{"report_id":"be0d4fad-a924-45e3-bb6b-b0cfdfd64024","version":6,"status":"done","tags":[],"date":"2026-01-22T17:21:16Z","url":{"schema":"https","addr":"sharezltx.pages.dev/?e=I3mail@slurpmail.net","fqdn":"sharezltx.pages.dev","domain":"sharezltx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sharezltx.pages.dev/?e=I3mail@slurpmail.net","fqdn":"sharezltx.pages.dev","domain":"sharezltx.pages.dev","tld":"pages.dev"},"title":"SPoint","dom":{"size":4446,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4446), with no line terminators","md5":"9ea7aca319786b3e76e59317b49154ac","sha1":"a43eb3198abfd5073a875c98878ca57a3d5083d4","sha256":"5a35c5a4bbb33f783f2e4be9cc9df13d12d41c40406abd068298dfb43bcdba87","sha512":"ea1323b1acd1e01b676d442081f354daa2111b534458688786d34106fb1b4197154800a6f204f05e8346e7e7bff3ef93922e9cfa5ff3b551698c9ff0fb830b2b","ssdeep":"48:zIrdbQQBw9lkq6K+qE67dyv25C7mA8QQMjw5vW1fUQixaOCR:zIrdDO9e5KH17dbC78vhAbB","tlshash":"9091dcd366c04257037390dbfc127e6498cde22fc9a1c8126d9b03bb6f9a9f960497b5","dom_hash":"domhashe11f7e187d3af44b5645684bc25e943f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"sharezltx.pages.dev/?e=I3mail@slurpmail.net","fqdn":"sharezltx.pages.dev","domain":"sharezltx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-26T17:21:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-22T17:20:54Z","timestamp":1769102454,"ip_dst":{"addr":"172.66.44.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":38428,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-01-22T17:20:54.187775+0000\",\"flow_id\":1735610720502730,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":38428,\"dest_ip\":\"172.66.44.230\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"sharezltx.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":921,\"bytes_toclient\":3543,\"start\":\"2026-01-22T17:20:54.181194+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"sharezltx.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-18T22:30:25.777558Z","alert_count":0,"request_count":2,"received_data":315873,"sent_data":929,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sharezltx.pages.dev","ip":{"addr":"172.66.44.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":117100,"sent_data":1899,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"iili.io","ip":{"addr":"172.67.139.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-09","domain_rank":46837,"first_seen":"2018-10-12T10:50:17Z","last_seen":"2026-01-21T22:57:59.925073Z","alert_count":0,"request_count":6,"received_data":277787,"sent_data":2592,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sharezltx.pages.dev/js/app.83ce9099.js","fqdn":"sharezltx.pages.dev","domain":"sharezltx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec55ad943a02554d22624baa183850b7","sha1":"fbf9252440b16f05ca823547bfd0fb5c203ea43f","sha256":"857f2b022b2edc92e32a56ed8eea344550598f9531dadd35fb53bdf581e6b2e2","sha512":"155eaa55ea6f77411a17057b8b55852d4de721cf1798ab22bbf309fc7d5b7708581d05e84fc94168f55067001a5df03a8e286741fbe3040849608c479cd23e4c","ssdeep":"192:+nlDzvwAVDatTiiNikRTOPwE8CWBM111gyb4eW:+lDzIGaJiizRerTuGm","tlshash":"23e1b501f2e0e86d27f34aad55ab2446372b3b1ff08d8ca971a4dc741db5cb16224fa5","size":7138,"data":"","first_seen":"2025-04-28T13:22:27.362746Z","last_seen":"2026-05-24T06:08:51.561618Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80663,"data":"","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-24T13:31:39.458027Z","times_seen":20809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sharezltx.pages.dev/js/chunk-vendors.7e36104e.js","fqdn":"sharezltx.pages.dev","domain":"sharezltx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01679dbf9c22e97d8bdf392c92c0aecc","sha1":"5a37d35c7e2592abbbee92dec11047fc95a62570","sha256":"2f1ff5445a757623ddb5033d84050a675710a830fffbec0dadc5f41c43b63510","sha512":"3c876fe7e2aeacb48477c43c983093575a730684442bc8f0f2aeec95448bdd40d6c2b2dd4fb41852e1c654706fc3f1a80f12cfbf1b77626f2bc2b7c0bf2aa1b2","ssdeep":"1536:GhzL9YJ/2L+xTiCKYjww4tE6JMoGUOzVEpgABOGj6ZBi7oDsnl:A2e0iCPjJgJMoGUOZi8Bi7t","tlshash":"95a3e799b2c2b0b213ea24e5407f500af27a2996740f94d4f269f9d6bc3a50e5077f7c","size":103070,"data":"","first_seen":"2025-04-20T12:09:02.304318Z","last_seen":"2026-05-24T06:08:51.56094Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sharezltx.pages.dev/?e=I3mail@slurpmail.net","date":"2026-01-22T17:20:54.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sharezltx.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 22 Jan 2026 17:20:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24440\r\ncf-ray: 9c20b9846cb30883-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"13b17-9/0PPchLLPk7+B6DJQWmc/NU4KM\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230118-FRA, cache-bma-essb1270041-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 551760\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=56LR9KLfRJAQXil3YLv5uvBhjWg2Htog%2BnZUawI1v77oc7O07Jx%2FBk2cXj%2BFRuGvTIF%2BcAGoBC8vIrBN8CoaQcUEteyhgmbHb7dDqsBI5LuKPueEZaWPIrbwgAMvsUMwLTQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80663,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-24T13:31:39.458027Z","times_seen":20809,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":17,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sharezltx.pages.dev/css/app.b27c282d.css","fqdn":"sharezltx.pages.dev","domain":"sharezltx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sharezltx.pages.dev/?e=I3mail@slurpmail.net","date":"2026-01-22T17:20:54.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sharezltx.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 21:10:13 GMT","end":"Wed, 01 Apr 2026 22:09:01 GMT"},"fingerprint":{"sha1":"4D:06:E8:A9:FD:89:0A:87:97:35:53:1B:D3:A3:F7:D7:98:54:07:79","sha256":"98:10:50:ED:45:DC:CF:88:30:18:2B:B5:6D:BE:88:3B:9D:34:AD:BF:47:8C:E2:6F:05:62:BC:21:EB:F4:3A:B5"}}},"request":{"raw":"GET /css/app.b27c282d.css HTTP/1.1\r\nHost: sharezltx.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sharezltx.pages.dev/?e=I3mail@slurpmail.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 17:20:54 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wkd%2Bj8avRDqGgYbT90V%2FTkBq5%2FDfY59A8dNzlNbHeTC%2B7fOgJUKCSsO2sWD1BMT1PAS6rneSzsOU3eCQLVWPK5oOEq5rA5EPGKlYAtNAk4gFM%2Bo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"373eb190682d3d3be3642b316a175c0f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c20b9846b393181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1861,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1861), with no line terminators","md5":"8110d45d22e0883bd9b29e84514cc99c","sha1":"dbfaf5a0941ae17cdeb96382ed72d7d2834dfa49","sha256":"4eda92865bfc8923f082b8cdf87bd4e622e4269f139923c3cedfd7e83282e55e","sha512":"6c7d3e2e37c9bff7235c01c175d4628e0a98a5846ce4c8c10b6cc4d3a349213b7c1f244e4c9e8c62d78ffeca102cd3f06982942c0e27eda0fa6a7622c6c97a3d","ssdeep":"","tlshash":"6931ef213a9c3229753bd097f4e14dec5254e35bc90692696d17237bbe8f1c224b935c","first_seen":"2025-04-28T13:22:27.364427Z","last_seen":"2026-05-24T06:08:51.559471Z","times_seen":10,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"sharezltx.