{"report_id":"bdbb8706-78d5-423c-b4fb-0aeb657ee81c","version":0,"status":"done","tags":[],"date":"2026-07-23T04:41:54Z","url":{"schema":"http","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":0,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/complete.php","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"title":"Download Complete - Adobe","dom":{"size":5240,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8c3ac2463f482bb6d0c3a36d231881be","sha1":"adae26d94c1c45c4d2bdf5ce8a7081aab1f4aff2","sha256":"5605377165254ec88d6f3600217569f1c8ad0a1a1e296f07e478e3fce05f5597","sha512":"1d6d84df7246d9e7bcd59a6ed5c1c3223f228ba4c5568c244306db2cec70b701a40864b1196e04efe436fc4e49bba4eed881e61979b97246a06be6281e6a7dc3","ssdeep":"96:nBryxH20Hx4VRyQE7kEPipvp9Ot3VNbg+Xlo:BryxW0GVRyQEHQkPlo","tlshash":"5eb1432a86f3111a654390a5bfb26b9627d4d903d247ca593bed529ccfc6ec1c8e334c","dom_hash":"domhash924073265b961a0aa1c4838a7c29acfe","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":0,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T04:41:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-23","alert":"Detect files is `SliverFox` malware","trigger":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/download.php","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"huoji","date":"2023-12-25","description":"Detect files is `SliverFox` malware","rule":"Detect_SliverFox_String","yarahub_license":"CC0 1.0","yarahub_reference_md5":"CDD9564A48975F25E846BD3DD3B958EF","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"e4cc5dd0-c314-41c0-8bcf-abb5b6b228fa"}}],"urlquery":null},"summary":[{"fqdn":"cloudadreader.com","ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"domain_registered":"2026-04-07","domain_rank":0,"first_seen":"2026-04-07T17:37:32.12691Z","last_seen":"2026-04-07T17:37:32.12691Z","alert_count":1,"request_count":13,"received_data":18060111,"sent_data":9023,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":1,"received_data":5476,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":2,"received_data":17252,"sent_data":1116,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"82f9f7e9a655afa58c70204f74d9bffb","sha1":"58170a244ffbf4ceb2a23a5a26c70987a70c1f76","sha256":"dbf75bea5bebfff4ff7beabdceb0b7c314dc3da0bdce34622173f053dbfde9e2","sha512":"1c3d9f76a2a4179cf1080b0f6248a0d97bec9adadf1eb2cf366939a8ff87987f441f2af89282e7ec97493471a24a127cb285b68435c4cf7f45addd015edc98d6","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections","size":17896424,"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/download.php","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"archive":null,"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-23","alert":"Detect files is `SliverFox` malware","trigger":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/download.php","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"huoji","date":"2023-12-25","description":"Detect files is `SliverFox` malware","rule":"Detect_SliverFox_String","yarahub_license":"CC0 