{"report_id":"bc65c975-c5a9-4c65-863b-5de3db44ab87","version":0,"status":"done","tags":[],"date":"2026-07-19T07:15:33Z","url":{"schema":"http","addr":"growth-engineer.icu","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":0,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"growth-engineer.icu/","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"title":"ГазИнвест","dom":{"size":28845,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1079)","md5":"18050c9957f438ef4567cd54fb466182","sha1":"90f14e4ea5ae5b8fd88decc24563d782fd78e831","sha256":"d3442b172cf569159f924ac3b16fa698de4496b48574b2b1a35b2875c9d41d89","sha512":"299328db98e4b97555124383d474299e1c3f341b9eb6b901b957e2a3d9fc844331abff6fecb764028537e3e9646ecb9499c6cddc9a286da37243a72cb7e4666c","ssdeep":"384:wTrLCnC8iOGp5Lswg1UNZ7V7E+Rlj5OESOLOm7gI47t:Eei5L7f7V7E+R1LgIQt","tlshash":"abd2312091f708671023f0e7a566ab063ce6807fff56960136ac1bee2fd2d58d96354e","dom_hash":"domhashe63d61487f0662fa92f91f0bf48220e6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"growth-engineer.icu","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":0,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-23T07:15:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":64972,"sent_data":1096,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-12T22:42:14.264548Z","alert_count":0,"request_count":4,"received_data":373175,"sent_data":2184,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-07-12T23:52:49.76326Z","alert_count":0,"request_count":1,"received_data":90118,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"get.geojs.io","ip":{"addr":"104.26.1.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-18","domain_rank":99948,"first_seen":"2017-03-30T18:44:25Z","last_seen":"2026-07-18T07:49:19.593058Z","alert_count":0,"request_count":1,"received_data":989,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":3,"received_data":112703,"sent_data":1689,"comment":"","tags":null,"fingerprints":null},{"fqdn":"growth-engineer.icu","ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"domain_registered":"2026-03-03","domain_rank":0,"first_seen":"2026-07-19T07:15:34.784168Z","last_seen":"2026-07-19T07:15:34.784168Z","alert_count":38,"request_count":19,"received_data":1669105,"sent_data":16288,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/utils.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8a9b2127b0197d558dbbbcb99d80973","sha1":"cb793f12ac3b8f7ac9cc69c9581bc2dc5d439ad5","sha256":"cd5ab58bf994afd3ff9a1000a9a22c9619b08dda258ddb055e2d34bd41bd97e6","sha512":"b9f515fafb98229f2033351ad6c1d6dcad412908cdb5410cf72e227025c1e203ce6cf4175729f86e99953436e6b96060709de794da02046fd93e7e462003eebc","ssdeep":"3072:BFEr84Awjj03k4PV03C4PcpiXoLyEZn+3+6DvzZtpSBm6sRTbgQLcn4CQrixrb/f:BFNZgWPZn+3+6D9AH","tlshash":"d734bfebd63c9736a5e97b35968eb7cd1a8cbc93c848527826c3b54f53788e0706c205","size":243661,"data":"","first_seen":"2023-03-07T14:42:50Z","last_seen":"2026-07-21T19:46:21.375815Z","times_seen":2020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"75d0c362f42e59b2e639204c39cbd640","sha1":"5eff5ba1f60facadda329653cc193f06d69da789","sha256":"7fcca85aee4c33d8a7e8552bf10593a12a0b11401b8ec9df94c787f2141f923f","sha512":"1f439b61232c5cab2ea52995db0801ff6c4364bcf22917e216cd0d007c4a045642aa2d37aefdedb7df989bbf216dc7aa55a0247955ebcbcdcfbafde0ef5e3ffa","ssdeep":"","tlshash":"9d316806b2f601749533a02b16f7455b1a3a021f624a9b25f87e2dd40fe064cf3a029d","size":1473,"data":"","first_seen":"2026-07-19T07:15:41.508316Z","last_seen":"2026-07-19T07:15:41.508316Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a462550fe56a40a3167e5149ca5fd2b8","sha1":"dbb91050aaa2ccd3affc67aea411240f296e2777","sha256":"92a4ec88cda15c5504547682c2bd5458efe6249cbfcf7d0ab0ac5b95080f9579","sha512":"fdb790e5559c8950c9482343340063de24ac48524be4ac2a74d69fbf4226021737a861e6ac3af33308ccebcd08f4584bcf9d50de204ff0ed8fd53f6da85d2dde","ssdeep":"","tlshash":"f751e0de74b292a77ab3b1be76ef80906564411f8814c9003c8c63d02fa0ad5afe17d9","size":3099,"data":"","first_seen":"2026-07-19T07:15:41.509616Z","last_seen":"2026-07-19T07:16:38.95783Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b7efd4472c1160c81d1b66ee5457f04","sha1":"c54fa9cdfbcde9695cb51093579b1905ed85243a","sha256":"5ed4bf8d74fd40f7c7bc876332d04b7efd48704490ca805780c05804355b7c7d","sha512":"11dc4fcc5d4ef2114b3b84e22e96a55884e6c8e0480093eee5b08393dc357f212dc4a4f761eede2195be33734db1bf09ef38bcf1d354d5175874814bb0e87088","ssdeep":"","tlshash":"ede072d450b226b21a373a3ac28f7204b2b230876018ed003d0c0cf82fec8021499fab","size":334,"data":"","first_seen":"2026-06-08T02:32:48.53422Z","last_seen":"2026-07-20T19:19:30.199013Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"8df4c249f0eb0cb86f3028534816a92d","sha1":"c9adabd13d5d0584cba8fafa8421908d841524f4","sha256":"e01c9ce61a4b38b707f8dcddd0bb4cccbe7338c2e6430bed5a020c35dbd28f55","sha512":"eefbda1e05354ff97b1ebdeca206513a16e656130d0c1d9e551b3d940c490050b46756e49c541299143b6011f7a1706234e98db697d349699db6f841b82c6d4c","ssdeep":"","tlshash":"17c08c2e3ab6047f223731631d409b89e4220206c505bc823b6f43801fe38330ba2e61","size":169,"data":"","first_seen":"2026-06-08T02:32:48.535375Z","last_seen":"2026-07-20T19:19:30.199761Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