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iili.io/JWGZ8Mv.jpg","fqdn":"iili.io","domain":"iili.io","tld":"io"},"ip":{"addr":"172.67.139.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sharezltx.pages.dev/?e=I3mail@slurpmail.net","date":"2026-01-22T17:20:57.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iili.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 10:10:50 GMT","end":"Sun, 12 Apr 2026 11:08:36 GMT"},"fingerprint":{"sha1":"9C:D8:8A:41:DD:89:EE:43:CD:6F:A7:51:B2:98:FE:56:50:FB:E2:6E","sha256":"04:BB:2A:C5:E6:C6:87:04:21:05:5A:17:FF:C2:1E:EC:03:7F:F5:7A:26:EA:7B:1B:9C:00:D5:AF:FB:0D:86:A0"}}},"request":{"raw":"GET /JWGZ8Mv.jpg HTTP/1.1\r\nHost: iili.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sharezltx.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 22 Jan 2026 17:20:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4225\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Mar 2024 12:13:18 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mr19W8yGY2hjknhfEzanO%2FhMH%2Fdry4Sa7OJupCYSaXxUp1UicjnQuieNzIat6wLl72BRpiyahMGhDyuH8NI0M2jqDf7p6%2BQ%3D\"}]}\r\ncf-ray: 9c20b9982abb4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4225,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 184x27, components 3","md5":"87c4636a92dae3893119a8c7eab1aed9","sha1":"c40275f0710735d3f22fc21f5210b12b15eefac9","sha256":"8d6738649025400441b04856e8a10140137fdef89ca87989c4a010959ebe7712","sha512":"90e654ec7518bfb7d545f82daf5f20ca3419247909e0fe4fbdfe8b0d66fb715b7211f83d87b6c80a41e6c48cf7ee2726f8003169d36f9850d7612c8992cfb156","ssdeep":"96:sEbNu+HJZBw4oObCJCreG/gMXmLiBN5+UoCYb:s4NuGTBX2EreG/lNBK3","tlshash":"9e916c6633455af0f8e39e73d8320f9395fbe91274144b133af56253c4a0a82a5d0f2c","first_seen":"2024-04-01T17:47:25Z","last_seen":"2026-05-24T06:08:51.562999Z","times_seen":13,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":26,"dns":4,"connect":1,"send":0,"wait":241,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iili.io/JWGkUx9.jpg","fqdn":"iili.io","domain":"iili.io","tld":"io"},"ip":{"addr":"172.67.139.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sharezltx.pages.dev/?e=I3mail@slurpmail.net","date":"2026-01-22T17:20:57.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iili.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 10:10:50 GMT","end":"Sun, 12 Apr 2026 11:08:36 GMT"},"fingerprint":{"sha1":"9C:D8:8A:41:DD:89:EE:43:CD:6F:A7:51:B2:98:FE:56:50:FB:E2:6E","sha256":"04:BB:2A:C5:E6:C6:87:04:21:05:5A:17:FF:C2:1E:EC:03:7F:F5:7A:26:EA:7B:1B:9C:00:D5:AF:FB:0D:86:A0"}}},"request":{"raw":"GET /JWGkUx9.jpg HTTP/1.1\r\nHost: iili.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sharezltx.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 22 Jan 2026 17:20:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 109813\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Mar 2024 11:50:21 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzzFVZGWl6ru4YPg3bd4CMBr9Y6oojDdK7h664pbRPv4o%2BK1eMyhS4Fee2QeWNcASl3biZMRzKC9pW42heJKKlK7yOjz6dk%3D\"}]}\r\ncf-ray: 9c20b9982ac34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109813,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"65e459d120adbaef1a3b875654fb5ce2","sha1":"c07d04fb710b1fd814c25e7f585ac62bd1890654","sha256":"4f6f1b2be8d72548ae2322eea28f86780ae6cb3adbf6bacdc557070d23eb8aa0","sha512":"945efc1ba75a76ae395617d21131543493e98975c6ec58b861e37653c83529269886f802564a88f594609c2e5f9550b42d539e8aec534fd2fbede9aebdbf9511","ssdeep":"1536:9RSb0NC8RRGVNq4jd7ce6Xv8772U2jaOQ3r87mVlFXT0R4Os4YolJdhBTjrdHTd7:9R1NwVHrMv07mNQ3r8CYTs6l9pjZRKO","tlshash":"9fb3021dccf6951c82db00e4478a0185be2b3c9db57a6c5efd23661d286b7c7a472d83","first_seen":"2023-05-15T18:34:06Z","last_seen":"2026-07-07T09:50:10.276014Z","times_seen":32,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":22,"dns":1,"connect":3,"send":0,"wait":251,"receive":381,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iili.io/JWGk8D7.jpg","fqdn":"iili.io","domain":"iili.io","tld":"io"},"ip":{"addr":"172.67.139.