1.0","yarahub_reference_md5":"CDD9564A48975F25E846BD3DD3B958EF","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"e4cc5dd0-c314-41c0-8bcf-abb5b6b228fa"}}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4682f478ded2df5fe07997f375a54f7","sha1":"25c8ca9ae5aa6f8cd19f2926906cce7038f26dc5","sha256":"7df1f57568a702894ff384d4e427163bfd2e2e3c272ecf8f29ee75ec7c2b5cd5","sha512":"4b5700d44bfeba994587c4d91ac9d8f7f8a9541e9e47f5d2e97c05346bc003962b8cc763dadbc5a60bca472b7d5a620271a89e4498025f4d495c628efaab00d4","ssdeep":"","tlshash":"a621e11930aa20261653f9688b4fa0063133401b584ada80f89d9788af17239527bede","size":1372,"data":"","first_seen":"2026-07-23T04:42:01.533372Z","last_seen":"2026-07-23T04:46:37.3321Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/download.html","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"589235c5037f13bd5e6ccc911b70bbba","sha1":"141d8b086089f1b65e574f5af5c63e64ce8a5b70","sha256":"4c9d75628312b04e7226b1e8ac28d9e432630f67b325939b6685b5fc7941ae15","sha512":"ed98cdd1b477bf96dcf7f4da0bfc1dc2a0449abe678647bb3e0d48aa41f00a9c820308d8536fd9de1d3463c8685acccc1f76e09249021c9c32ceedc5f605554f","ssdeep":"","tlshash":"47317c2e67b701284f577ca7875e2248762a1017340bc6243dac49d8afe1f46c4b6fea","size":1862,"data":"","first_seen":"2026-07-23T04:42:01.535809Z","last_seen":"2026-07-23T04:46:37.332851Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/Adobe.webp","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/download.html","date":"2026-07-23T04:41:20.247Z","timestamp":1784781680247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudadreader.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 12:47:32 GMT","end":"Sat, 05 Sep 2026 12:47:31 GMT"},"fingerprint":{"sha1":"B2:FA:FA:28:E2:6B:64:63:22:8A:E8:FD:8E:4F:D2:9C:9B:71:D3:D3","sha256":"82:14:07:66:95:EC:8F:AB:01:76:EE:35:4B:4B:1F:78:71:EB:6E:13:4D:28:51:67:EB:99:8F:8E:6A:BF:E5:F0"}}},"request":{"raw":"GET /auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/Adobe.webp HTTP/1.1\r\nHost: cloudadreader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nlast-modified: Fri, 20 Feb 2026 20:07:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11916\r\ndate: Thu, 23 Jul 2026 04:41:20 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11916,"size_decoded":12104,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4fb5f25277c6991be7973840aa313ee1","sha1":"4f01a6d264972b5f617d3ee391bbd997698df1e4","sha256":"df1091f2176b93695d27fa7ade61679adef97b9a2fedf1ac2550dfa864282ccf","sha512":"25cc1d5f26499339bd2cb23e09edb0c1ee0f635e733294bfe3b700bb7779b1c49fe4b6285afce60ed327f058e3de2335306af6fa394863593e1e667d2d5ca6e1","ssdeep":"192:x/BH6btVM9n5BQ/St1L2+TYJ0pe1s5F2zlclBI8nyr+wlqLmJuPp5xLOjzXmQQqM:x/Ci95S/St1zYJYeeXFI8nI7lfsPRLsM","tlshash":"e832c06fe74af226071c1c333be12eafb1c353a0145a619ecfa767b25d0012151d766a","first_seen":"2026-04-07T17:37:39.848616Z","last_seen":"2026-07-23T04:46:37.326719Z","times_seen":9,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/Screenshot%202025-04-25%20161700.png","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/download.html","date":"2026-07-23T04:41:20.251Z","timestamp":1784781680251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudadreader.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 12:47:32 GMT","end":"Sat, 05 Sep 2026 12:47:31 GMT"},"fingerprint":{"sha1":"B2:FA:FA:28:E2:6B:64:63:22:8A:E8:FD:8E:4F:D2:9C:9B:71:D3:D3","sha256":"82:14:07:66:95:EC:8F:AB:01:76:EE:35:4B:4B:1F:78:71:EB:6E:13:4D:28:51:67:EB:99:8F:8E:6A:BF:E5:F0"}}},"request":{"raw":"GET /auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/Screenshot%202025-04-25%20161700.png HTTP/1.1\r\nHost: cloudadreader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 25 Apr 2025 22:46:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 50730\r\ndate: Thu, 23 Jul 2026 04:41:20 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50730,"size_decoded":50917,"mime_type":"image/png","magic":"PNG image data, 1919 x 905, 8-bit/color