220a","ssdeep":"384:VRxbhT+IMQwyOhpT4Yo0grgmVutXjfCpGytoEaIXnaeyhBDafzVO9/Fsr8:elyOhpcYo/xkRbC9toE3XaeyTDwVO99","tlshash":"47920898b2d2b0398172b1b0583f060ed7ba39546c0d289df259c1e47e34b9b442ff7a","size":19897,"data":"","first_seen":"2026-02-26T12:53:17.815844Z","last_seen":"2026-03-10T07:00:23.683368Z","times_seen":3307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-02T09:00:29.296484Z","times_seen":500835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ad7d928c53fbd3f01fa41a9c01ad3848","sha1":"1851ec195b9bfe82d460cef579107f6420b5b016","sha256":"f44e16f3f25d0e991d71deeeaa5845886d39752557d788b2bbb1b38e63e033cb","sha512":"6bfb497265cba4729ac370efc277fdcaafdb25c477504dad830052d2922ceb9d2a78265ac67cbde8e323fe5e8c21c9e8616e4f0d8e95b27eb4b72e1deb84ab92","ssdeep":"","tlshash":"66700008fc08200200a23022c2cb0008882a200028020020002288802c3808a0002808","size":22,"data":"","first_seen":"2026-02-26T12:53:17.796669Z","last_seen":"2026-03-10T07:00:23.686434Z","times_seen":3306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"73caa07ee24583614dc93dfe5471eee3","sha1":"c0c137c7d5706b970f509a1d165444a9789ac975","sha256":"6b1b7cccf77280b7f955df16a4b69ecc8b77a4d01656ea272ee9f05618834442","sha512":"e51b722f6a8b8902e9af45337c2e5f713a1a9f471066d679c8e488529e25f248528462d81024727d8b34dc28ce21df38839f315550a385502fe644ece2086d60","ssdeep":"6144:zmhH/030Tjm8BBzCIE6KheqxYd+XY0jGutbWDNJ78tVBHPNze6BTplnq4p4BamVE:Chs3wCgKhYQ8utW37yBHZ7AzO7elTk","tlshash":"de054bd9b08735b15332f9f510bb2019937d9523cc98892eb1a485f13fb494960bbebb","size":863067,"data":"","first_seen":"2026-03-04T20:02:51.116007Z","last_seen":"2026-06-17T17:10:58.858115Z","times_seen":10809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/js/masonry.pkgd.min.js","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"520e46df77727aaf3d5e799ef241be02","sha1":"d20252cf76c3be8af37a8415d13ad368c762b4d8","sha256":"367d6afdfc741fb48d2d9310e47c3924b693459a74c882c0fc545ec5ed7d55d2","sha512":"25195cbd26405d3f3ee5241002f9255c626ec574e8bb2abca0831a60445941ab01f120431d96946de012b095a9934514adff3d0cfdff69e7cf3eb94c475875c9","ssdeep":"384:cr7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:iSxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"46b2858f73007425428bf16696af020f7137655c7a4790acba6ad8db1cb984d2037fbd","size":24103,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-08-02T06:29:17.933603Z","times_seen":11134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d3b398246ac543d03fcafa5a3729ec60","sha1":"def5779854caea84cb0c9951160405879d08a199","sha256":"6fe8385ad725b2080c0250d3a1b2c89ef8fec359ed24c9f6c7f259d1baddf748","sha512":"f743e36bdbbbd2fdf305d0eda85cd779bc6788dd45ff86513587c586a6fef8a2f7876c07ee86b3a0204fc53dbd6c0a3d9419a49791486bcba89b237a5675ff52","ssdeep":"","tlshash":"71a0021a6d565505a42534779c0fd594c67710b42e120ec99292a498a7b044f200387b","size":64,"data":"","first_seen":"2026-02-26T12:53:17.81483Z","last_seen":"2026-03-10T07:00:23.682721Z","times_seen":3306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026bft=0dAFcWeA7FmJGakauNISENPjfpN-J9lB7i4D-Hoeol3WS4p3NvHuOy_2mUk2c_WCOjFp3oSEDKQF1AxXnCWw--qUMJn_FEFKRRdg","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-02T09:00:29.296484Z","times_seen":500835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/js/main.js","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc2f8475fa76d119143aeff697d66cc8","sha1":"80b1a209f4a5ff2087894974babf7896113ff099","sha256":"329cb8186eb26645fb374c4b2d4c4d2aa86c94840db66ee4984b7dd1ebfa9f91","sha512":"00c287e0817359214c2e57631efc1ef0fe950ba4e5abcfa3f20c6b9bb4bb8612f74200b413ff64b5b802e321c2f10bacdb19b66286a0ea022857cc8c6b606ee1","ssdeep":"96:m6Qhb4LaxupNupesc5K0MBo4iGF6ELmkxk0if:m6JexuLusJT4iQ6EDxkJ","tlshash":"4a91620969e50633563f60ac2d6fda472990f007cb0d9e00be4d92ac5ff9c2499ab7c7","size":4482,"data":"","first_seen":"2026-03-06T22:35:00.566351Z","last_seen":"2026-03-06T22:38:08.458475Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@10","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78f9abf2d03f7ee6a755e0178d41f2f8","sha1":"9368de7d2e8b0d335adbaab171143e307ed5fb54","sha256":"2d5fa531e30ac3debad673003128f1ca9ad3c964ef17b547377e7ed09bd4504f","sha512":"c138cdbcc824524cbd5cbfa8edf966acf66462916349a5d9539723c6f5f10f44357059cc28ddbb95d50d3e17710e9f533bebb658d82527d980804b8a3a31f9d1","ssdeep":"768:hrDTClRYf9tFz5XKuaJuZMpDaIi0oO3vYCRuB+MJ534ywu9uqkjwxRXCKVNTeccy:hbCzItFzdZIBj3AvB+MJ5ocC3WsRw9","tlshash":"ce630689b6403133aaab4174659be60db6b56515fc330c18f128d0d84ffbd8e6273bb9","size":73160,"data":"","first_seen":"2023-03-08T15:12:56Z","last_seen":"2026-08-02T07:29:28.196921Z","times_seen":2269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7324ca624eeff56103a166becb342d04","sha1":"73556dba67bf1956aa18b20ee9efae4a467bedc8","sha256":"b39ba0f04c36841c9dec14ed035e9a582e732b646b34cc20d948fc4cb1ad1270","sha512":"4dee908a0c0a35f1a8a8cee29b07f793c51918de3440a3b18e4b05afb8055209baa2165c236831e9e5cf21f6b68b7cc55b81fca405219b68e61a93de27364928","ssdeep":"1536:2hi1DT2+aAlJdFcalgLqgyhbXEMh6oGFuHB5MeDlYHZ:H5J3lCRmgl1FA8eDCHZ","tlshash":"1373cf27e7c370ebcfbe87411ee1bb9c127d654d6893198c1aef0186493dda263a518c","size":75418,"data":"","first_seen":"2026-03-06T22:35:00.584764Z","last_seen":"2026-03-06T22:35:00.584764Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4db295bf2baf52de726f9a423d0812e3","sha1":"e0dd2fa40fa9a545dba4255e1b06701dddd4decb","sha256":"225dda47399b9f3e851d4ccbb379a3c0c272ee220f6343c3599c6ab621e82019","sha512":"5dfce649aad9fbdbac5a48d3c7ca721134edfe2c4de6412bc54ccad4f309025edf5de9cfb09d9f3dc2715ca0d3e67a53da377d8772427b2b41e7f102ed736680","ssdeep":"","tlshash":"e470000cfc08200200a23022c20b00088822200028020c00002282800c3c08a000282a","size":22,"data":"","first_seen":"2026-02-26T12:53:17.812288Z","last_seen":"2026-03-10T07:00:23.674247Z","times_seen":3307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"73caa07ee24583614dc93dfe5471eee3","sha1":"c0c137c7d5706b970f509a1d165444a9789ac975","sha256":"6b1b7cccf77280b7f955df16a4b69ecc8b77a4d01656ea272ee9f05618834442","sha512":"e51b722f6a8b8902e9af45337c2e5f713a1a9f471066d679c8e488529e25f248528462d81024727d8b34dc28ce21df38839f315550a385502fe644ece2086d60","ssdeep":"6144:zmhH/030Tjm8BBzCIE6KheqxYd+XY0jGutbWDNJ78tVBHPNze6BTplnq4p4BamVE:Chs3wCgKhYQ8utW37yBHZ7AzO7elTk","tlshash":"de054bd9b08735b15332f9f510bb2019937d9523cc98892eb1a485f13fb494960bbebb","size":863067,"data":"","first_seen":"2026-03-04T20:02:51.116007Z","last_seen":"2026-06-17T17:10:58.858115Z","times_seen":10809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5fe23923b605a451a45a601d8d37146","sha1":"336ea5bdec2c086002f3a7d5d2728db934c768eb","sha256":"e241ad691849d91af7ab357ca7e57a86c207d8267b0bfeccd7fb1bd0ceca99f6","sha512":"7fecba6a917ec54527ab1ae7489b086d39d1ccff33994a54e986fd7e4d19fe0f86756d71f068e5d77781e15461c46feda0933e4ba938e016bf0943d5876966bf","ssdeep":"","tlshash":"ed111b772a04f0391b320de1a2facbb1e492701cf12844e8a512da881f2eccbce09589","size":1017,"data":"","first_seen":"2026-03-05T02:36:35.092433Z","last_seen":"2026-07-04T11:29:09.566617Z","times_seen":2156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ce375cd8ecb9ae184dcac9ee8737456a","sha1":"3f05d2294f79b0ae6e96ebc04cdf688c55bb3448","sha256":"61c54cdff2466e7974b1d176590af0d18dfc498332dccc3220fa4af0001b81ea","sha512":"d51edea6f122a72ef51130d17ce578de0c2d93d61e53de92432ad42910e016f8d1deecca31e4c91d380edf0037dd7607a4b77f4b83a535eecf5fe5290c140369","ssdeep":"384:JRxbhT+IMQkyOhpT4Yo0grgmVutXjfCpGytoEaWXnaeyhBDafzVO9/FsrY:6dyOhpcYo/xkRbC9toEzXaeyTDwVO95","tlshash":"9d92f798f2d2b0398172b1b0582f060ed77a7955ac0d189df299c1e53e34b9b442ff7a","size":19342,"data":"","first_seen":"2026-03-06T22:35:00.591341Z","last_seen":"2026-03-06T22:35:00.591341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"73caa07ee24583614dc93dfe5471eee3","sha1":"c0c137c7d5706b970f509a1d165444a9789ac975","sha256":"6b1b7cccf77280b7f955df16a4b69ecc8b77a4d01656ea272ee9f05618834442","sha512":"e51b722f6a8b8902e9af45337c2e5f713a1a9f471066d679c8e488529e25f248528462d81024727d8b34dc28ce21df38839f315550a385502fe644ece2086d60","ssdeep":"6144:zmhH/030Tjm8BBzCIE6KheqxYd+XY0jGutbWDNJ78tVBHPNze6BTplnq4p4BamVE:Chs3wCgKhYQ8utW37yBHZ7AzO7elTk","tlshash":"de054bd9b08735b15332f9f510bb2019937d9523cc98892eb1a485f13fb494960bbebb","size":863067,"data":"","first_seen":"2026-03-04T20:02:51.116007Z","last_seen":"2026-06-17T17:10:58.858115Z","times_seen":10809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026bft=0dAFcWeA7FmJGakauNISENPjfpN-J9lB7i4D-Hoeol3WS4p3NvHuOy_2mUk2c_WCOjFp3oSEDKQF1AxXnCWw--qUMJn_FEFKRRdg","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"90ab177cbdf850b8d2e3e12af9f0d0ac","sha1":"324af63f09e6d9756a14aa9aff76ced61cf91ec7","sha256":"495d5e9e99d542ffbcc008db2332a654c187feb57d9bd299acdfbce7f7c47cf1","sha512":"17b27bffb906eb945e81c75e85235b50d2fede877559172f6064fad22e5bfa36709133e038222b9c3cfa142c5afbb52b90d841e2c43843b2ac27982443745d6d","ssdeep":"","tlshash":"60d0a9b322029df28c28ac310925006aac898923a0228bf47acd3d41afa0d813a04a65","size":219,"data":"","first_seen":"2026-03-06T22:35:00.592496Z","last_seen":"2026-03-06T22:38:08.514889Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c83976131c42bb7c830e741b003cc716","sha1":"a5b28429bbcda9d897c00e0a2da9d47a073a8c17","sha256":"8d255bfff6c8a8c7299cb7501f0a2c5440bb0416490cbbe84f8999db3a9ec894","sha512":"3b8bd14a8c5e4b43f14663ff17f6c5b217e63f669d05b09d387ced1d42ed1192e704d0dd95e6edfa464be1079eb7a08ee89efc0f145768b49f0950436ab31d72","ssdeep":"","tlshash":"adf02b387db211b20bb3b0ff428f0b8afa2400632884da16bd0e0e010fa0f020cb01c3","size":576,"data":"","first_seen":"2026-03-06T22:35:00.593673Z","last_seen":"2026-03-06T22:38:08.516004Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1898296988b07dd0bb5c28c6ff0a29b9","sha1":"a860f65767cd395712966f59d5987ec5d02dc29c","sha256":"a79c8258147ba7191dd6c4ed4a7cf8b48736d87fec8d015f699a4addbebb763a","sha512":"eb219f0f979c81f7f6dc6e72e136655ff34f66d2c4314bfc854cdd79b3c519bc3ff4f6c495fa98afcb2f535d9b3b7bcf705d139a4b084052cac630703467a093","ssdeep":"","tlshash":"f131a98b05fa13b10b23e8280f5fc40a36213147dd54ee253f8c9ea81f9c52a24e17de","size":1453,"data":"","first_seen":"2026-03-06T22:35:00.594707Z","last_seen":"2026-03-06T22:38:08.517088Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-02T08:41:58.130794Z","times_seen":123250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"saveassetback.com/","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T22:34:27.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 11 Apr 2025 17:00:33 GMT\r\netag: \"8367-67f94ab1-967d4705e51869f9;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6933\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"SweetAlert2:10","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":33639,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (820)","md5":"e4e76e241aea1bb776cbd1e136ce8fd6","sha1":"6d695aae6c39844cb45d782af5fd45eb18201713","sha256":"1e4faacbbb6377d1745826b1292c5db93c0b664fd8c97f52ee26017061fb8459","sha512":"a7fe40bb9926b3fd48aaef26963cb6e5d551f8910842cdb777d4683c9cc91fc77b6337db721c7cbac70d4cf3ac447c202d35cf2fb42bb5da2629c69ad3895636","ssdeep":"384:EadcDGleaBOPtZ59ioVQxdChnCgTxnzMzl/NJK/Fz:EQc6bAZ59i8QuHTRzMp/jG","tlshash":"80e2952159f142b741a641d8ae7a9a1a7f82d103ea1b560577fc4bdc1fc3e87cc23a9c","first_seen":"2026-03-06T22:35:00.539988Z","last_seen":"2026-03-06T22:38:08.475244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":353,"dns":49,"connect":147,"send":0,"wait":149,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/h-back.png","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/h-back.png HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"bef8-67a4264a-a977d885b980752a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 48888\r\ndate: Fri, 06 Mar 2026 22:34:28 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48888,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 210, 8-bit colormap, non-interlaced","md5":"8595a7297b25d03ca8a33b186c966824","sha1":"9875e773c435226c27754cc8f6327302925277db","sha256":"13dd37ec70d4a07191b3cacf29936f170652c7e843050c1df0c3c85e9136e293","sha512":"ad631d2e24cad3818f54a08105b68a85fea03b8d9aac010151081a1d7d02baead4461db7b9b2695d60fda7d200fe16bb3d4ee15d760fd1cae60ffc64bf531e37","ssdeep":"768:yoKd/Ed2YxQsPs7xfbBAtwalzQ7PXad0K4CS0IAI5jCNqs+pyabGRxkI+HF5NT3Z:9eMd2Ks7ZqlcTXad0K4H0PR+oa6bkIeB","tlshash":"2023e0250dd5ea0bf1baf1661d5b9232c49d7b88078775cf4ad793da50c2ee0b04780a","first_seen":"2026-03-06T22:35:00.541473Z","last_seen":"2026-03-06T22:38:08.469758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/work-icon.svg","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/work-icon.svg HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"230-67a4264a-d19e272559337257;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 268\r\ndate: Fri, 06 Mar 2026 22:34:28 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":560,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51fddfcf1c9fac231fb088662c0dafd4","sha1":"e3091363fed8b9c3a754b919d234899be1049269","sha256":"6c630cba775d65f2649e2f39bb2a28d64aa83cbc29582fb259537afee749decb","sha512":"049957407b3186f48aa8b8c147cd013bac4d7766f8e54668dff59f7cda706891619da90ae11a6ba4ce0713f7bda8666c768ddcd07f7874661b88fdca362bb7d4","ssdeep":"","tlshash":"32f0c0d860698d04d1348041fbda34d8597fe0cb428f76c8b20830339e3409e387f275","first_seen":"2026-03-06T22:35:00.543023Z","last_seen":"2026-03-06T22:38:08.443857Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu170w-.ttf","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu170w-.ttf HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/css2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:28 GMT\r\ncontent-type: application/x-font-ttf\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"1aa20-67a4264a-d8691df435732a88;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 50365\r\ndate: Fri, 06 Mar 2026 22:34:28 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":109088,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"16b9069ddafebf2a329e617eeab54b9c","sha1":"de43b1e747bbb90c925000960a4c81bb72bbf27f","sha256":"60f87f3d017520b41fb16f864ec85551fe9070ef26c97d0cca565bc3281f13d6","sha512":"83a4f250f5166c0b96ea5aad4cef0cf07cee68772b3d835ab633c73a1cc9b3531dbc5214f011c8ccca06a8e3a5bb029d683be1d017468c53819a86e6219da870","ssdeep":"1536:WlM7dRPUkMvuM5tSf4Z2GahXpBq2LZZVM94YfcUj9Fbp3/wACchKib:LPUVvb5tSf4kBq2LZuFVzCS1","tlshash":"bcb33953b767939dc2463e7c9ba2d3f03b62bd255f0ae24ff8851b2895cf4900d86251","first_seen":"2023-10-26T15:43:31Z","last_seen":"2026-07-02T14:55:19.771744Z","times_seen":661,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":487,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/get_reviews.php","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /get_reviews.php HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saveassetback.