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sharezltx.pages.dev/?e=I3mail@slurpmail.net","date":"2026-01-22T17:20:57.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iili.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 10:10:50 GMT","end":"Sun, 12 Apr 2026 11:08:36 GMT"},"fingerprint":{"sha1":"9C:D8:8A:41:DD:89:EE:43:CD:6F:A7:51:B2:98:FE:56:50:FB:E2:6E","sha256":"04:BB:2A:C5:E6:C6:87:04:21:05:5A:17:FF:C2:1E:EC:03:7F:F5:7A:26:EA:7B:1B:9C:00:D5:AF:FB:0D:86:A0"}}},"request":{"raw":"GET /JWGk8D7.jpg HTTP/1.1\r\nHost: iili.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sharezltx.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 22 Jan 2026 17:20:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 12600\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Mar 2024 11:50:21 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lWQ%2B%2F0%2FuoRzv8wQCYzQhryH2wcbKefLzJ0DcU26Gtj%2FVkfEXz2m0ojOfx2S2QXk%2Fs1OkiKkn7Edu7YXMmr26o%2FEFV3qEYkw%3D\"}]}\r\ncf-ray: 9c20b9984af74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2a0cffda723e748bd5a3b9b6e7518951","sha1":"0bcedf08121fca7ace99a6fc773b5ee34b6d46ab","sha256":"427cb93a3b9cd989832ead8a4cc823260eca47e361f9538e50f5e3a216b380a4","sha512":"8e419b949518fe1810dea82be0259843a238a7254053ba7040ca424cc6d93e80b61c0655f5354bc7960bccf47306ea7ce772506519b2e1f70033a10a2ee28b0e","ssdeep":"384:EYCX0qm7u+llvANmfv++eon7aTGQdz1qingK:wXwu+joI+XHq6qinN","tlshash":"64428d8f6954fc72ddcdb9fc780005209a915cea1672754ce239afc32c076ee1e92916","first_seen":"2023-05-15T18:34:06Z","last_seen":"2026-07-07T09:50:10.28389Z","times_seen":32,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":258,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iili.io/JWGkUx9.png","fqdn":"iili.io","domain":"iili.io","tld":"io"},"ip":{"addr":"172.67.139.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sharezltx.pages.dev/?e=I3mail@slurpmail.net","date":"2026-01-22T17:20:57.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iili.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 10:10:50 GMT","end":"Sun, 12 Apr 2026 11:08:36 GMT"},"fingerprint":{"sha1":"9C:D8:8A:41:DD:89:EE:43:CD:6F:A7:51:B2:98:FE:56:50:FB:E2:6E","sha256":"04:BB:2A:C5:E6:C6:87:04:21:05:5A:17:FF:C2:1E:EC:03:7F:F5:7A:26:EA:7B:1B:9C:00:D5:AF:FB:0D:86:A0"}}},"request":{"raw":"GET /JWGkUx9.png HTTP/1.1\r\nHost: iili.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sharezltx.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 22 Jan 2026 17:20:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 109813\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Mar 2024 11:50:21 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y3FW1NdijuU63wuqy8n%2B%2BR7Ndyw7E2kvQ%2FXy%2B%2FQlg7FqBAps3sevlcVSDzb%2BsZgQ2FyeQKPnfOa0%2Bhpz8K3KzirovefDCqo%3D\"}]}\r\ncf-ray: 