"76c868e4cc5ef78bcdd47a464a1ae4ed","sha1":"88838045b0cd967178f7c69234734880a5c2ab12","sha256":"7e03a7dc0f752cf22c15267fd0c1fedd741e3fb2611ff1e22bde86f1e248ad51","sha512":"81c5e086fe1ca094cdff2241c26d7960628e8a4a49e59ecf4dafeee535ec75c5d381de4d740f1314c8c82f9fd80d2c37f5fd0b665163b9b393537b1d1261875c","ssdeep":"","tlshash":"e0e0828ce2a100715d22b0208e29a2c5a2b2b233ad0888313c0e0ec01f8842292e2ad8","size":301,"data":"","first_seen":"2026-06-08T02:32:48.536438Z","last_seen":"2026-07-20T19:19:30.200245Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b5f28cfad22592261e2c76d179d2716a","sha1":"f6702b91f25c970214df6e9573d6cc0cfe0030be","sha256":"80a16f43130941731d5456a235c00dec45718d6203b27a7d6a22bca6a7759e02","sha512":"8278fd4de8af3b279de62eb94490f0c1b2c2e873c6786a5df285f56f293b64280cf2de4b1bea201f872cd7a0909d2b1082ee5d8ca05558477c0c8caf59a70d6e","ssdeep":"","tlshash":"44e0c21a15b904b00167a28f6b5e9391b560808b7485a6d97a1e8a046f8d99944f82ab","size":320,"data":"","first_seen":"2026-07-19T07:15:41.51279Z","last_seen":"2026-07-19T07:15:41.51279Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5cddc2ade211521790cccea3d1f51433","sha1":"f7c760d448209d132c1b8c276c650dc4ef5d2ea1","sha256":"e8ec468293dbf1f4b97edc29cf7988678b19549bc5f22f3f82b01121a29149b3","sha512":"05a4e49cb89ee9ad2fc0c0088d175e4ac37b259c1323bd781278473b0e1cb85e8e089815ed52f060d39c5b6ae5ad24dd012a27e080ad73836b029e7b926bdd44","ssdeep":"","tlshash":"9d41cc1015f32624453b210fe7b7a725609a10777d3bc36a7a1e8f6f0fa2c70d97a688","size":2212,"data":"","first_seen":"2026-07-19T07:15:41.513941Z","last_seen":"2026-07-19T07:15:41.513941Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-22T07:22:07.898639Z","times_seen":262422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"caf7bdf0ce3f11830af1d3dd0dbf931e","sha1":"958a4413837457b5e3b66ca292736de8286eafa8","sha256":"b0de6c6e01a16a20bab373a1e7f7b5f3ad48d1b85210965d8c956319f8ac329f","sha512":"7838f953bfa1c129087cd76d5f7a05bfb8dbf7e308861450a3b64331380dac48e7f0417b1e42d58f3ae7cbe0a50eea81bb3db2035d3150c9b7d731ebaca926f6","ssdeep":"768:c1D7GzOol+D45YMJR3kWG6UdCDxgtmKg3vTpzaDNCY5R:YfGkWodCFgtmKgNzaxCq","tlshash":"a7d2f9a973511637a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a175734","size":29362,"data":"","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-07-21T22:43:12.238873Z","times_seen":11712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/golostext/v7/q5uCsoe9Lv5t7Meb31EcExd8hLxR.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.667Z","timestamp":1784445305667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/golostext/v7/q5uCsoe9Lv5t7Meb31EcExd8hLxR.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://growth-engineer.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22032\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 11:24:24 GMT\r\nexpires: Mon, 12 Jul 2027 11:24:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 589841\r\nlast-modified: Wed, 10 Sep 2025 17:05:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22032,"size_decoded":22845,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22032, version 1.0","md5":"2b8fbbb33a14fbeeacf0aa59c2ade5d0","sha1":"720bcf674bf6dbc96d0610955d8e747f8f827b39","sha256":"17d048ca05cb1218af3c0d6dcdf882989e6d1cc5dcb598ea50eaf54850ff7229","sha512":"3b507da758adcf5fe53af69b5cb149ce786327cdd786cd84fd4122dce460baa4aea632ec67c44062fe0ac325d53f101ea3f21ec3fbbdd82469b9a8ca8f89d9b4","ssdeep":"384:YOWifOirF9fhbbSCzoEA20UALHUBM4jpwyYK2BlH8lUJ8atD1oYqtJiD:qimirF95bbSIAB7Gf+3K8pzhc6","tlshash":"d0a2d06c53bbed5dce6cc122b069ced52ad86d29c11158c78e5a272edb0df317b5004e","first_seen":"2025-07-04T13:22:13.992977Z","last_seen":"2026-07-21T07:37:00.051611Z","times_seen":209,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":53,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/img/i2.svg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.518Z","timestamp":1784445305518,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/img/i2.svg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1286\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-506\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1286,"size_decoded":1625,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9106f509aff5110967fe8ea8775a5f6d","sha1":"6b57cf9b23b70cdf41f00b40870ef798e62e9174","sha256":"c0182373fdd19f5e6cbc98b80e14f173479ee782082b0e6fc20d547563b62860","sha512":"2b548e0e394ea7b1982124d8b2325546c8716fbaa97ce663a9b727b56e1e0d38484de330fd82715b4a8b728e31f02ddf949be3dfcbb7d19e30c6744e256d0f70","ssdeep":"","tlshash":"82211deb93dea3d1820aefd4da2b3814722b26f6ab1cd680d3947a19342409e4948c85","first_seen":"2026-07-19T07:15:41.463542Z","last_seen":"2026-07-19T07:15:41.463542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":60,"dns":1,"connect":18,"send":0,"wait":18,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/img/_12323.jpg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.510Z","timestamp":1784445305510,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/img/_12323.jpg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 181400\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-2c498\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":181400,"size_decoded":181740,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x1280, components 