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.27\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 14549\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 06 Mar 2026 22:34:28 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":46255,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"b282107223587a3647a3192093b8071d","sha1":"34a06d38aebb924abc6d04a27b1b5b5e4d5d6f94","sha256":"b10b9d22efaf084314d4a2520b77150a7a2717192d40235e1f7884320c074192","sha512":"cffb41d525c8b6f989a971067d6eb54dbeae253cfbe003e7699bc4bea32c4a12db13a2bfde79a1c879d8ab1e35bd2d1adc446a8b76bfe512fe1b79ad3f9fc5cd","ssdeep":"768:RREiNPeK1QZLcACzYfcWh+q4U+M0fctiQPBcE/:RREWP91RACoc0M9JfctjPR/","tlshash":"ee23631e5e61ed7d4fe355c6bc8f61aa62911260d3c17c289a4efe4c023278d132fda9","first_seen":"2026-03-06T22:35:00.545348Z","last_seen":"2026-03-06T22:38:08.467647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":520,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/fonts/fontawesome-webfont.woff2","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:29 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"12d68-67a4264a-5c3cdc4795076fbf;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ndate: Fri, 06 Mar 2026 22:34:29 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-02T08:59:16.774597Z","times_seen":526247,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":315,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:29.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:38 GMT","end":"Mon, 27 Apr 2026 08:36:37 GMT"},"fingerprint":{"sha1":"72:34:3C:CB:18:C1:2B:09:8C:14:7C:8A:5E:F9:36:8E:AC:A5:39:BF","sha256":"B3:D4:27:15:99:07:11:68:02:2E:99:B1:A2:49:72:AA:3C:7A:B5:AA:E0:E1:F2:BF:0B:6D:81:F2:F6:81:3E:09"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 06 Mar 2026 22:34:29 GMT\r\ncontent-security-policy: script-src 'nonce-5wA_W7tVyArlVsTbw5qlkA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93828,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47148)","md5":"2619995eb411d06fd01b9e6af4cf7ac5","sha1":"4f165960f72f0df0c08965933c8bf868216146fa","sha256":"9cdedaa0d9409eeb88b726149c150d7e5150e5eca84cfe9d3b22aed31c3ec9e5","sha512":"f56653121d590fb96acaf39c8b87e728db04becde1956edb0977875db46c65f26a0a8b3971e4072fa9fb0ed4396788f59a2aac5eb2da8b8c229a277e0a77a66e","ssdeep":"1536:y+kqRhd5hi1DT2+aAlJdFcalgLqgyhbXEMh6oGFuHB5MeDlYHw:y+kqI5J3lCRmgl1FA8eDCHw","tlshash":"c693ae1245536086cfbb8a8117d17f78b63e9208704394ac2bff17979daeca353a538c","first_seen":"2026-03-06T22:35:00.547046Z","last_seen":"2026-03-06T22:35:00.547046Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y","date":"2026-03-06T22:34:29.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42574\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 16:37:31 GMT\r\nexpires: Fri, 05 Mar 2027 16:37:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 02 Mar 2026 05:02:40 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 107818\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"68e95b07945492b587e7ff4b91130f87","sha1":"4396ba5a28ce7f78d370a1e2f262a7986fe4ec28","sha256":"5a117e9006534c8effa92757637265d75a377a221ca5e4b9c85a98f761d176d6","sha512":"c2042867ed1e83d709a0c4b72eed61a4720a95cf16b0306bbb09aa55bccbb6c553b2530eea2658850995f5200c65e1eeae916719efa15fdb555455d9a300830a","ssdeep":"1536:c7Rpgh9C9ToL9gTNfWNfK4RxEDldthXwW5l1Dx7:c7ArC9ULiTYNC4RyLX1","tlshash":"cd838e7338913a1afc278b616196bdfdf21cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-03-05T02:19:44.399164Z","last_seen":"2026-06-17T17:10:58.850708Z","times_seen":15944,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/icon1.png","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/icon1.png HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"3a7d-67a4264a-3b098f344dca2007;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 14973\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 478 x 365, 8-bit colormap, non-interlaced","md5":"bbd1953b5bd5d8a477dde7d0bf134ce9","sha1":"3f3afc3354aa10ed7bdc3ae92a43ecd52f09d6e0","sha256":"e9d74f5dd70f3e85ab1be5f27077288f049ac83298a5023c7cc3c3aa52627a11","sha512":"880588a11b4ae3085aef3cb510f5e4149ceb5617b93cdba526c7545d4df0d8e7842f862334bf9f5d1e49bc9d8c6b8ea74978a123a2ebdb3984d8c5668022aed6","ssdeep":"384:FBMvFSFJFKXlMoOftVYFVoXm/W1UBXR4REqsg:S2JFKOFVYfIQvP48g","tlshash":"ff62bfc7945aace2fbc44ab62541ce18c4203f7c1a6782f898ebfb787574290fa1564c","first_seen":"2026-03-06T22:35:00.548624Z","last_seen":"2026-03-06T22:38:08.454687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM70w-.ttf","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM70w-.ttf HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/css2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:28 GMT\r\ncontent-type: application/x-font-ttf\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"1aaac-67a4264a-1d4b35dfb74f425f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 50976\r\ndate: Fri, 06 Mar 2026 22:34:28 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":109228,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 12 names, Microsoft, language 0x409","md5":"63e25db7f044dee3ba22084763f59da2","sha1":"2138b6f2d516d60221ac3e278d7dcd4b59ebc1c6","sha256":"74418c12ce40fae26196087a2b49a3c78578624b3d31a82cecb13aa0143e5daa","sha512":"c4595902fcf21545ea33d488f107daa1974f42e7c079822e4736e1021577e1996ab7ddd7cdd027624d04c668785f664323a86510541f7ce80af844ddde41fcb4","ssdeep":"1536:QTMlqRPUkMvFyz8sJbWn27Yd9HnFiHwGw66DHevWWkJ1fS:oPUVvFyosJbm20DHFix6DOkJ1K","tlshash":"e8b34c63f713d31dcad26e78dfa2d3b037617d38af1ac20ff4422e29a48b5444986599","first_seen":"2023-11-01T14:00:25Z","last_seen":"2026-05-13T22:57:26.016634Z","times_seen":864,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/favicon-16x16.png","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/favicon-16x16.png HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"1db-67a4264a-7c686752dfc84038;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 475\r\ndate: Fri, 06 Mar 2026 22:34:29 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":475,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"bc358161ec6ce445cd4697f5b4d02c27","sha1":"063fb47a5c80d40b527c64673649f75534cf4af6","sha256":"e69574271a8837ffe1855a2d475dc83706d7973f7332cfafa6ea3c0c842da49d","sha512":"59637da8f3627f2f825d21b522dcf55e750e4ac48fea48aa41d3790ed645fbff05dc7c86b5b5db3efeda2232746ac0c7c15558ec9ad1ee5141ce1ad65745f793","ssdeep":"","tlshash":"a3f0d4a3750a351bc6a5862282298448fc7125df0ee13c47fc25d8de2cf225646f0d45","first_seen":"2026-03-06T22:35:00.551049Z","last_seen":"2026-04-28T13:58:22.76027Z","times_seen":3,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/reviewers/man-icon.jpg","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/reviewers/man-icon.jpg HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:29 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"2130-67a4264a-95f55d66a95d0f3;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 8496\r\ndate: Fri, 06 Mar 2026 22:34:29 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":8496,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 620x389, components 3","md5":"07da3853ca1f6848724afbd498e8fbc1","sha1":"30cf587487b698a3665376f42b3d14ffa69821ff","sha256":"54df26e7ee8c3747e7d149d2a7cfed3aa46f861ef3df13bf01685caf5a2628ce","sha512":"15aa6197225913334797ccaf729300d96b1eb39458bc840e1278fb73cbce6e156daca591bdcab70cd18ce24a7d5c06e3b693e04e9d44575d654d6842f90ae2e5","ssdeep":"192:F90dhflHdZe1YhtSw9tZl/PVSnznhOLD0HOFLA3AIvV/o5CNcE:/0dhN9E1oXLVozncYu2AEVw5COE","tlshash":"8a02ae47266197dcfdec0174929b9f5a7bdfdd306f1f844210c6a8474671f2899a1421","first_seen":"2026-03-06T22:35:00.552133Z","last_seen":"2026-04-28T13:58:22.754072Z","times_seen":3,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026bft=0dAFcWeA7FmJGakauNISENPjfpN-J9lB7i4D-Hoeol3WS4p3NvHuOy_2mUk2c_WCOjFp3oSEDKQF1AxXnCWw--qUMJn_FEFKRRdg","date":"2026-03-06T22:34:31.