9c20b9982abf4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109813,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"65e459d120adbaef1a3b875654fb5ce2","sha1":"c07d04fb710b1fd814c25e7f585ac62bd1890654","sha256":"4f6f1b2be8d72548ae2322eea28f86780ae6cb3adbf6bacdc557070d23eb8aa0","sha512":"945efc1ba75a76ae395617d21131543493e98975c6ec58b861e37653c83529269886f802564a88f594609c2e5f9550b42d539e8aec534fd2fbede9aebdbf9511","ssdeep":"1536:9RSb0NC8RRGVNq4jd7ce6Xv8772U2jaOQ3r87mVlFXT0R4Os4YolJdhBTjrdHTd7:9R1NwVHrMv07mNQ3r8CYTs6l9pjZRKO","tlshash":"9fb3021dccf6951c82db00e4478a0185be2b3c9db57a6c5efd23661d286b7c7a472d83","first_seen":"2023-05-15T18:34:06Z","last_seen":"2026-07-07T09:50:10.276014Z","times_seen":32,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":260,"receive":405,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iili.io/JWGOlqJ.jpg","fqdn":"iili.io","domain":"iili.io","tld":"io"},"ip":{"addr":"172.67.139.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sharezltx.pages.dev/?e=I3mail@slurpmail.net","date":"2026-01-22T17:20:57.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iili.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 10:10:50 GMT","end":"Sun, 12 Apr 2026 11:08:36 GMT"},"fingerprint":{"sha1":"9C:D8:8A:41:DD:89:EE:43:CD:6F:A7:51:B2:98:FE:56:50:FB:E2:6E","sha256":"04:BB:2A:C5:E6:C6:87:04:21:05:5A:17:FF:C2:1E:EC:03:7F:F5:7A:26:EA:7B:1B:9C:00:D5:AF:FB:0D:86:A0"}}},"request":{"raw":"GET /JWGOlqJ.jpg HTTP/1.1\r\nHost: iili.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sharezltx.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 22 Jan 2026 17:20:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24157\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Mar 2024 11:45:14 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OxaCN%2FrFFBtQb2QmPe5JM5DPmi8bMn3bJ1qjkb15y1gXZfESuFEOVR7TacLcUeYsupxg1oClr5ofu57mQaaR1EZ3ETXofTU%3D\"}]}\r\ncf-ray: 9c20b9982acb4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24157,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 400x347, components 3","md5":"1e822af2014e861326b4907dde3e0773","sha1":"6af1b30695c2d4e0411cfdf506bedd761e46034d","sha256":"cb929aea6d52b19829d15795a6a954008db49960079601c08ba842bed1e5fbee","sha512":"7830e945e892591fe38fef7e6b6d8caf21fbd08469b0cd62b0c54a31c67a91910751753151f16c8a1dc26d22144e54c10763e4ee059f534bdfca80b20fe0dbda","ssdeep":"384:8qaKYBR++iCBFT55oXGqG3qErJOKa8P69sWWW7IpnUcr7R63Wi1b3:8q+nR55oXGqiqErxP69sWWW7unUcBuRz","tlshash":"f2b28e74bfe263b4b35b682c907c3c7787e27a99a3c4e0470f930d95a269bb5580752c","first_seen":"2024-04-01T17:47:25Z","last_seen":"2026-05-24T06:08:51.557701Z","times_seen":25,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sharezltx.pages.dev/?e=I3mail@slurpmail.net","fqdn":"sharezltx.pages.dev","domain":"sharezltx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-22T17:20:54.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sharezltx.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 21:10:13 GMT","end":"Wed, 01 Apr 2026 22:09:01 GMT"},"fingerprint":{"sha1":"4D:06:E8:A9:FD:89:0A:87:97:35:53:1B:D3:A3:F7:D7:98:54:07:79","sha256":"98:10:50:ED:45:DC:CF:88:30:18:2B:B5:6D:BE:88:3B:9D:34:AD:BF:47:8C:E2:6F:05:62:BC:21:EB:F4:3A:B5"}}},"request":{"raw":"GET /?e=I3mail@slurpmail.net HTTP/1.1\r\nHost: sharezltx.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 22 Jan 2026 17:20:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQE3w8ij01ombQuKb5eGiSekUDs0aI514V0dhGgskoGx%2FNnGWCOyTAsWm5P2M1F8ushrTO37j880zEolEd9l8OcuTskcLAeDwz4mTZhpAs%2Blrr0%3D\"}]}\r\netag: W/\"ae04e5359daba047b122b05560b7938e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c20b982be728be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":1937,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1937), with no line terminators","md5":"5a47a17d738695981e7dd651a87add63","sha1":"a200069c2fa59663d4a1d2d48d96ae4be2151027","sha256":"0e099082fead10d270bb509628df5916cfbd709ddc76dea0d340b54a38a130fc","sha512":"382538e38211cf2eb24039a5898f507c2169e527086697fbd25f5e85475834d5c18a4045f1b05cbb039eacfb23d166576a3e684dfbb1650de735ae02bc7aea3c","ssdeep":"","tlshash":"674196e3d95048ae436025ea7c7ab11c4cc5085ee8a18465b3dc657e197068d59d2961","first_seen":"2025-10-30T01:55:07.263632Z","last_seen":"2026-01-22T17:21:20.680143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":17,"dns":9,"connect":1,"send":0,"wait":30,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"sharezltx.