3","md5":"9bca7d728de8ec8f04f924699b6a0ef4","sha1":"f55632894869cf63c227917334273140bd7b2f54","sha256":"0ce89c7d3c13be8fec15ec0ed35728615b83dd68e7d65ec2116bb89c30eb02a2","sha512":"f1e85d3e622d1b1ce7f4f67c4a27160a712e5558b18670c390c8d3e907d92619f75844b7c54173b736c8372d594622cf5935b02560f220c2c1fe8309d63b7a35","ssdeep":"3072:XesHnw0embSBuNdL9+IVbBHfKD+p56Kb2qy3aMsJI99oixT8:OanVemb1bLhVVHkKb2uMZr8","tlshash":"3204228aea408f33d32b95be74c92520bedac88dddb257951b4e164d367db4138b04e3","first_seen":"2026-07-19T07:15:41.466148Z","last_seen":"2026-07-19T07:15:41.466148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":63,"dns":1,"connect":18,"send":0,"wait":36,"receive":63,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/img/arrow-right.svg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.511Z","timestamp":1784445305511,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/img/arrow-right.svg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 422\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-1a6\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":422,"size_decoded":760,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"13d4a16c34bb894c2a478e62c25b3fb4","sha1":"abb5a9e95288d25b8b0f17540399cc679ee81090","sha256":"74c272da5707f70b8fb378580979c8d97f824f2b6f270f0187a3439a2692d4e7","sha512":"10056cbd6030da44ff2ec42907d9f24c33ceaa954bd5385787eac9ae7925f040590f12e23722295e7ae0101765ed9b4c271732ee89d9c25aa10d5efc709ca332","ssdeep":"","tlshash":"c4e0aba2614ce10f890c6245251c306b60b872c55f881884fa80227bb23e0d2ae303cc","first_seen":"2026-07-19T07:15:41.46904Z","last_seen":"2026-07-19T07:15:41.46904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":63,"dns":1,"connect":19,"send":0,"wait":18,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/banks/7.svg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.726Z","timestamp":1784445305726,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/banks/7.svg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 8180\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-1ff4\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8180,"size_decoded":8520,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bea453428e1e770bf696c4744df2626f","sha1":"d0389e316d1754a2bfaa05e71ec9facb4adb4fde","sha256":"958a1e270f6628eb8459ae3d602e572adbc4d43b76ebf7578aee3bb65517923f","sha512":"5441dc31d883cc61840db181a779154b999c2c96318f989662b33e5514efadda9486b0f3b41cd539e3cd86650a96496ea679a05e51e0abeb372449d4edf25035","ssdeep":"192:e9JT8bnEwOdV9MSfXnz9QyT+0LTMbflJIH/:e9R37OSfXz9PzElJIf","tlshash":"b0f1a7f027b566d89587def8dd336410ae6e2cf96fd1d3c8c358ae2059652c9cc85c82","first_seen":"2026-07-19T07:15:41.471779Z","last_seen":"2026-07-19T07:15:41.471779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/banks/8.svg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.728Z","timestamp":1784445305728,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/banks/8.svg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4248\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-1098\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4248,"size_decoded":4588,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0451ef23a3f1653bd2cab2d3d8f0f521","sha1":"cab9df9acfdeaf1981073e6d706739bd72426d92","sha256":"5b2f9be01de04224177beb4b4c35720588b97d0273ec9c3a4ad986431ab14a84","sha512":"c4742a9b7b112f34446fb973d63f1acfeb3e3e9985d97c2509cc17b46c26d73c4cf558ac2e8aaa57c8f44e33a23696e8646a6e9f9c39b17b59fb62b3b03fcabf","ssdeep":"96:4mGAWa2kT0FwGnF743ItQa6Hzr6jdAyhwh0v21CAB4h:OtkoOE43/vr6jYYA+","tlshash":"7e91c7e43325c2c43a0a5a6dc937243241b318f9ff96c2e0d1817bd1bda41e98c78de5","first_seen":"2026-07-19T07:15:41.474484Z","last_seen":"2026-07-19T07:15:41.474484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/img/i3.svg?v=4","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.519Z","timestamp":1784445305519,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/img/i3.svg?v=4 HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1831\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-727\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1831,"size_decoded":2170,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df36b86e5dc585f2446eb06a9d63d4b0","sha1":"c7cd5752453d0caebfb531047a3a43d87982ec3b","sha256":"55e8427d6ec2c2ced91d61c7b294d0f220dd553aad44c2c64a06bc187c40ad9e","sha512":"eca8c904416bb7f7bbfd45eeb24bb9000bbfbfa9623298450bfee3bf1f495a808dd3600937d8dcaf989183e3fc9bcd8b7b3a62ee003764632742a6e902b767bf","ssdeep":"","tlshash":"d03185a186d8d2d5a30193c4db336421732b60f5bbbada48d374ff55bc2c4ad898cc89","first_seen":"2026-07-19T07:15:41.476857Z","last_seen":"2026-07-19T07:15:41.476857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bebas+Neue\u0026family=Golos+Text:wght@400..900\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Onest:wght@100..900\u0026family=Roboto+Flex:opsz,wght@8..144,100..1000\u0026family=Roboto+Slab:wght@100..900\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700\u0026family=Wix+Madefor+Display:wght@400..800\u0026family=Work+Sans:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.494Z","timestamp":1784445305494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Bebas+Neue\u0026family=Golos+Text:wght@400..900\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Onest:wght@100..900\u0026family=Roboto+Flex:opsz,wght@8..144,100..1000\u0026family=Roboto+Slab:wght@100..900\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700\u0026family=Wix+Madefor+Display:wght@400..800\u0026family=Work+Sans:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Jul 