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 367397\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Mar 2026 10:13:45 GMT\r\nexpires: Sat, 06 Mar 2027 10:13:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 02 Mar 2026 05:02:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 44446\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":863067,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (718)","md5":"73caa07ee24583614dc93dfe5471eee3","sha1":"c0c137c7d5706b970f509a1d165444a9789ac975","sha256":"6b1b7cccf77280b7f955df16a4b69ecc8b77a4d01656ea272ee9f05618834442","sha512":"e51b722f6a8b8902e9af45337c2e5f713a1a9f471066d679c8e488529e25f248528462d81024727d8b34dc28ce21df38839f315550a385502fe644ece2086d60","ssdeep":"6144:zmhH/030Tjm8BBzCIE6KheqxYd+XY0jGutbWDNJ78tVBHPNze6BTplnq4p4BamVE:Chs3wCgKhYQ8utW37yBHZ7AzO7elTk","tlshash":"de054bd9b08735b15332f9f510bb2019937d9523cc98892eb1a485f13fb494960bbebb","first_seen":"2026-03-04T20:02:51.116007Z","last_seen":"2026-06-17T17:10:58.858115Z","times_seen":10809,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/saveasset-logo.svg","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/saveasset-logo.svg HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"3895-67a4264a-ec3d4307a45abcd6;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7219\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":14485,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2adafb9352e2092bc606e68e5f5ce850","sha1":"2aa5c503bdee784c888efd1ea4de8bfc1e095747","sha256":"9d47d8fe64d3dad4207f8d8de34050cc0357c0a8af62eb6540635af5fa08e593","sha512":"bfca444a91fa9fa9faf83a99f193e5aedb6e011268bd8965c9f067c13f02ab47d67a196b8dd4026f6086e5292fcc8383dc979b174c7f5e8c3e60776d6b719bbd","ssdeep":"192:sBV213CstFV+LYc2tG+9h4Ft98LGGiT/ASmXRS3t4Eld1ryNWSSu2uuc7oHhyV:p3Cs3Jg+4b985iT/ASCSndryNCmucEHS","tlshash":"31523bfe2b83ced4858f8bc77f7938d46c0f45a36a8d9a49c17c0bbd14c946c45a168a","first_seen":"2026-03-06T22:35:00.553865Z","last_seen":"2026-03-06T22:38:08.452759Z","times_seen":2,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/icon3.png","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/icon3.png HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"2ff5-67a4264a-7e4f5aad995d1019;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 12277\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":12277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 507 x 310, 8-bit colormap, non-interlaced","md5":"0e34df0c40e71e34116f45a2f78fd941","sha1":"0b7d5be0d15d7e5cf3503e02d797681565cbbba3","sha256":"962db115c30ff6261f9ddcc4c41f70953379204a3a71a87c04ea002a1f6d3551","sha512":"06b51f1450917146b39234248146e05d5f80fc27af1f36f73ffbe5ff3fb919782e2ea4c0f2679fc078b75877055be63d9fc438a89b541c9caf7cca86458279e5","ssdeep":"192:F4uSoAeNzenz1pGV74cdhVfKTA9D6MiOihSBGdvhygx8Tbr2ubPWWEWlSCwBMmF/:quXenz1074cdh0jMitdYTbr2QPWWRlSt","tlshash":"a842bf63196fecc783d0c68911deceac7cd39c1eea5f25f484d2716235b1928d725480","first_seen":"2026-03-06T22:35:00.554921Z","last_seen":"2026-03-06T22:38:08.471287Z","times_seen":2,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/saveasset-yellow-logo.svg","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/saveasset-yellow-logo.svg HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"4ea3-67a4264a-a7dbb814ab80f321;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11879\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20131,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac88a3fb0aa9bcf1a4b626cc0fd1b5eb","sha1":"d0fe14c53d79c2a85e6e5e4400c762f7fb03a693","sha256":"70d2bd155e2497aee52490885d0d706132c3fc0922fb1f5140a599d8c396d3b9","sha512":"12e81550bf9e71f94d3f83df7f9cc173c690d594a71c152a2cbabb64be19083cf86ef20d856af71d37487aa9699b86dd9d9df705c98be99d3ee02181a370221a","ssdeep":"384:P3Cs3Jg+4b985iT/AQUHrAd2BeXJiVn9+zYMp8ZI+wXfLlL7mvI:Jk65S/AQULDBeXJiIpf+wPLlL7L","tlshash":"a492afde2fd2cfd2848e8aca7bb87a506c8f849651ed59c4c03d679c80ec5bc4dd1286","first_seen":"2026-03-06T22:35:00.555989Z","last_seen":"2026-03-06T22:38:08.498725Z","times_seen":2,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/css2","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /css2 HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"69d-67a4264a-d5c93e819be5c7a4;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1693\r\ndate: Fri, 06 Mar 2026 22:34:28 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"32564ec423c5e46970583545969f508f","sha1":"31b706b34f7abec08e4a6a5348b66776f2fc45cd","sha256":"da43a4ffd632eb08f14640f1307f59b49f5df6ff0e46af3a36f7a0afc4e5688b","sha512":"3578e1415abb8442b13296d96628fdce4656c66eb26e148752c7650857d69bc60f2aad39db874b768ab4898dc5f6878b56407443a504d1c6f3a9d51904b5e9e7","ssdeep":"","tlshash":"86312600610a5221d6115d9d33df7f2a9d5d286321b1c17c5f749c24aeeac290362f7f","first_seen":"2026-03-06T22:35:00.556902Z","last_seen":"2026-04-28T13:58:22.766526Z","times_seen":3,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/get_reviews.php","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:29.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /get_reviews.php HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saveassetback.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.27\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 14549\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 06 Mar 2026 22:34:29 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":46255,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"b282107223587a3647a3192093b8071d","sha1":"34a06d38aebb924abc6d04a27b1b5b5e4d5d6f94","sha256":"b10b9d22efaf084314d4a2520b77150a7a2717192d40235e1f7884320c074192","sha512":"cffb41d525c8b6f989a971067d6eb54dbeae253cfbe003e7699bc4bea32c4a12db13a2bfde79a1c879d8ab1e35bd2d1adc446a8b76bfe512fe1b79ad3f9fc5cd","ssdeep":"768:RREiNPeK1QZLcACzYfcWh+q4U+M0fctiQPBcE/:RREWP91RACoc0M9JfctjPR/","tlshash":"ee23631e5e61ed7d4fe355c6bc8f61aa62911260d3c17c289a4efe4c023278d132fda9","first_seen":"2026-03-06T22:35:00.545348Z","last_seen":"2026-03-06T22:38:08.467647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y","date":"2026-03-06T22:34:29.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:38 GMT","end":"Mon, 27 Apr 2026 08:36:37 GMT"},"fingerprint":{"sha1":"72:34:3C:CB:18:C1:2B:09:8C:14:7C:8A:5E:F9:36:8E:AC:A5:39:BF","sha256":"B3:D4:27:15:99:07:11:68:02:2E:99:B1:A2:49:72:AA:3C:7A:B5:AA:E0:E1:F2:BF:0B:6D:81:F2:F6:81:3E:09"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Fri, 06 Mar 2026 22:34:29 GMT\r\ndate: Fri, 06 Mar 2026 22:34:29 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"19eca0601d3c5caf59619a40e167216a","sha1":"0fba703aa0a69754edddf8588d95126a871ead81","sha256":"377eb21fa7c331453e7bd36e300e7c6cefe371095d3047f9689b12567bbb5b86","sha512":"a807419db4315bbc2cc834582dd4e13c9b8445b357ce9ed6fa08ef9cd80cc615385271297fb132ee1ce594e05bdeb423984d02bb2e1a8d4613f578685b42d129","ssdeep":"","tlshash":"85b012370960e59c0d104142d567b3b8e40276a4da7080f142e64fe403140734781a00","first_seen":"2026-03-05T02:19:44.442124Z","last_seen":"2026-03-24T08:33:22.890614Z","times_seen":8651,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/css/slick.css","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /css/slick.css HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"6a3-67a4264a-cb5c080affce5a12;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 