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sharezltx.pages.dev/?e=I3mail@slurpmail.net","date":"2026-01-22T17:20:54.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sharezltx.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 22 Jan 2026 17:20:54 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33186\r\ncf-ray: 9c20b9846cb60883-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"38df4-HxOZgbm0enZu+gphu3ito1HxbEs\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230033-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 737030\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cvuv8gnt0hDO4i531UUX31U5AWU%2BlrQoq%2Fr5cSZI1nmFnA9gfLFtrZwbsQBbvdf0dC9YjJ9UrEJpNHiLXUAYW7UcmGv4uhnOzxNDXOowbaA3q5lZIADo%2FkIN6mlwas18Zu4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232948,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-24T13:31:39.465222Z","times_seen":18328,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":10,"dns":4,"connect":1,"send":0,"wait":12,"receive":4,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sharezltx.pages.dev/js/chunk-vendors.7e36104e.js","fqdn":"sharezltx.pages.dev","domain":"sharezltx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sharezltx.pages.dev/?e=I3mail@slurpmail.net","date":"2026-01-22T17:20:54.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sharezltx.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 21:10:13 GMT","end":"Wed, 01 Apr 2026 22:09:01 GMT"},"fingerprint":{"sha1":"4D:06:E8:A9:FD:89:0A:87:97:35:53:1B:D3:A3:F7:D7:98:54:07:79","sha256":"98:10:50:ED:45:DC:CF:88:30:18:2B:B5:6D:BE:88:3B:9D:34:AD:BF:47:8C:E2:6F:05:62:BC:21:EB:F4:3A:B5"}}},"request":{"raw":"GET /js/chunk-vendors.7e36104e.js HTTP/1.1\r\nHost: sharezltx.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sharezltx.pages.dev/?e=I3mail@slurpmail.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 17:20:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VT0DzJNkUoHuUzz0Rluf3hyDG0RxjFYW1AuznSlAS%2BHkM4q9iGW1W2ywF3wWUEitMgSel%2FNUbjCd%2BHO7BAe1N3Pcq36mkMM4pqQM4oB6GPcNME%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"75f9910bf8d21fcd1170f2da5b30394c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c20b9845b1c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103070,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33523)","md5":"01679dbf9c22e97d8bdf392c92c0aecc","sha1":"5a37d35c7e2592abbbee92dec11047fc95a62570","sha256":"2f1ff5445a757623ddb5033d84050a675710a830fffbec0dadc5f41c43b63510","sha512":"3c876fe7e2aeacb48477c43c983093575a730684442bc8f0f2aeec95448bdd40d6c2b2dd4fb41852e1c654706fc3f1a80f12cfbf1b77626f2bc2b7c0bf2aa1b2","ssdeep":"1536:GhzL9YJ/2L+xTiCKYjww4tE6JMoGUOzVEpgABOGj6ZBi7oDsnl:A2e0iCPjJgJMoGUOZi8Bi7t","tlshash":"95a3e799b2c2b0b213ea24e5407f500af27a2996740f94d4f269f9d6bc3a50e5077f7c","first_seen":"2025-04-20T12:09:02.304318Z","last_seen":"2026-05-24T06:08:51.56094Z","times_seen":11,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"sharezltx.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sharezltx.pages.dev/js/app.83ce9099.js","fqdn":"sharezltx.pages.dev","domain":"sharezltx.