2026 07:15:05 GMT\r\ndate: Sun, 19 Jul 2026 07:15:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64288,"size_decoded":4498,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"587807763a04752a3872afb6366589d3","sha1":"7b5b374cedb9306aec1a96f380828be285ee2530","sha256":"9a52945eda9e7183149f8153db09e3a8e062b8ac402cf00fceadb5bbc2cdac6f","sha512":"71c2013887257e674680c7ce15922ed6ab47085abafcd8facde2deaa80dc7ab5f58687589e875f3e60636fbe96926a0eb9265f1589bb5920825dce3e3bd80dc1","ssdeep":"768:mCS58CiFyg2UfIUk+H00YNRYj7qce/HUDxjIosfY:mVCmw","tlshash":"e0532ea2041b9404eb834cd223cfbf36ee4e62557045c1b9affd19d9acead264364b5c","first_seen":"2026-07-19T07:15:41.479172Z","last_seen":"2026-07-19T07:15:41.479172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":37,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/img/gerb.svg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.513Z","timestamp":1784445305513,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/img/gerb.svg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 201991\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-31507\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":201991,"size_decoded":202334,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84716cb367edb953a731791a8890c594","sha1":"2d52cea093bac0dbcfc70153accac9aa94626b35","sha256":"4566b9ad33ac3d9bf32b3b8b57dde4a698d91186904358d6086a316f64340a1b","sha512":"5e526e256da46f8cf193745f4926622cfe5f9d92f139b0918cc1897b94f75593ec9ac7f30694a8966104419b4ccdbfb72a59a9759abcbddc7b0f5bf9ba89d01b","ssdeep":"3072:25Dq7EniCo+f/jUQ2n2iutmP7HFC+YHi+:lE","tlshash":"5414549583ecc2f0f65e62b4ccb71d9a3b5574f76680b08c86a5bc01ecb3ed4a619e44","first_seen":"2026-07-19T07:15:41.481626Z","last_seen":"2026-07-19T07:15:41.481626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":61,"dns":1,"connect":19,"send":0,"wait":36,"receive":102,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.499Z","timestamp":1784445305499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 07:15:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8889\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 21 Oct 2020 12:48:14 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vW%2Bl6UwcOBBMr83Bi9FPeyKsL%2FvWMVCXY%2Fr7c1k32m8AEyGgLvq8LO1RDCmpKSMN86gnIL7b6wsqQWMzNrFOwXFr9Hld2BRLxwUMTs8Rl%2BCz%2B%2Fgk0H6hdOYrdx%2B4uN5v6H5xx7O5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1d7eed77e3f56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29401,"size_decoded":9901,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26959)","md5":"caf7bdf0ce3f11830af1d3dd0dbf931e","sha1":"958a4413837457b5e3b66ca292736de8286eafa8","sha256":"b0de6c6e01a16a20bab373a1e7f7b5f3ad48d1b85210965d8c956319f8ac329f","sha512":"7838f953bfa1c129087cd76d5f7a05bfb8dbf7e308861450a3b64331380dac48e7f0417b1e42d58f3ae7cbe0a50eea81bb3db2035d3150c9b7d731ebaca926f6","ssdeep":"768:c1D7GzOol+D45YMJR3kWG6UdCDxgtmKg3vTpzaDNCY5R:YfGkWodCFgtmKgNzaxCq","tlshash":"a7d2f9a973511637a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a175734","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-07-21T22:43:12.238873Z","times_seen":11712,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":2,"connect":18,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/img/logo-gi.svg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.508Z","timestamp":1784445305508,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/img/logo-gi.svg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 8741\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-2225\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8741,"size_decoded":9081,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b430a84f750e974b7080c27b788489fc","sha1":"1805fa46426525b7886031680aa1e7a53839a787","sha256":"9b00e9810f3aaf84d3d9a748d6425e0821652b25cfd1118fab0f42f74d4cb312","sha512":"f6c4617eefac93da583d03822cd10b16bbdc676154054e614c201e64e27645bce3a3bd7987da47ac41e060fa549da84702144fda3a3fb6fc33b9dcaa0dc76b13","ssdeep":"192:RAb0n8N+8gPSaGYrqRuknSwen6McF9ZmupKuiqaVh9z3:AqVPSRYruukBM6McnZNM1vVXD","tlshash":"a802c8cc737896f9d888b3eaef12b478390775eaa2068974c3695e1ca44587d8c58cd3","first_seen":"2026-07-19T07:15:41.484892Z","last_seen":"2026-07-19T07:15:41.484892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/img/flags.png","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.888Z","timestamp":1784445305888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/img/flags.png HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 07:15:05 GMT\r\ncontent-type: image/png; charset=utf-8\r\ncontent-length: 70862\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 21 Oct 2020 12:48:14 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ItR1EUov1a3Hxc5aZJmrhOwAI3RqLlOPXi94jjn2v8hY0zEgOGtsRsuE7mJQjgxn4XgXpIHuqeTdXLwbXWvavsfSPELnvBI3X9YBCNuL3xOvBIuW14w80Mz8qiP2i9UMH811ctn5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a1d7eed9f83356c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70857,"size_decoded":71845,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-07-22T05:43:01.969148Z","times_seen":25106,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-19T07:15:04.782Z","timestamp":1784445304782,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:04 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Encoding: gzip\r\nExpires: Sun, 19 Jul 2026 07:15:04 GMT\r\nSet-Cookie: _subid=18uumd01elelr; expires=Wed, 19 Aug 2026 07:15:04 GMT; path=/\n7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; expires=Mon, 20 Jul 2026 07:15:04 GMT; path=/\n_token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971; expires=Wed, 19 Aug 2026 07:15:04 GMT; path=/\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/7.4.33\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":27392,"size_decoded":8255,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (787)","md5":"7e813868a504cd0548f84553eaf59093","sha1":"0e0c126e6e18d34c80c4a1a1db3d3215002d5bdc","sha256":"fde545991287192fd8f422ca96c1aa6fc225376c46cc886515276af94d517f27","sha512":"ff42efb8d96b95079f6a0ef85b17f76dfd592639ed866b36d325a6c5e02a7edaedf71267db4e53677c3ef0dfc2e318d2c6d909d0b05d858263dfd697b96dec64","ssdeep":"384:UTrLgU08iOfp5Lswg1b3E6ngFp7VuRefVj5OESOLOm7gI47iM:4nB5LcE6ngj7VuReflLgIQp","tlshash":"a6c2311091f704671023f0f7aa576b063ce2807fbf52960176ac1aed2fd2d58da6368e","first_seen":"2026-07-19T07:15:41.487601Z","last_seen":"2026-07-19T07:15:41.487601Z","times_seen":1,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":85,"connect":18,"send":0,"wait":40,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/css/main.css?v=442341153423426423","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.492Z","timestamp":1784445305492,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/css/main.css?v=442341153423426423 HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69aec1ca-323f\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12863,"size_decoded":3160,"mime_type":"text/css","magic":"ASCII text","md5":"79079437ae3d1806eabbf1d9c29aecd1","sha1":"bdd53b4014509345aaea45d401d4e28381223b0f","sha256":"a77753b90cd3a528b96719f4ee979aff99b1ca895bfbb2cec8803ebe70afb106","sha512":"5d5ba6a898c8d6f60deade0b4d8043b8741eb8890f5e581634e858762b1724b4654e8ba6d9cc1cf4887be34bcd42633c45898c32dfa88a0b946d8108b8ee1c8f","ssdeep":"192:uIzf0hxuNKAygjiFlVOnC7OoMAr1bRRbIuQPSX+AAnC4fKnlCoF/P5riLzB:uIJugjiTcMfFXbAnC4YCoF/cB","tlshash":"6742f04b76b50004b40bd8a87aa36b96721cd003d24fdd797ae5706cefce1d955b2b8c","first_seen":"2026-07-19T07:15:41.489477Z","last_seen":"2026-07-19T07:15:41.489477Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/img/i1.svg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.516Z","timestamp":1784445305516,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/img/i1.svg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 921\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-399\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":921,"size_decoded":1259,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e729e4db6cfe7b27ddd46a1c7fb3abc8","sha1":"5e73f1a631139a4222742b0c2c458718ea2ae66d","sha256":"da4449a16e686a39252792a5023fc23684c2e05bcb30d0178ce54e0e77d150aa","sha512":"9fcd6745580d23bdbce9c12eba993707c8d2ee4ab5d3d474e041ac462d8c0cf68582368aa12cfa045a74d0f6eef0cba787d0d134c9b65b129521d5c29cfc6d5f","ssdeep":"","tlshash":"3c1110b193ec47a20f034716ab5e4720a42f62e4420cda58e274b37d3cb806b0b88ec1","first_seen":"2026-07-19T07:15:41.491478Z","last_seen":"2026-07-19T07:15:41.491478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":61,"dns":1,"connect":18,"send":0,"wait":18,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/banks/1.svg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.702Z","timestamp":1784445305702,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/banks/1.svg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 37317\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-91c5\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37317,"size_decoded":37658,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e60f534bafb40d32625df9a752ed0466","sha1":"642eeb859a396b57acd7216648d2f69fabc78465","sha256":"c9771fa90076216bd0961786a9b48129f2ef5c81843b32178acfd5479f86c9aa","sha512":"0ee230cf83a89bb400fa0eb64ff48e8cf6093fececb0db235eb74a2912699c3cf191415691c2d0401c40fc5647f4c1a43f73d3583f20decf341f100db230dcdd","ssdeep":"768:aIf2Ooi15pwC8/gOwKUooT9U07gwAGVrikXIMFxRLtMon:aIFDOo57GmXILS","tlshash":"23f2e8f031b9c1e01547ef64ee375892992e2cf9afc9a2ed4190dd78a0391e6cd85cd4","first_seen":"2026-07-19T07:15:41.492943Z","last_seen":"2026-07-19T07:15:41.492943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/banks/3.svg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.712Z","timestamp":1784445305712,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/banks/3.svg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 