442\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1699,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8e30160d0733fd6fa67408c5427f5452","sha1":"bfc69a64f4ae2d7746f05dd04a002d0e8315eed1","sha256":"0df8f4fb7107d3f3f402d5c2cd16eaf8d290ffc895b869238bfa768fcdd4daf9","sha512":"254a04103f2b3b76b5e0324935bf17ebc8e53b8cc5db81cf4bd0ab12ca5e854541f66c944a07d0be59098bc0b0adc809e6567f14aa45a6367655dfd491f69f6a","ssdeep":"","tlshash":"48316d8c066581c68632c6a95bd3a6597dffb0f10d350198bfc44306d28fbd86ac5eb3","first_seen":"2026-03-06T22:35:00.558455Z","last_seen":"2026-04-28T13:58:22.738967Z","times_seen":3,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/icon5.png","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/icon5.png HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"390d-67a4264a-78ddfd4bd0aadb8;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 14605\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":14605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 569 x 407, 8-bit colormap, non-interlaced","md5":"2209decf507b83a5c342aa8dfebaa315","sha1":"a6c98c148b83382fff7610929616f4f6c86cc2c1","sha256":"cb441c17993a8ca5bd482d54129214cb937de9624c0959c4cae65070c8b1f18c","sha512":"d7c97366fb557c1ed36b9f447808b532a4a98125ccabefd9522f04a1d402dd47e7d283df374edce8dd834772a18bf9117b2a114d4a6da31f6a51178f778f6f5c","ssdeep":"384:CEgm71waH8PY0GOi/02eSvRKfztdKeAz9jACtJ:CEBGNGJ/0ivE6RAS","tlshash":"e462afbb6f030c95a9dd62ad334de9ba49204e0c6cdb35a198e87ab93037b14d53197c","first_seen":"2026-03-06T22:35:00.559472Z","last_seen":"2026-03-06T22:38:08.476969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/right-img.png","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/right-img.png HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"c983-67a4264a-d4cdb9ab42e95c08;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 51587\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":51587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 829 x 830, 8-bit colormap, non-interlaced","md5":"1cbf42930e6457b8b7a781c468417fbf","sha1":"72c59f7d85e2ffd902e99950ad19bb20654601b2","sha256":"77f6d18987109f1082a4f14fc1b429289af5219041338663adb98c65aebf1e2f","sha512":"f757606bdcc66a16b0ec4290f97282506f9f9e529e05180bd5dca4332b91576cf93c3053fa7100626b3d1906a9235c42a9cd46473ec251897cee0aef97e82f09","ssdeep":"768:tTDab9VtAZyC/rXAP0XLmIxw5u/jLs0M5+v1pI7TU7S05GBVvNzEwIkSMBK:tTDaOZZjAP0vxwgn05+o05aVzENk1BK","tlshash":"ad330185d3395ab1ed1ec986cf153fe8236e20c936da1d20be5852d4e5839edb038c72","first_seen":"2026-03-06T22:35:00.560647Z","last_seen":"2026-04-28T13:58:22.747565Z","times_seen":3,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"302c-67a4264a-d2bcb89c8abf85e7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3653\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-02T08:41:58.130794Z","times_seen":123250,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/js/bootstrap.min.js","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:28 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"eab9-67a4264a-2f8f10c3ca2d6beb;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15229\r\ndate: Fri, 06 Mar 2026 22:34:28 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60089,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (59810)","md5":"a08792f518b51f0f1422b5c96df9eb8a","sha1":"3f094f010bfb0c022a51b62778d4361d1cad3fd6","sha256":"5c36e28c9a7bd864b673e223db7e1934923227536ffbdf871f58b6f09b9ac8c9","sha512":"6ba72d23ac35920dc9e1d4a39271e3dda58b11b8e2b405c08cb0d1531a36c326260c545ccf6449b90af93372adf0efd3b544a9f27dab032697632d6c8e82a6ad","ssdeep":"768:ts1v6byWwhC8Y/klELLhigGAl/4TVOhcZ5Il6/2Vm7MTwFxmnMq55wPpHOg9yPpC:ty2hL6q373y/iGp","tlshash":"de43a45a3258b87309de44a6c032470bf7255d94b547816cb9bdacee1b3dc8272b2f78","first_seen":"2023-03-07T12:03:09Z","last_seen":"2026-08-02T05:56:57.992396Z","times_seen":6477,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U","date":"2026-03-06T22:34:30.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 367397\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Mar 2026 10:13:45 GMT\r\nexpires: Sat, 06 Mar 2027 10:13:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 02 Mar 2026 05:02:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 44445\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":863067,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (718)","md5":"73caa07ee24583614dc93dfe5471eee3","sha1":"c0c137c7d5706b970f509a1d165444a9789ac975","sha256":"6b1b7cccf77280b7f955df16a4b69ecc8b77a4d01656ea272ee9f05618834442","sha512":"e51b722f6a8b8902e9af45337c2e5f713a1a9f471066d679c8e488529e25f248528462d81024727d8b34dc28ce21df38839f315550a385502fe644ece2086d60","ssdeep":"6144:zmhH/030Tjm8BBzCIE6KheqxYd+XY0jGutbWDNJ78tVBHPNze6BTplnq4p4BamVE:Chs3wCgKhYQ8utW37yBHZ7AzO7elTk","tlshash":"de054bd9b08735b15332f9f510bb2019937d9523cc98892eb1a485f13fb494960bbebb","first_seen":"2026-03-04T20:02:51.116007Z","last_seen":"2026-06-17T17:10:58.858115Z","times_seen":10809,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/css/font-awesome.min.css","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /css/font-awesome.min.css HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"90db-67a4264a-26ebd05cfb269cc2;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6779\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":37083,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"0b1af1fda29a9266320cd49877108090","sha1":"4fb0b5c75f6f96294cfe2927f6c00dde93dda72e","sha256":"0db31146f55675cf166c7fcf79fdd662abe221c6c0f860fcdbaa6e9f20aea037","sha512":"17f9f39d2ee968706f3ab0e4d6445338d653696bb01a7dc98486869983cd66d58f9268682cbe952376e2ee2c5fc64049031275abe483f9f264bbd27273a7e532","ssdeep":"768:eMtu+A4CSIDqvnI+YTBrFPvVrJjhiRAiiEL:ftu+A4GDUI+Y9rpVljhiIEL","tlshash":"0cf231ece5bf18804391e0d16386a370bb3dbb2d8d4a6d9cd2a6798cb1c1255c2c23dd","first_seen":"2026-03-06T22:35:00.562718Z","last_seen":"2026-04-28T13:58:22.745045Z","times_seen":3,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/664.png","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/664.png HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"8af4-67a4264a-d00d8fcb990c67;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 35572\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":35572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 658 x 610, 8-bit colormap, non-interlaced","md5":"5a8f09e88af62c051d4df08c31ab9a4a","sha1":"f9de0854308f5950432de1d46b2ae99a1162bbbf","sha256":"1081b4d2b0815185ceaaf6c573cde68f9ac36c1f63ea3540e4326e312917627a","sha512":"ec3d38159d491ee6c9e38fb4a0543b9dd9f4d5123d1b5b0b1be243a6030f675293ab3abe91e9fc18f3c7d8bf7e3d792b92aa8aedb165d0bc48fb2d252ab7c2e1","ssdeep":"768:oln/fznWWkbsRCw4STR8gAmloqBAfrBJ33MhQr/G59:oln/AbsRXTRHTlx8rXiQrY9","tlshash":"edf2f198dd7de4ced4bc8d883a5c99a696d48c604d328fdcdd46b87aa039077f81c670","first_seen":"2026-03-06T22:35:00.563717Z","last_seen":"2026-03-06T22:38:08.482689Z","times_seen":2,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/icon4.png","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/icon4.png HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"34fe-67a4264a-ea97e9c45a9907cb;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 13566\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 563 x 294, 8-bit colormap, non-interlaced","md5":"96497166799ea1a550c42d8b78a1bf63","sha1":"c408cc87b5ec70c8fee365330c5551b1291b1686","sha256":"a4ae8315fc69a6a6bba8e8f389ff4016fa64b1ba230dd2addc736292b97f0406","sha512":"51f4e007e0938abcf89f0a39d2c179b8aa6efcb28d8bc54f6bf7036ec2eb05d7ce7dd9d18be0d04d8bb423fab41b12ee13e3dc2e2e17990aa1690413156d0376","ssdeep":"384:BMUtFOb1Kjj+jSb5opHd7vgOo81eDb4xBysG/onCShIE:/Ff8m54pYjo6b8ysGwn9","tlshash":"3b52cf9754cbae270ccd9a076096f1af8130913ef3cb7ae18f420ec5f689250f92a018","first_seen":"2026-03-06T22:35:00.564747Z","last_seen":"2026-03-06T22:38:08.492569Z","times_seen":2,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y","date":"2026-03-06T22:34:29.