RGBA, non-interlaced","md5":"969fd557eba0534f7bbbc9568f3352eb","sha1":"c6efbbfd283cf69aa142355d77b67fbf83abdbe9","sha256":"b77fa58e6433a52e56d0d4ccc8656c630fe7ebb7a83ce698863651722a5f5e07","sha512":"2acc31e681ad0d5a113434a4b80ba7a5c4f068d282ebf372ef2d5e7f87f19a677d047486d0a2408097568ea2287dcef3fe5f0cb20c68df2c3d1d0e96f3ffe339","ssdeep":"1536:++rBcFGSBUpuaDEAxe18fYEYgwaU+W4NVYiwAg:++rBWhB4ueEAI/EYdai48p","tlshash":"6833af560d26c50aeca799397e72aff537010eec233883589bfcd0c157991f5ae409b8","first_seen":"2025-10-24T02:40:46.131091Z","last_seen":"2026-07-23T04:46:37.328281Z","times_seen":569,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/download.php","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/download.html","date":"2026-07-23T04:41:23.775Z","timestamp":1784781683775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudadreader.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 12:47:32 GMT","end":"Sat, 05 Sep 2026 12:47:31 GMT"},"fingerprint":{"sha1":"B2:FA:FA:28:E2:6B:64:63:22:8A:E8:FD:8E:4F:D2:9C:9B:71:D3:D3","sha256":"82:14:07:66:95:EC:8F:AB:01:76:EE:35:4B:4B:1F:78:71:EB:6E:13:4D:28:51:67:EB:99:8F:8E:6A:BF:E5:F0"}}},"request":{"raw":"GET /auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/download.php HTTP/1.1\r\nHost: cloudadreader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/download.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-description: File Transfer\r\ncontent-type: application/octet-stream\r\ncontent-disposition: attachment; filename=\"Reader_en_Install_rmm_v2.5.0.67_oidfd9b9388-53dd-4df9-b79b-656a1db459e0_fidjzmyWetQhEWTkR4jS1bJ3g.exe\"\r\nexpires: 0\r\ncache-control: must-revalidate\r\npragma: public\r\ncontent-length: 17896424\r\ndate: Thu, 23 Jul 2026 04:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17896424,"size_decoded":380,"mime_type":"application/octet-stream","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections","md5":"82f9f7e9a655afa58c70204f74d9bffb","sha1":"58170a244ffbf4ceb2a23a5a26c70987a70c1f76","sha256":"dbf75bea5bebfff4ff7beabdceb0b7c314dc3da0bdce34622173f053dbfde9e2","sha512":"1c3d9f76a2a4179cf1080b0f6248a0d97bec9adadf1eb2cf366939a8ff87987f441f2af89282e7ec97493471a24a127cb285b68435c4cf7f45addd015edc98d6","ssdeep":"12288:GBYnbSptJMnxwNQiDKi1tpKd/r5eCY8MQEzZXAMWzBPB8czDKiA4nxTruBGIUrEm:GBHzNQoHpKHMhZX0v/PI4lRIUrT5","tlshash":"be250181bec0f7aaeee45a71d82127f441d76cdcf574404b96a13e2a7332077c22ea56","first_seen":"2026-05-08T07:16:00.401345Z","last_seen":"2026-07-23T04:46:37.32903Z","times_seen":39,"resource_available":true,"data":null}},"time_used":1968,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":1807,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-23","alert":"Detect files is `SliverFox` malware","trigger":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/download.php","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"huoji","date":"2023-12-25","description":"Detect files is `SliverFox` malware","rule":"Detect_SliverFox_String","yarahub_license":"CC0 1.0","yarahub_reference_md5":"CDD9564A48975F25E846BD3DD3B958EF","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"e4cc5dd0-c314-41c0-8bcf-abb5b6b228fa"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/adobe1.png","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/complete.php","date":"2026-07-23T04:41:28.156Z","timestamp":1784781688156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudadreader.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 12:47:32 GMT","end":"Sat, 05 Sep 2026 12:47:31 GMT"},"fingerprint":{"sha1":"B2:FA:FA:28:E2:6B:64:63:22:8A:E8:FD:8E:4F:D2:9C:9B:71:D3:D3","sha256":"82:14:07:66:95:EC:8F:AB:01:76:EE:35:4B:4B:1F:78:71:EB:6E:13:4D:28:51:67:EB:99:8F:8E:6A:BF:E5:F0"}}},"request":{"raw":"GET /auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/adobe1.png HTTP/1.1\r\nHost: cloudadreader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/complete.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Feb 2026 17:50:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2520\r\ndate: Thu, 23 Jul 2026 04:41:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2520,"size_decoded":2706,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"907b7ad660b002a6b56e7a38700f023b","sha1":"3566ed17b372d4fd170115e5081fb454492b9878","sha256":"935897afed1be1e574386ad9b6b9afc4751c9c2d43717801cd0d68a552b6da24","sha512":"6633f3481f14f63b1c3bb99894220c56a20273b29bbb633097cc5a489e86f1c8bebf68d743f57316237223b677d3900e5a5af3eef23e843e0400d5e1c61bf8ff","ssdeep":"","tlshash":"7c513a7aa11601d184698f4a2dcd1120472e2813b6865347b787c7f4f3d97a2acb2a87","first_seen":"2026-04-07T17:37:39.845647Z","last_seen":"2026-07-23T04:46:37.327444Z","times_seen":9,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T04:41:13.879Z","timestamp":1784781673879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudadreader.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 12:47:32 GMT","end":"Sat, 05 Sep 2026 12:47:31 GMT"},"fingerprint":{"sha1":"B2:FA:FA:28:E2:6B:64:63:22:8A:E8:FD:8E:4F:D2:9C:9B:71:D3:D3","sha256":"82:14:07:66:95:EC:8F:AB:01:76:EE:35:4B:4B:1F:78:71:EB:6E:13:4D:28:51:67:EB:99:8F:8E:6A:BF:E5:F0"}}},"request":{"raw":"GET /auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/ HTTP/1.1\r\nHost: cloudadreader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Fri, 20 Feb 2026 20:38:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1250\r\ndate: Thu, 23 Jul 2026 04:41:14 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3290,"size_decoded":1679,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"916ce88dcdf6a6f677de6a2df18bc02d","sha1":"21207958cee56745654402a395b3effa29ed96c2","sha256":"86cb1821558c4b2270ed3cb86619bf8852433d422a08730c28fb7650cd7ab0e7","sha512":"7985dd1858f9cf04ce2da4abbbad9115a153f7ee7aee31c5fe21ea5ac0e4fc025389e330422f22a1cf54bb426dec6c28e490e7d2711d288d606abbc66ced1c0d","ssdeep":"","tlshash":"de61531a648464175133f3b4ef67b106fa73801746468580baec538f9fb2648c163fce","first_seen":"2026-04-07T17:37:39.853938Z","last_seen":"2026-07-23T04:46:37.324632Z","times_seen":8,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":175,"connect":158,"send":0,"wait":160,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/visit.php","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/","date":"2026-07-23T04:41:14.927Z","timestamp":1784781674927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudadreader.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 12:47:32 GMT","end":"Sat, 05 Sep 2026 12:47:31 GMT"},"fingerprint":{"sha1":"B2:FA:FA:28:E2:6B:64:63:22:8A:E8:FD:8E:4F:D2:9C:9B:71:D3:D3","sha256":"82:14:07:66:95:EC:8F:AB:01:76:EE:35:4B:4B:1F:78:71:EB:6E:13:4D:28:51:67:EB:99:8F:8E:6A:BF:E5:F0"}}},"request":{"raw":"GET /auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/visit.php HTTP/1.1\r\nHost: cloudadreader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 228\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Jul 2026 