11304\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-2c28\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11304,"size_decoded":11645,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"997f5f8a15ed8662bd7ee59e625555bf","sha1":"e5e326d6067004660b2485610545207c640902c8","sha256":"1d74b22901e24290d63d9ba213a5dae68374da80ca5314ddcd98d93dc98d0639","sha512":"2c9b8feddd44745223ea3eac2ea95a14f0b2c469c114cfd5862de4946267e501fcab543fdcc3f562783fd55087229395e767a96527a369f7630f637dc71fb5e6","ssdeep":"192:umUBJooDJR+3QMpBmVt39h5EzxSyCW003eeCWBztLqAxr6m8DgpJFzhuslEl7jcb:umOoJpBc3FEFPP00utWvqcr6LD4zcl7A","tlshash":"7132e7f033a0d2d8a843eba9ce332462ba673cf97f60d9d881946d51a464195ddedcc3","first_seen":"2026-07-19T07:15:41.494168Z","last_seen":"2026-07-19T07:15:41.494168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/banks/5.svg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.722Z","timestamp":1784445305722,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/banks/5.svg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 7902\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-1ede\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7902,"size_decoded":8242,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1abb374db02035e1677d68d2339f54e6","sha1":"d6f2e6804ebfbbafd3aeca1ba597f83e478c39f3","sha256":"fcdf22b81aad4afb7d0965bc8ddd2d2e6e76475a79d419564adbb8995b6d0215","sha512":"d5e2c5793f35fa47288385effa14dcb2b7033e10ad991d1216dfce9737413458a520fda84f49a2e2954a9db53a89026244791aef19b63092fa92668f70cee8ea","ssdeep":"96:0waG4jj3LWAs+4vkpcvbokGbzKPol57BUSVUUr1H7LEwXbtyyiNEDzfQkhv:0cAarDGbmoj7BUor1bnAyiN+zfJhv","tlshash":"31f1c5e37389a3d4e107e775dd3255657a1f2cf83f93439882a0ee9464a5198cd89ce0","first_seen":"2026-07-19T07:15:41.496126Z","last_seen":"2026-07-19T07:15:41.496126Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/fav.png","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.920Z","timestamp":1784445305920,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/fav.png HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/png\r\nContent-Length: 1970\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-7b2\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1970,"size_decoded":2305,"mime_type":"image/png","magic":"PNG image data, 42 x 46, 8-bit/color RGBA, non-interlaced","md5":"7a5afcbba55ea89a4be80460a6bad83f","sha1":"846e9fded7d8c55f5e516fd111a8fc6c954358f0","sha256":"8fcc77d539dafc8391f5a80f5e429333e8113b87ba2695705968e6f4ff4c32eb","sha512":"3eeb38bddc07efb065d3498cf15219fee5fc778c7fd562329c8faf6fc72b420b2767f87151a5b8a1e5996a1b7a1d825d2877e71155e2ae47fa6ea8077c02e076","ssdeep":"","tlshash":"4b410cc2879c156dda0a5632d5ef1621d926cf8353cefe0eb9ac48731f021d11a4b56e","first_seen":"2026-07-19T07:15:41.498612Z","last_seen":"2026-07-19T07:15:41.498612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.497Z","timestamp":1784445305497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.5.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d84\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 07:15:05 GMT\r\nage: 3198286\r\nx-served-by: cache-lga21981-LGA, cache-bma-essb1270075-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 59934, 324745\r\nx-timer: S1784445306.533391,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30879\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89476,"size_decoded":31521,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-22T07:22:07.898639Z","times_seen":262422,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":10,"receive":3,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.503Z","timestamp":1784445305503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 07:15:05 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1970\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 21 Oct 2020 12:48:14 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMY%2F6LIp7G5ZxZ68Yk2CJ8%2BBDixdh12m5ufVYwucM%2BesxXcX9NAF9XUEzVJm9AZgoNrqOMsbHUkx3b62G8qlvvW8gzpp%2FEf%2BOVtk2k%2FRO5ZXx0iroDfHfQP6MrHTaFH5pp8%2BfjpT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a1d7eed77e4056c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25254,"size_decoded":2968,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a69aa970266649e0b08c2cb4bc166568","sha1":"d9314a52085a2bb6d284421bb18a4c546ecb73d4","sha256":"ad32b1248207ba91fb945a37d38e7c9deafcba849245872203482db42930d491","sha512":"8315a8c3c328eaaea92dad571ff09c1fc2728920c4b62c0957bf04f83f903f41156ac16cf30297ab5e86f022c3e022764a7a271ebe0b9bfc98d9f488dbe71b9b","ssdeep":"384:HzITF7FWhTmwAmDQTeIcQeIWi7mZlsaAaniXlvhdB:HqF7FWh/Hib","tlshash":"a4b236678bb32945b92bf2a1196406a237375c0bf81a4f2d63d639bddf490e014f37a1","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-07-22T06:29:32.658285Z","times_seen":29533,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.662Z","timestamp":1784445305662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://growth-engineer.