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Mar 2026 08:14:24 GMT\r\nexpires: Sat, 06 Mar 2027 08:14:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 51606\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-02T08:58:24.8253Z","times_seen":952835,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":111,"dns":1,"connect":28,"send":0,"wait":28,"receive":35,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/js/main.js","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"1182-67a4264a-719c99cb8753c984;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1609\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4482,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"cc2f8475fa76d119143aeff697d66cc8","sha1":"80b1a209f4a5ff2087894974babf7896113ff099","sha256":"329cb8186eb26645fb374c4b2d4c4d2aa86c94840db66ee4984b7dd1ebfa9f91","sha512":"00c287e0817359214c2e57631efc1ef0fe950ba4e5abcfa3f20c6b9bb4bb8612f74200b413ff64b5b802e321c2f10bacdb19b66286a0ea022857cc8c6b606ee1","ssdeep":"96:m6Qhb4LaxupNupesc5K0MBo4iGF6ELmkxk0if:m6JexuLusJT4iQ6EDxkJ","tlshash":"4a91620969e50633563f60ac2d6fda472990f007cb0d9e00be4d92ac5ff9c2499ab7c7","first_seen":"2026-03-06T22:35:00.566351Z","last_seen":"2026-03-06T22:38:08.458475Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/css/style.css","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Apr 2025 18:56:58 GMT\r\netag: \"27327-67f965fa-b2a8e83574e8111d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 55965\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":160551,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42677)","md5":"428c614567a98e7b59a80b25908f1d65","sha1":"bdc2511c417dcc0a6e1181f1a13f23788adf5b9a","sha256":"e729b9d2c8003ad9cc2d04c826273242a8008e620e9c138c72d177f26bf14ae1","sha512":"4025652c9af4652e46f9eb772f8fb37f02cda9de82496a7a5f6cf4538632194870095182eae784536cb2280c33853e7a782206ce728a853f7c9b1fdbd4403d28","ssdeep":"3072:tsISDAsISDvsISDzasISD4aAm2jdFRsPtuHI5AtKnC52HDZyC5OksISDw:tsISDAsISDvsISDzasISD4hm2Etuom9C","tlshash":"72f37523875d64b2263c35efd3982c5d734df26269938a95f0d60c2cd5afa6628073ec","first_seen":"2026-03-06T22:35:00.567549Z","last_seen":"2026-03-06T22:38:08.460538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/fonts/fonts.css","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /fonts/fonts.css HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"171-67a4264a-45708dd614e8b606;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 151\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":369,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (366), with no line terminators","md5":"94d8dfacf2fb9c5178c854c70be221b6","sha1":"b8712c6e058ea232361b912f31643aa2375c1826","sha256":"1de62d9df50859cb9d27cc1d9897bcf7753d7bcea39727bccbdd6c97dbefae7c","sha512":"18f57a05b8341c2c798294acfc8178660b265d208890ea8e6655e18c3e18c2724389ed993829c534f2ee7fd35340f0334b3237e6eb2f8e3e09f7a76bda77a16a","ssdeep":"","tlshash":"84e0128a451362ca785e0d2039de27c16d9a30435c342b5ba52fac388ce7f0b3180f94","first_seen":"2026-03-06T22:35:00.56871Z","last_seen":"2026-04-28T13:58:22.762661Z","times_seen":3,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Ew-.ttf","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Ew-.ttf HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/css2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:28 GMT\r\ncontent-type: application/x-font-ttf\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"1a8e4-67a4264a-ffcb780e756105e4;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 50425\r\ndate: Fri, 06 Mar 2026 22:34:28 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":108772,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 12 names, Microsoft, language 0x409","md5":"f41566693052bcad977bb13d15a4fbf1","sha1":"c21ae240501dce61fbbec0d221e792bca0d12e34","sha256":"387b35044e68ac48ee471ad469976de61e3d0e36120cb09fe7c5101f1f31db62","sha512":"95b8f9a75587b68664d3db2315fa0a9038cfba9505dac4364e982d36ccb32770c1a64b2e245a87ef7d5e4e2a9d15289a2bbc45afa228822f206ec77f390e1b3d","ssdeep":"1536:SvMg70+RPUkMv1aV3RoCAWwboADCWf6ljrbGG+u7LW9wFGd:KMwPUVv1aV3uCAlohTjrbGILo/","tlshash":"77b34b23f763931dda42be78aa62c3f07762bd346e09c30ff4865b28d48f0944d96294","first_seen":"2023-09-17T05:05:18Z","last_seen":"2026-05-20T16:22:14.230332Z","times_seen":720,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://saveassetback.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 367397\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Mar 2026 10:13:45 GMT\r\nexpires: Sat, 06 Mar 2027 10:13:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 02 Mar 2026 05:02:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 44444\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":863067,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (718)","md5":"73caa07ee24583614dc93dfe5471eee3","sha1":"c0c137c7d5706b970f509a1d165444a9789ac975","sha256":"6b1b7cccf77280b7f955df16a4b69ecc8b77a4d01656ea272ee9f05618834442","sha512":"e51b722f6a8b8902e9af45337c2e5f713a1a9f471066d679c8e488529e25f248528462d81024727d8b34dc28ce21df38839f315550a385502fe644ece2086d60","ssdeep":"6144:zmhH/030Tjm8BBzCIE6KheqxYd+XY0jGutbWDNJ78tVBHPNze6BTplnq4p4BamVE:Chs3wCgKhYQ8utW37yBHZ7AzO7elTk","tlshash":"de054bd9b08735b15332f9f510bb2019937d9523cc98892eb1a485f13fb494960bbebb","first_seen":"2026-03-04T20:02:51.116007Z","last_seen":"2026-06-17T17:10:58.858115Z","times_seen":10809,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":58,"dns":2,"connect":8,"send":0,"wait":9,"receive":40,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y","date":"2026-03-06T22:34:30.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 18:08:03 GMT\r\nexpires: Wed, 11 Mar 2026 18:08:03 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 188787\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-02T09:00:29.12992Z","times_seen":700467,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026bft=0dAFcWeA7FmJGakauNISENPjfpN-J9lB7i4D-Hoeol3WS4p3NvHuOy_2mUk2c_WCOjFp3oSEDKQF1AxXnCWw--qUMJn_FEFKRRdg","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:30.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:38 GMT","end":"Mon, 27 Apr 2026 08:36:37 GMT"},"fingerprint":{"sha1":"72:34:3C:CB:18:C1:2B:09:8C:14:7C:8A:5E:F9:36:8E:AC:A5:39:BF","sha256":"B3:D4:27:15:99:07:11:68:02:2E:99:B1:A2:49:72:AA:3C:7A:B5:AA:E0:E1:F2:BF:0B:6D:81:F2:F6:81:3E:09"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026bft=0dAFcWeA7FmJGakauNISENPjfpN-J9lB7i4D-Hoeol3WS4p3NvHuOy_2mUk2c_WCOjFp3oSEDKQF1AxXnCWw--qUMJn_FEFKRRdg HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 06 Mar 2026 22:34:30 GMT\r\ncontent-security-policy: script-src 'nonce-1JPxFY5S4XJzzFPe4kdalg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17035,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"bb1c19effb83d5faa1fb2e0598b8db6d","sha1":"a845edb68068700d2d4c4d508f9f2c005f2c7807","sha256":"fbbd8df1aa43dd850e8b93b6f44580758d726dd1d448230f95358c683e2d29dd","sha512":"5fb8c49f9a60bedb6c65158a651e37bb0f5c43793b02d4f1f6e117ebbeee71655f62d4637a9a6c10a5d89acfa4e2067cf05a797f452bee074e8145fe13d57453","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/O:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+r","tlshash":"75720f50041744009b835ce223ce7f30fe4e92517146d0b1abfdab6beedbda6926939d","first_seen":"2026-03-06T22:35:00.571047Z","last_seen":"2026-03-06T22:35:00.571047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026bft=0dAFcWeA7FmJGakauNISENPjfpN-J9lB7i4D-Hoeol3WS4p3NvHuOy_2mUk2c_WCOjFp3oSEDKQF1AxXnCWw--qUMJn_FEFKRRdg","date":"2026-03-06T22:34:31.