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sharezltx.pages.dev/?e=I3mail@slurpmail.net","date":"2026-01-22T17:20:54.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sharezltx.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 21:10:13 GMT","end":"Wed, 01 Apr 2026 22:09:01 GMT"},"fingerprint":{"sha1":"4D:06:E8:A9:FD:89:0A:87:97:35:53:1B:D3:A3:F7:D7:98:54:07:79","sha256":"98:10:50:ED:45:DC:CF:88:30:18:2B:B5:6D:BE:88:3B:9D:34:AD:BF:47:8C:E2:6F:05:62:BC:21:EB:F4:3A:B5"}}},"request":{"raw":"GET /js/app.83ce9099.js HTTP/1.1\r\nHost: sharezltx.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sharezltx.pages.dev/?e=I3mail@slurpmail.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 22 Jan 2026 17:20:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gla2Hlavw84fj4dZT5qRP75FsXQVFgqric70NIQEnQokysm9ikcVdq1m8ypjm2%2BV%2FDy1oxK06hDkF0zupUvReRkwuyJzi3phl8tZX7TOH3NYgng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f132eae78fb5d10b9ff0583cd7a6fe01\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c20b9845b1e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7138,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7097)","md5":"ec55ad943a02554d22624baa183850b7","sha1":"fbf9252440b16f05ca823547bfd0fb5c203ea43f","sha256":"857f2b022b2edc92e32a56ed8eea344550598f9531dadd35fb53bdf581e6b2e2","sha512":"155eaa55ea6f77411a17057b8b55852d4de721cf1798ab22bbf309fc7d5b7708581d05e84fc94168f55067001a5df03a8e286741fbe3040849608c479cd23e4c","ssdeep":"192:+nlDzvwAVDatTiiNikRTOPwE8CWBM111gyb4eW:+lDzIGaJiizRerTuGm","tlshash":"23e1b501f2e0e86d27f34aad55ab2446372b3b1ff08d8ca971a4dc741db5cb16224fa5","first_seen":"2025-04-28T13:22:27.362746Z","last_seen":"2026-05-24T06:08:51.561618Z","times_seen":10,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"sharezltx.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iili.io/JWGk8D7.png","fqdn":"iili.io","domain":"iili.io","tld":"io"},"ip":{"addr":"172.67.139.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sharezltx.pages.dev/?e=I3mail@slurpmail.net","date":"2026-01-22T17:20:57.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iili.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 10:10:50 GMT","end":"Sun, 12 Apr 2026 11:08:36 GMT"},"fingerprint":{"sha1":"9C:D8:8A:41:DD:89:EE:43:CD:6F:A7:51:B2:98:FE:56:50:FB:E2:6E","sha256":"04:BB:2A:C5:E6:C6:87:04:21:05:5A:17:FF:C2:1E:EC:03:7F:F5:7A:26:EA:7B:1B:9C:00:D5:AF:FB:0D:86:A0"}}},"request":{"raw":"GET /JWGk8D7.png HTTP/1.1\r\nHost: iili.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sharezltx.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 22 Jan 2026 17:20:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 12600\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Mar 2024 11:50:21 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IraYIkI8ovsAZf82Fak%2FuC0J1f3%2BtsERb%2BscGffgERi2dmQgM%2Fxrswpy4Ub0ydx2b9Pv1EWbBgCHhqfL3fh%2BRMr5pOeM87c%3D\"}]}\r\ncf-ray: 9c20b9982ac14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2a0cffda723e748bd5a3b9b6e7518951","sha1":"0bcedf08121fca7ace99a6fc773b5ee34b6d46ab","sha256":"427cb93a3b9cd989832ead8a4cc823260eca47e361f9538e50f5e3a216b380a4","sha512":"8e419b949518fe1810dea82be0259843a238a7254053ba7040ca424cc6d93e80b61c0655f5354bc7960bccf47306ea7ce772506519b2e1f70033a10a2ee28b0e","ssdeep":"384:EYCX0qm7u+llvANmfv++eon7aTGQdz1qingK:wXwu+joI+XHq6qinN","tlshash":"64428d8f6954fc72ddcdb9fc780005209a915cea1672754ce239afc32c076ee1e92916","first_seen":"2023-05-15T18:34:06Z","last_seen":"2026-07-07T09:50:10.28389Z","times_seen":32,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