04:41:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":477,"size_decoded":405,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"2909828777a08ac8e2f61e91d052054d","sha1":"fb34e1d1f81214439acea719adb8a92c91535f02","sha256":"a18c03bba03ca6cbb7acdf43f5a0800d2c593f85a8361471d879917f9e3af4bb","sha512":"33f8e0cde4e7e1f0ee8e69200178f4f3f22eb7ee3832d1ede44ceb00bddcc27ee18a400d7ae2ab7630b73166f91b10abc848315d5c769f6186e4e28acb920121","ssdeep":"","tlshash":"c5f02e2e5351f371fa984043b36ed60465405dd7c82989ff3a23cc8fa4bc0b6535431a","first_seen":"2026-04-07T17:37:39.84475Z","last_seen":"2026-07-23T04:42:24.713663Z","times_seen":3,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":687,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/adobe1.png","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/","date":"2026-07-23T04:41:15.093Z","timestamp":1784781675093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudadreader.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 12:47:32 GMT","end":"Sat, 05 Sep 2026 12:47:31 GMT"},"fingerprint":{"sha1":"B2:FA:FA:28:E2:6B:64:63:22:8A:E8:FD:8E:4F:D2:9C:9B:71:D3:D3","sha256":"82:14:07:66:95:EC:8F:AB:01:76:EE:35:4B:4B:1F:78:71:EB:6E:13:4D:28:51:67:EB:99:8F:8E:6A:BF:E5:F0"}}},"request":{"raw":"GET /auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/adobe1.png HTTP/1.1\r\nHost: cloudadreader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Feb 2026 17:50:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2520\r\ndate: Thu, 23 Jul 2026 04:41:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2520,"size_decoded":2706,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"907b7ad660b002a6b56e7a38700f023b","sha1":"3566ed17b372d4fd170115e5081fb454492b9878","sha256":"935897afed1be1e574386ad9b6b9afc4751c9c2d43717801cd0d68a552b6da24","sha512":"6633f3481f14f63b1c3bb99894220c56a20273b29bbb633097cc5a489e86f1c8bebf68d743f57316237223b677d3900e5a5af3eef23e843e0400d5e1c61bf8ff","ssdeep":"","tlshash":"7c513a7aa11601d184698f4a2dcd1120472e2813b6865347b787c7f4f3d97a2acb2a87","first_seen":"2026-04-07T17:37:39.845647Z","last_seen":"2026-07-23T04:46:37.327444Z","times_seen":9,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/Screenshot%202025-04-25%20161700.png","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/complete.php","date":"2026-07-23T04:41:27.992Z","timestamp":1784781687992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudadreader.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 12:47:32 GMT","end":"Sat, 05 Sep 2026 12:47:31 GMT"},"fingerprint":{"sha1":"B2:FA:FA:28:E2:6B:64:63:22:8A:E8:FD:8E:4F:D2:9C:9B:71:D3:D3","sha256":"82:14:07:66:95:EC:8F:AB:01:76:EE:35:4B:4B:1F:78:71:EB:6E:13:4D:28:51:67:EB:99:8F:8E:6A:BF:E5:F0"}}},"request":{"raw":"GET /auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/Screenshot%202025-04-25%20161700.png HTTP/1.1\r\nHost: cloudadreader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/complete.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 25 Apr 2025 22:46:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 50730\r\ndate: Thu, 23 Jul 2026 04:41:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50730,"size_decoded":50917,"mime_type":"image/png","magic":"PNG image data, 1919 x 905, 8-bit/color