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42574\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 16:37:31 GMT\r\nexpires: Fri, 05 Mar 2027 16:37:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 02 Mar 2026 05:02:40 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 107820\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"68e95b07945492b587e7ff4b91130f87","sha1":"4396ba5a28ce7f78d370a1e2f262a7986fe4ec28","sha256":"5a117e9006534c8effa92757637265d75a377a221ca5e4b9c85a98f761d176d6","sha512":"c2042867ed1e83d709a0c4b72eed61a4720a95cf16b0306bbb09aa55bccbb6c553b2530eea2658850995f5200c65e1eeae916719efa15fdb555455d9a300830a","ssdeep":"1536:c7Rpgh9C9ToL9gTNfWNfK4RxEDldthXwW5l1Dx7:c7ArC9ULiTYNC4RyLX1","tlshash":"cd838e7338913a1afc278b616196bdfdf21cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-03-05T02:19:44.399164Z","last_seen":"2026-06-17T17:10:58.850708Z","times_seen":15944,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/css/bootstrap.min.css","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"31c38-67a4264a-5103745f853c036e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22458\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":203832,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (335)","md5":"755f12e7670ff99c0addf31ce82c2c16","sha1":"c8e882ceae877aa2c5faca8ad9893c89aab5974f","sha256":"b9b873d9b17da0f7e9d129cf96e48d1b2b3ceef074be2e44475538cd1ff6ee21","sha512":"8952a927c704d23d00e260a9303933338235d73e81c477d480d644092694754414ae8278a27eb669b98f308dff7208d73917ba0e4c2f54bc9c36e6b5d288f12f","ssdeep":"1536:iENiWNLgZpiywJhi9p2d553/7U4IjdM7aI+SCr7t5M6VDQ+nuYudtIjNbPZi:iE5gZDudtIjNbPZi","tlshash":"cf14438dfdf1180834678668649b7bf57b2d8046d60ddd7a76e23264cf893c19ce3a88","first_seen":"2025-07-09T12:02:43.965611Z","last_seen":"2026-06-27T09:54:30.256729Z","times_seen":6,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/css/responsive.css","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"6cef-67a4264a-b67c297729a920e4;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2782\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":27887,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"06f4cf2f816a0b6ebbd657f6c57b65ab","sha1":"ae726c87ef01adaa23958c8ac3811164af3eaace","sha256":"da7173b52757a370bf96a2d0c1e086d8eb6402637b7e56420b4f668531560baa","sha512":"77d8e5a26ef02ca4fe9db650a7f248fcdea47a0794e485c2c32f0ae8c08f0ef734b63f370942f4380b4a789e000eeead7019b3c3249451ab89a2776bb980b631","ssdeep":"768:MbM5iHI4bbM5iHSbBWypbM5iH4RvbM5iH66FK:MbM5iHI4bbM5iHSbwypbM5iH4RvbM5i8","tlshash":"b0c27a15ea042848f1fab3b5dbbb66a4fa222073d34280e7b5e0d209dfb546d449ddcd","first_seen":"2026-03-06T22:35:00.573449Z","last_seen":"2026-04-28T13:58:22.752531Z","times_seen":3,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/icon2.png","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/icon2.png HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"351d-67a4264a-98a88642bf9386be;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 13597\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 515 x 329, 8-bit colormap, non-interlaced","md5":"840a4cc531ee8c52df3bf0bd4d3cd105","sha1":"aeecc72823f632841e1d54f6d79d2f9fac604093","sha256":"e974a4858879337167c144c6f79ce63573fe59074760ecc37e0e466c7991fca1","sha512":"c9b11c19298d6f97e287fcc97dcae1ffae3e80b5b7a3d6be5cd1dc83b764126be17619b7b9def20e676d46844db1240929257c8581b193fe936864df1d797a29","ssdeep":"384:HDXsdLIOo5ToO7dyBSc4qcPMh2og5ieA7B+G1GZ0av8:H7nfp7dikCgseaev8","tlshash":"e252bfcb41ba5c3322f356371fdbcce41c58805d198392bc9da4a54234963bf94c2af9","first_seen":"2026-03-06T22:35:00.574471Z","last_seen":"2026-03-06T22:38:08.506861Z","times_seen":2,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/apple-touch-icon.png","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/apple-touch-icon.png HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"826-67a4264a-eef2cd67945d0190;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2086\r\ndate: Fri, 06 Mar 2026 22:34:29 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 76 x 76, 8-bit/color RGBA, non-interlaced","md5":"ae0dc4978233476f0b98f561eede766a","sha1":"35e9e04fe8e64557f7b64af0284f165d0fa51c10","sha256":"b9756fd8e1367a4b9507d89a48d81d663d36dd412588660b4b53d2895f7246ba","sha512":"8d76642f7db5e0be2a209cf2c306a3deeae83d5ac9d5b9cff6df17745fae6b9a493d8797706d4e7c0f27c1a0656539e5cfe47691706ad5ebc3fdccfb491aa5aa","ssdeep":"","tlshash":"5f414ccf7078535182a79ab1b9682f10e51f3416a4cd519c0620f78e166e38d53c9b8d","first_seen":"2026-03-06T22:35:00.57541Z","last_seen":"2026-04-28T13:58:22.767372Z","times_seen":3,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdFgxQrAAAAAAZA4K_j9lflxrf7bIXbApPCaagU\u0026co=aHR0cHM6Ly9zYXZlYXNzZXRiYWNrLmNvbTo0NDM.\u0026hl=en\u0026v=QvLuXwupqtKMva7GIh5eGl3U\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=qolrjob1v46y","date":"2026-03-06T22:34:29.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /recaptcha/releases/QvLuXwupqtKMva7GIh5eGl3U/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 367397\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Mar 2026 10:13:45 GMT\r\nexpires: Sat, 06 Mar 2027 10:13:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 02 Mar 2026 05:02:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 44444\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":863067,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (718)","md5":"73caa07ee24583614dc93dfe5471eee3","sha1":"c0c137c7d5706b970f509a1d165444a9789ac975","sha256":"6b1b7cccf77280b7f955df16a4b69ecc8b77a4d01656ea272ee9f05618834442","sha512":"e51b722f6a8b8902e9af45337c2e5f713a1a9f471066d679c8e488529e25f248528462d81024727d8b34dc28ce21df38839f315550a385502fe644ece2086d60","ssdeep":"6144:zmhH/030Tjm8BBzCIE6KheqxYd+XY0jGutbWDNJ78tVBHPNze6BTplnq4p4BamVE:Chs3wCgKhYQ8utW37yBHZ7AzO7elTk","tlshash":"de054bd9b08735b15332f9f510bb2019937d9523cc98892eb1a485f13fb494960bbebb","first_seen":"2026-03-04T20:02:51.116007Z","last_seen":"2026-06-17T17:10:58.858115Z","times_seen":10809,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@10","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/sweetalert2@10 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19921\r\ncf-ray: 9d84d3f37f76723c-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 10.16.11\r\nx-jsd-version-type: version\r\netag: W/\"11dc8-k2jefS6LDTNa26qxcRQ+MH7V+1Q\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230032-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 17796\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9TmyG5DHgEqLblnS0rYEhcWaZBMnKjF94o0fECw%2BPvbwhJPat2EG%2B72WNS7tPAQNO7oIoP0bmtEo1AbBy0CQBTJ4BPSCznNL7BjS%2Bi4qU3RCL3vZSWyY0WriYSKsYv17VJ4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73160,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48449)","md5":"78f9abf2d03f7ee6a755e0178d41f2f8","sha1":"9368de7d2e8b0d335adbaab171143e307ed5fb54","sha256":"2d5fa531e30ac3debad673003128f1ca9ad3c964ef17b547377e7ed09bd4504f","sha512":"c138cdbcc824524cbd5cbfa8edf966acf66462916349a5d9539723c6f5f10f44357059cc28ddbb95d50d3e17710e9f533bebb658d82527d980804b8a3a31f9d1","ssdeep":"768:hrDTClRYf9tFz5XKuaJuZMpDaIi0oO3vYCRuB+MJ534ywu9uqkjwxRXCKVNTeccy:hbCzItFzdZIBj3AvB+MJ5ocC3WsRw9","tlshash":"ce630689b6403133aaab4174659be60db6b56515fc330c18f128d0d84ffbd8e6273bb9","first_seen":"2023-03-08T15:12:56Z","last_seen":"2026-08-02T07:29:28.196921Z","times_seen":2269,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":33,"receive":3,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:27.