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 04:26:33 GMT\r\nexpires: Fri, 16 Jul 2027 04:26:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 269312\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":50316,"size_decoded":51129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-22T07:30:00.163367Z","times_seen":22853,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":37,"send":0,"wait":61,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/banks/4.svg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.720Z","timestamp":1784445305720,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/banks/4.svg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1627\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-65b\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1627,"size_decoded":1966,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87a77fb5dd0ef2e25405a14acafd2908","sha1":"6a979d0416642b6243b80e309af09d9d9e848c6c","sha256":"77a843ddb115b47eb7867954b647752f5abaacbb11d33591a69c49ac44f5ee18","sha512":"068d3b82b358d8792ff2253c208cc09f5f5523e143b091359bb23d3f263e926ab1e1c26a928e6fd000f4fc97d3feb8c7522f85ede9b67f413665dd3b72d8562a","ssdeep":"","tlshash":"3b3114e2134f95cca4009b296d16e46486bf1cfd6bf18344cb152dad65b34ba4e549c0","first_seen":"2026-07-19T07:15:41.501886Z","last_seen":"2026-07-19T07:15:41.501886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/utils.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.502Z","timestamp":1784445305502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/js/utils.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 07:15:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 44414\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 21 Oct 2020 12:48:41 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vFeVFZDhgCJFDLzuOySObBlUm26X9bHtz6H0mBHqsUCTPGpNilwP9%2FOqBS7loQgtD6zrsoJ5lEXUHaPL%2F9u6M%2Bo7W63pWmEVrIBubmglk%2Fp8P6Z4fpnt8r1M2to8%2FRpVO896J5es\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1d7eed77e4256c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":243661,"size_decoded":45423,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e8a9b2127b0197d558dbbbcb99d80973","sha1":"cb793f12ac3b8f7ac9cc69c9581bc2dc5d439ad5","sha256":"cd5ab58bf994afd3ff9a1000a9a22c9619b08dda258ddb055e2d34bd41bd97e6","sha512":"b9f515fafb98229f2033351ad6c1d6dcad412908cdb5410cf72e227025c1e203ce6cf4175729f86e99953436e6b96060709de794da02046fd93e7e462003eebc","ssdeep":"3072:BFEr84Awjj03k4PV03C4PcpiXoLyEZn+3+6DvzZtpSBm6sRTbgQLcn4CQrixrb/f:BFNZgWPZn+3+6D9AH","tlshash":"d734bfebd63c9736a5e97b35968eb7cd1a8cbc93c848527826c3b54f53788e0706c205","first_seen":"2023-03-07T14:42:50Z","last_seen":"2026-07-21T19:46:21.375815Z","times_seen":2020,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/img/66.jpg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.652Z","timestamp":1784445305652,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/img/66.jpg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/lander/05e5518af06030249424676687624842/css/main.css?v=442341153423426423\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1139955\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-1164f3\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1139955,"size_decoded":1140297,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x667, components 3","md5":"2bd3d2f379de22da0ba73deb192b88cd","sha1":"2cf7c2a5c55b8f2203635299a1b3b35c11e5eca4","sha256":"a9ad812654c5e5050542ee333bdd21d7b58832667f9ec20094bef4930d2e6880","sha512":"d0b0f078c7e66ad6977ea3d2a6aa59cb2a66fabf6b761c0b004134a49b36adf27f50de78785a9955e0586903228314e46d53335d26cadddc7a76930fa1edb1d1","ssdeep":"24576:WPM0TME5P7ujZefNhbHKeQMwkreeqqvJ+ndIjCHf4l:WngAIeFhbHKtMwIeeqqInOjCgl","tlshash":"e625332644aa06c4f4da3637f08231ac358cf4b91b2af756f5c1b8be29d6fd198d2744","first_seen":"2026-07-19T07:15:41.503674Z","last_seen":"2026-07-19T07:15:41.503674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/golostext/v7/q5uCsoe9Lv5t7Meb31EcExN8hA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.663Z","timestamp":1784445305663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/golostext/v7/q5uCsoe9Lv5t7Meb31EcExN8hA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://growth-engineer.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37916\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 11:24:24 GMT\r\nexpires: Mon, 12 Jul 2027 11:24:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 589841\r\nlast-modified: Wed, 10 Sep 2025 17:04:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37916,"size_decoded":38729,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37916, version 1.0","md5":"f57df9832ab83bf91a061f5aefa40bcf","sha1":"6e2de38ea08345e2277ef0ad3370b39c9cb02a7d","sha256":"9a69d0aa4734c4022224c002a3d944a702e0204972a49d892789f5668b922c2a","sha512":"e1afe37a6e29bc53591334f05c07f8dc6f594553458b9776b2f2f98b02d98d82ea07539bf01893be888e1d34eb86dc0f02c0f119a0d5fdf20df8445dc47554c5","ssdeep":"768:WNAXJQnqshonNUWosP6nHULUaU5aZka9Q6Ktvo2FAyBt+P95gG3J:WNAXenlhonNUXnQ5ZkaNKq4t+P95h5","tlshash":"c403e2dff9886f9edb156e3e471057f4361dacfd3b45a22e801602cb0860a5af56d089","first_seen":"2025-06-04T07:56:28.678151Z","last_seen":"2026-07-22T05:43:01.992579Z","times_seen":679,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":35,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get.geojs.io/v1/ip/country.json","fqdn":"get.geojs.io","domain":"geojs.io","tld":"io"},"ip":{"addr":"104.26.1.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.689Z","timestamp":1784445305689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geojs.