RGBA, non-interlaced","md5":"969fd557eba0534f7bbbc9568f3352eb","sha1":"c6efbbfd283cf69aa142355d77b67fbf83abdbe9","sha256":"b77fa58e6433a52e56d0d4ccc8656c630fe7ebb7a83ce698863651722a5f5e07","sha512":"2acc31e681ad0d5a113434a4b80ba7a5c4f068d282ebf372ef2d5e7f87f19a677d047486d0a2408097568ea2287dcef3fe5f0cb20c68df2c3d1d0e96f3ffe339","ssdeep":"1536:++rBcFGSBUpuaDEAxe18fYEYgwaU+W4NVYiwAg:++rBWhB4ueEAI/EYdai48p","tlshash":"6833af560d26c50aeca799397e72aff537010eec233883589bfcd0c157991f5ae409b8","first_seen":"2025-10-24T02:40:46.131091Z","last_seen":"2026-07-23T04:46:37.328281Z","times_seen":569,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@200;300;400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/","date":"2026-07-23T04:41:14.788Z","timestamp":1784781674788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Poppins:wght@200;300;400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloudadreader.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 23 Jul 2026 04:41:14 GMT\r\ndate: Thu, 23 Jul 2026 04:41:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":1228,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9c04b1c3bad01ee0643591b8168c92c6","sha1":"4e0ac3442c265e0441943ec104165b3cf45bc98a","sha256":"f00e3b44e7e737f2378b812e15467d71a5d4907350082c7089894e5bf0b3150c","sha512":"dd8c420a800322c5b7d035d87eac72f5cc217cf6cabc06f440c8ab969f617415307db7c2f0aae1c6b2345a3a64ece811c17b8674bdad34c361e54d2665c02a02","ssdeep":"96:SO6aKO6ayJc+ukO6aVN3O1arO1aTJc+ukO1aaN3OEanOEaCJc+ukOEauN3OXa3Oc:/HaedhHdPgKQcXr3B","tlshash":"67a19bd1087be114ab831cc123ce6d36ee1ea155b810e5786bfd0c98adabc654372b2d","first_seen":"2025-10-24T02:40:46.13371Z","last_seen":"2026-07-23T04:46:37.329537Z","times_seen":685,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/","date":"2026-07-23T04:41:14.909Z","timestamp":1784781674909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cloudadreader.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 02:57:12 GMT\r\nexpires: Fri, 23 Jul 2027 02:57:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 6242\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7884,"size_decoded":8694,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-23T07:25:26.392403Z","times_seen":381794,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":3,"connect":31,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/download.html","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T04:41:20.025Z","timestamp":1784781680025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudadreader.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 12:47:32 GMT","end":"Sat, 05 Sep 2026 12:47:31 GMT"},"fingerprint":{"sha1":"B2:FA:FA:28:E2:6B:64:63:22:8A:E8:FD:8E:4F:D2:9C:9B:71:D3:D3","sha256":"82:14:07:66:95:EC:8F:AB:01:76:EE:35:4B:4B:1F:78:71:EB:6E:13:4D:28:51:67:EB:99:8F:8E:6A:BF:E5:F0"}}},"request":{"raw":"GET /auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/download.html HTTP/1.1\r\nHost: cloudadreader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Fri, 20 Feb 2026 20:38:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1834\r\ndate: Thu, 23 Jul 2026 04:41:20 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6640,"size_decoded":2065,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"915f57bd352fc9e530ce52a714133703","sha1":"b706b2cbf9461961c79641d24acc375e2991cb57","sha256":"219f5c1d69a5d314750e630e8c9c641b7c44a805c09aa7051d4222c3354a56b9","sha512":"09f08a79b4338c17a91d56ea37bdb8203cf1b1018cbea2c6a7e587755507ac303c9e303bc05d934ba4d44b04fd0ea8e89227cb07ae43f3db5f03d258638d3a31","ssdeep":"96:oHAH6iqFynKrMlUmmfu4PYOSB20aXyEqCv+62lA:ogtHnKrMlUmmfuSSB20aCEqkn2+","tlshash":"abd1451e96501405557396a6bff26b09fb968053930686693fec229f9ff0a40c8b3fcd","first_seen":"2026-04-07T17:37:39.84656Z","last_seen":"2026-07-23T04:46:37.326029Z","times_seen":9,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/complete.php","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T04:41:27.792Z","timestamp":1784781687792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudadreader.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 12:47:32 GMT","end":"Sat, 05 Sep 2026 12:47:31 GMT"},"fingerprint":{"sha1":"B2:FA:FA:28:E2:6B:64:63:22:8A:E8:FD:8E:4F:D2:9C:9B:71:D3:D3","sha256":"82:14:07:66:95:EC:8F:AB:01:76:EE:35:4B:4B:1F:78:71:EB:6E:13:4D:28:51:67:EB:99:8F:8E:6A:BF:E5:F0"}}},"request":{"raw":"GET /auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/complete.php HTTP/1.1\r\nHost: cloudadreader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/download.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 1573\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Jul 2026 04:41:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5443,"size_decoded":1751,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ec30153c104045999631afa653389f99","sha1":"f029a1884a17ade8c5c871629948af84e9c7d1e6","sha256":"60003e247e31dd4bf97b2eb7031dbb0899cfeb69c43705c005845fa740e8f0af","sha512":"69999f81cea4808ec4bd0542a739792905fa541eca5a695ab23d742d0ea6ad752705db9b69578a6239da7285c2903176f5a1b4da7d92650d3e3a266ffdf2500b","ssdeep":"48:tlrHAHg4D5qmUFeTMtLFinEwKmkjVNxumhVKKWlytVYuM8aO/spLZzNpZoL0nrvQ:THAHjbUNFwVkRKAt9s7N4gBXlQ","tlshash":"ebb1ef2986c1650a607352a4efb15b95fbc5c503d34246693bee638f8ff6e80c5a378c","first_seen":"2026-04-07T17:37:39.850926Z","last_seen":"2026-07-23T04:46:37.324055Z","times_seen":9,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/Adobe.webp","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/complete.php","date":"2026-07-23T04:41:27.990Z","timestamp":1784781687990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudadreader.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 12:47:32 GMT","end":"Sat, 05 Sep 2026 12:47:31 GMT"},"fingerprint":{"sha1":"B2:FA:FA:28:E2:6B:64:63:22:8A:E8:FD:8E:4F:D2:9C:9B:71:D3:D3","sha256":"82:14:07:66:95:EC:8F:AB:01:76:EE:35:4B:4B:1F:78:71:EB:6E:13:4D:28:51:67:EB:99:8F:8E:6A:BF:E5:F0"}}},"request":{"raw":"GET /auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/Adobe.webp HTTP/1.1\r\nHost: cloudadreader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/src/complete.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nlast-modified: Fri, 20 Feb 2026 20:07:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11916\r\ndate: Thu, 23 Jul 2026 04:41:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11916,"size_decoded":12104,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4fb5f25277c6991be7973840aa313ee1","sha1":"4f01a6d264972b5f617d3ee391bbd997698df1e4","sha256":"df1091f2176b93695d27fa7ade61679adef97b9a2fedf1ac2550dfa864282ccf","sha512":"25cc1d5f26499339bd2cb23e09edb0c1ee0f635e733294bfe3b700bb7779b1c49fe4b6285afce60ed327f058e3de2335306af6fa394863593e1e667d2d5ca6e1","ssdeep":"192:x/BH6btVM9n5BQ/St1L2+TYJ0pe1s5F2zlclBI8nyr+wlqLmJuPp5xLOjzXmQQqM:x/Ci95S/St1zYJYeeXFI8nI7lfsPRLsM","tlshash":"e832c06fe74af226071c1c333be12eafb1c353a0145a619ecfa767b25d0012151d766a","first_seen":"2026-04-07T17:37:39.848616Z","last_seen":"2026-07-23T04:46:37.326719Z","times_seen":9,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/Adobe.webp","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/","date":"2026-07-23T04:41:14.792Z","timestamp":1784781674792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudadreader.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 12:47:32 GMT","end":"Sat, 05 Sep 2026 12:47:31 GMT"},"fingerprint":{"sha1":"B2:FA:FA:28:E2:6B:64:63:22:8A:E8:FD:8E:4F:D2:9C:9B:71:D3:D3","sha256":"82:14:07:66:95:EC:8F:AB:01:76:EE:35:4B:4B:1F:78:71:EB:6E:13:4D:28:51:67:EB:99:8F:8E:6A:BF:E5:F0"}}},"request":{"raw":"GET /auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/Adobe.webp HTTP/1.1\r\nHost: cloudadreader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nlast-modified: Fri, 20 Feb 2026 20:07:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11916\r\ndate: Thu, 23 Jul 2026 04:41:14 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11916,"size_decoded":12282,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4fb5f25277c6991be7973840aa313ee1","sha1":"4f01a6d264972b5f617d3ee391bbd997698df1e4","sha256":"df1091f2176b93695d27fa7ade61679adef97b9a2fedf1ac2550dfa864282ccf","sha512":"25cc1d5f26499339bd2cb23e09edb0c1ee0f635e733294bfe3b700bb7779b1c49fe4b6285afce60ed327f058e3de2335306af6fa394863593e1e667d2d5ca6e1","ssdeep":"192:x/BH6btVM9n5BQ/St1L2+TYJ0pe1s5F2zlclBI8nyr+wlqLmJuPp5xLOjzXmQQqM:x/Ci95S/St1zYJYeeXFI8nI7lfsPRLsM","tlshash":"e832c06fe74af226071c1c333be12eafb1c353a0145a619ecfa767b25d0012151d766a","first_seen":"2026-04-07T17:37:39.848616Z","last_seen":"2026-07-23T04:46:37.326719Z","times_seen":9,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/","date":"2026-07-23T04:41:14.923Z","timestamp":1784781674923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cloudadreader.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 03:05:43 GMT\r\nexpires: Fri, 23 Jul 2027 03:05:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 5731\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7748,"size_decoded":8558,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-23T07:31:25.352933Z","times_seen":266489,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/adobe1.png","fqdn":"cloudadreader.com","domain":"cloudadreader.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/download.html","date":"2026-07-23T04:41:20.513Z","timestamp":1784781680513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudadreader.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 12:47:32 GMT","end":"Sat, 05 Sep 2026 12:47:31 GMT"},"fingerprint":{"sha1":"B2:FA:FA:28:E2:6B:64:63:22:8A:E8:FD:8E:4F:D2:9C:9B:71:D3:D3","sha256":"82:14:07:66:95:EC:8F:AB:01:76:EE:35:4B:4B:1F:78:71:EB:6E:13:4D:28:51:67:EB:99:8F:8E:6A:BF:E5:F0"}}},"request":{"raw":"GET /auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/assets/images/adobe1.png HTTP/1.1\r\nHost: cloudadreader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloudadreader.com/auth/creativecloud/adobe/campaign/EgZjaHJvbWUyDAgAEEUYORixAxiABDITCAEQLhiDARj/adobe/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Feb 2026 17:50:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2520\r\ndate: Thu, 23 Jul 2026 04:41:20 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2520,"size_decoded":2706,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"907b7ad660b002a6b56e7a38700f023b","sha1":"3566ed17b372d4fd170115e5081fb454492b9878","sha256":"935897afed1be1e574386ad9b6b9afc4751c9c2d43717801cd0d68a552b6da24","sha512":"6633f3481f14f63b1c3bb99894220c56a20273b29bbb633097cc5a489e86f1c8bebf68d743f57316237223b677d3900e5a5af3eef23e843e0400d5e1c61bf8ff","ssdeep":"","tlshash":"7c513a7aa11601d184698f4a2dcd1120472e2813b6865347b787c7f4f3d97a2acb2a87","first_seen":"2026-04-07T17:37:39.845647Z","last_seen":"2026-07-23T04:46:37.327444Z","times_seen":9,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}