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 06 Mar 2026 22:34:27 GMT\r\ndate: Fri, 06 Mar 2026 22:34:27 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1017), with no line terminators","md5":"e5fe23923b605a451a45a601d8d37146","sha1":"336ea5bdec2c086002f3a7d5d2728db934c768eb","sha256":"e241ad691849d91af7ab357ca7e57a86c207d8267b0bfeccd7fb1bd0ceca99f6","sha512":"7fecba6a917ec54527ab1ae7489b086d39d1ccff33994a54e986fd7e4d19fe0f86756d71f068e5d77781e15461c46feda0933e4ba938e016bf0943d5876966bf","ssdeep":"","tlshash":"ed111b772a04f0391b320de1a2facbb1e492701cf12844e8a512da881f2eccbce09589","first_seen":"2026-03-05T02:36:35.092433Z","last_seen":"2026-07-04T11:29:09.566617Z","times_seen":2156,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":87,"dns":3,"connect":8,"send":0,"wait":23,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/wirk-icon-2.svg","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/wirk-icon-2.svg HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"232-67a4264a-8ebaa58224fb0c38;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 270\r\ndate: Fri, 06 Mar 2026 22:34:28 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":562,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51628ea01d5e065e20d29f2ac9866e5b","sha1":"36b8cb104d713e06ba38f0b508694e3040781385","sha256":"b6ebaa4e598b6086458b0a5338a91374c08dc444d4877a241cb9560e360ef447","sha512":"42a9818dd08f0e602f88ba9dbc380340b05c90953ef82046d7f535635c6075c36f9fbc708fd2a4d63f3e3e2f39ef28dadb9f8a5de47068ce0e76c742a7b0ea69","ssdeep":"","tlshash":"0ff0bbe510998d18d2308155faea25d495bfe1db025e67c4b1483433ae350de3daf275","first_seen":"2026-03-06T22:35:00.577655Z","last_seen":"2026-03-06T22:38:08.483994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/true-icon.svg","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/true-icon.svg HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"2e0-67a4264a-ad6f2d5de4096a78;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Fri, 06 Mar 2026 22:34:28 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":736,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c4599a4589cd69e98daefb186b4c6ef","sha1":"60c3351df7e05d0a925e4573be07f02c5914e1e2","sha256":"f6694f2b952208da37fb2435d72ec3119d38a5befee8d19bc6d8916ad1ae6cb4","sha512":"492f3d142bd74267d54216d4dd26de5f9805c32a69af58dffac42639927bbba8c4a60d9d5482ebcd983fe68f2740333d313d8287a4cd0052dab9a176e6cb50e6","ssdeep":"","tlshash":"d701d0b502f8cf881c7c8b45a5d4e6c0709ef667725406f0b74538d6fe26053326ee10","first_seen":"2026-03-06T22:35:00.578626Z","last_seen":"2026-04-28T13:58:22.741804Z","times_seen":3,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/js/masonry.pkgd.min.js","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /js/masonry.pkgd.min.js HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:28 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"5e27-67a4264a-142d4efad59b0688;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7057\r\ndate: Fri, 06 Mar 2026 22:34:28 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":24103,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (23966)","md5":"520e46df77727aaf3d5e799ef241be02","sha1":"d20252cf76c3be8af37a8415d13ad368c762b4d8","sha256":"367d6afdfc741fb48d2d9310e47c3924b693459a74c882c0fc545ec5ed7d55d2","sha512":"25195cbd26405d3f3ee5241002f9255c626ec574e8bb2abca0831a60445941ab01f120431d96946de012b095a9934514adff3d0cfdff69e7cf3eb94c475875c9","ssdeep":"384:cr7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:iSxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"46b2858f73007425428bf16696af020f7137655c7a4790acba6ad8db1cb984d2037fbd","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-08-02T06:29:17.933603Z","times_seen":11134,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":518,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/images/reviewers/woman-icon.jpg","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /images/reviewers/woman-icon.jpg HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:29 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"c08f-67a4264a-68fbbda1ad68c1a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 49295\r\ndate: Fri, 06 Mar 2026 22:34:29 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":49295,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 768x958, components 3","md5":"5e174f40ffcdd321bcc46f207ef0640d","sha1":"dcab0c568dd9efe82b27cfb44cb810ae3dc6a644","sha256":"b9143eff7cdff682b45ff78a1d3c124cf3e36398e148f23afe58283739bf7e0b","sha512":"a93f7328bf5b32af9337ccc8b04c0ae870887198a6bcce6ea9fc09b5db5e2bd68d3a1e44453ca3c2f5d0c7ac6373af5421cd6a712e303602cfb46e584c137d47","ssdeep":"768:FiL/see05GXTYoM2qE/aBjyrMjMHEvSSmrhxTbdeJzcKZGDhXgvuYpWr8hb:Hee0CYGEeMQHE/mrzw18CvPpjhb","tlshash":"0823f25f93da9620dcd682399156b5a92d4b8c99ce13178bf994fb7acfc23b4f800700","first_seen":"2026-03-06T22:35:00.580176Z","last_seen":"2026-03-06T22:38:08.502775Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saveassetback.com/s/notosans/v36/o-0mIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjcz6L1SoM-jCpoiyD9A99d.ttf","fqdn":"saveassetback.com","domain":"saveassetback.com","tld":"com"},"ip":{"addr":"89.117.9.247","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saveassetback.com/","date":"2026-03-06T22:34:28.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saveassetback.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 19:38:31 GMT","end":"Fri, 01 May 2026 19:38:30 GMT"},"fingerprint":{"sha1":"6B:71:42:8D:E8:50:E4:2D:37:3B:E4:D7:55:27:93:AE:3B:C0:32:22","sha256":"F7:9B:8F:A7:29:3C:90:71:FE:E2:DD:6F:60:05:ED:80:C8:FE:78:20:F7:89:D5:68:F6:18:31:22:C1:A9:C9:70"}}},"request":{"raw":"GET /s/notosans/v36/o-0mIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjcz6L1SoM-jCpoiyD9A99d.ttf HTTP/1.1\r\nHost: saveassetback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saveassetback.com/css2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 22:34:29 GMT\r\ncontent-type: application/x-font-ttf\r\nlast-modified: Thu, 06 Feb 2025 03:02:34 GMT\r\netag: \"7febc-67a4264a-ebd3ea164de115e5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 236668\r\ndate: Fri, 06 Mar 2026 22:34:29 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":523964,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409","md5":"4e63b7e219c406bff4adbe58a2de30b2","sha1":"33721f07ae80567fd0a612758117c94171f6f167","sha256":"ff73018fb9b0a84e6a4ba87c83b005c43fe860c73028b87923024966681943e3","sha512":"ea2c82aef381910c378fca22f07aff2a9e089ce7deee5cd3681d7aa8986a453df16d8153942a86a97d579776504c1679332e8f1821fc4f99b9c0f99ada1edec6","ssdeep":"12288:B4mTnxFHdoeKbCaJkwQHFw/x8JiqeueU5A:B4kceKOaJRQHWbqe3","tlshash":"b2b45d43f357da8dd3572eb896b293522395fc35aaea434bd182567afccb0d08d802d4","first_seen":"2024-05-27T15:55:23Z","last_seen":"2026-05-02T03:56:45.023409Z","times_seen":24,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"saveassetback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}