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 09:05:21 GMT","end":"Sun, 13 Sep 2026 10:05:19 GMT"},"fingerprint":{"sha1":"B3:F2:DC:EC:52:71:F9:79:D2:00:8E:C8:AA:A1:86:8A:C1:E3:43:88","sha256":"11:6A:66:F9:3D:73:5D:D0:5E:A8:3D:AE:47:BE:47:E4:A4:52:BA:81:19:C0:F1:09:0A:1E:E0:7D:58:D9:26:39"}}},"request":{"raw":"GET /v1/ip/country.json HTTP/1.1\r\nHost: get.geojs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://growth-engineer.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 07:15:05 GMT\r\ncontent-type: application/json\r\ncache-control: max-age=0, must-revalidate\r\nlast-modified: Sun, 19 Jul 2026 07:15:05 GMT\r\nx-request-id: 5e955bc0ff89030a19db80f741f58f47-ASH\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ngeojs-backend: ash-01\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9EaYWw7FrnHxbvCHpHwttwvWNgO6%2BkYGjREw2Nxfh%2BhRt8Nv4DvDJ9cjnGrksZJSGh3G2DJeKPzEZmCBpZwHdwh7BsZE3IAAHiPurKTm%2B9HaB%2BQ7l0IkU%2BKT4Yr4Q%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\ncf-ray: a1d7eed8dbf2569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73,"size_decoded":983,"mime_type":"application/json","magic":"JSON text data","md5":"46a6a0cb45e9fe8a937c1d379f58d2c5","sha1":"055617a08af5aa9a2aba05aa432407288c559367","sha256":"b09f253b6d83ab759c733d9bc894d8ab857dc68b5f1d96f91dbdb764ef816f37","sha512":"9331a0d3aec182cd05fa258fd0bdacca9d1a6d8a1d329d54b2f921435932c0f8d91b1bad9e7e82b118d21f754cecdc340b159d2b1d62a530349d6991b1a5dca5","ssdeep":"","tlshash":"32a0019e24a28b589860d2a5248a61a59586e64292aa6d0692c83b69da402dc6401271","first_seen":"2026-06-07T21:04:41.962532Z","last_seen":"2026-07-21T18:32:41.707497Z","times_seen":211,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":15,"connect":27,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/banks/2.svg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.706Z","timestamp":1784445305706,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/banks/2.svg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 7860\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-1eb4\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7860,"size_decoded":8200,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4fe15e354f4713290179b37fd737cf3","sha1":"32ece2970a31f2c50f9c85f0a85c9a577166a5bd","sha256":"7775c2f713bd0130ab4931cc48b04358085b18bbf10724386c1eb3501dcc1ee1","sha512":"8e2ce5a47d5b186d9237d82a7fe5eb2add65369fa68e2e063dfcb560ecf2dba52bee6ecf96f7efc9e0ce88631b7ecf7561b30b6a82a44aa9c09fd56e0db480bb","ssdeep":"192:1iQRQoQRQ+QIE00HCQshbZ/LIwGnuR36FvYxzYbNByoud96JOKDvyTSR:1z2N2vfHCQgZ/EwGq32aYxXujBMy2R","tlshash":"37f175d4a1e085c0bc4befe9de3728e1135f24f83f5982d4ca55aed8a5101b88de9cc4","first_seen":"2026-07-19T07:15:41.50617Z","last_seen":"2026-07-19T07:15:41.50617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growth-engineer.icu/lander/05e5518af06030249424676687624842/banks/6.svg","fqdn":"growth-engineer.icu","domain":"growth-engineer.icu","tld":"icu"},"ip":{"addr":"77.90.185.84","port":443,"asn":215476,"as":"Inside Network LTD","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growth-engineer.icu/","date":"2026-07-19T07:15:05.724Z","timestamp":1784445305724,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growth-engineer.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 18:33:21 GMT","end":"Wed, 07 Oct 2026 18:33:20 GMT"},"fingerprint":{"sha1":"12:B7:77:E9:8F:46:C0:BF:7E:2B:03:41:C1:8E:1E:1A:54:43:F1:17","sha256":"D6:FE:BB:9F:01:67:61:F7:36:72:E3:99:FD:BA:EA:0A:F3:86:2A:BB:87:83:2F:14:06:1A:90:7A:B8:A9:FC:5B"}}},"request":{"raw":"GET /lander/05e5518af06030249424676687624842/banks/6.svg HTTP/1.1\r\nHost: growth-engineer.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growth-engineer.icu/\r\nCookie: _subid=18uumd01elelr; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwMDdcIjoxNzg0NDQ1MzA0fSxcImNhbXBhaWduc1wiOntcIjY1NVwiOjE3ODQ0NDUzMDR9LFwidGltZVwiOjE3ODQ0NDUzMDR9In0.Xt_pVqSftj34ofWhW2zMQLRdeYkg6CLgKVSUNrSihbw; _token=uuid_18uumd01elelr_18uumd01elelr6a5c7978e6dfc9.36358971\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:15:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4954\r\nLast-Modified: Mon, 09 Mar 2026 12:49:14 GMT\r\nConnection: keep-alive\r\nETag: \"69aec1ca-135a\"\r\nExpires: Wed, 29 Jul 2026 07:15:05 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4954,"size_decoded":5294,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d729a40708362ad3d84d676042962db","sha1":"7fee8982b78fa6d345b372cb79fbe40c585ad035","sha256":"56714f858d79ea2873cd8944a1ae55ea67a1b829474404e9bab9a5b1a5a851fe","sha512":"359022ff0741ffa9e81447474b74ffe2789a3596353efa1ee4ee8dbd4ef35c75aa9f24ce4fee9d27ae272109556b2cf22355d742a91a2d3a65762108f77f2fda","ssdeep":"96:F8vqWkFianMU2pr5+RSVDrhLAFuLny5X1NWdpUFwI2ehgaevgmFFH11o+EVxSP:mSWkManMU2pZDnyh1NcNrh11o+8c","tlshash":"31a125e7b3e8b2d0d142ebe5862ad27939b334be6a20d7ad02c479946d1045eccdccc5","first_seen":"2026-07-19T07:15:41.507296Z","last_seen":"2026-07-19T07:15:41.507296Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"growth-engineer.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"growth-engineer.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}