{"report_id":"c49a8193-d878-494b-af75-de696f39fea0","version":0,"status":"done","tags":["amazon","phishing"],"date":"2026-08-16T12:48:19Z","url":{"schema":"http","addr":"mhvqol.shop/","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":0,"asn":0,"as":"","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"mhvqol.shop/#/","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"title":"Amazon Sign-In","dom":{"size":4670,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2803)","md5":"3e0c6a4a9c6fdefc18c09b2f59f2c4f0","sha1":"8e9ff2d733bc584eec85cb01077ef6d6095c4805","sha256":"becb794e21a02926bc64242c90a9fa136d992ec4cc52c0b473ae3957ac63e157","sha512":"b225c54ea3bf35db4283337443e439d0bc5fb1873c66dfbaa0a0e3e10c56d33c80379529581725c097df837f672ad144a753f7f8ae20aa7d5de80eaf438d2635","ssdeep":"96:yntRious9IDHYGpuVNQiegSWQwQtsQLQwQ9/QqMHQ4Q2yQuQfQsQbhQ5ZQ2QrQZ9:yniKIDHYGpuVNHegSWpEs+HQ/HM15yTU","tlshash":"18a1cd1671001c235533e7d1bec1af0432b6a32bc30e8ed153a98266cedbef1696b565","dom_hash":"domhash17af5ccbd73bfee8b195c98133fbb771","first_seen":"2026-08-16T12:35:48.963345Z","last_seen":"2026-08-16T12:48:20.807236Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mhvqol.shop/","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":0,"asn":0,"as":"","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-20T12:48:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"summary":[{"fqdn":"mhvqol.shop","ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-16T12:35:45.19376Z","last_seen":"2026-08-16T12:35:45.19376Z","alert_count":36,"request_count":9,"received_data":365829,"sent_data":4175,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.174.83.126","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-08-14T22:11:56.940153Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":546,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"mhvqol.shop/","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d6a78ab53be5bc4a6d37c42e772760b","sha1":"32f076aec75ed16ecb874b48f3d3178d4cb46c81","sha256":"58a225a1053179435184af7a71e45ccce47bc71b3d1bbbf14cbf7135f24f4cf0","sha512":"4bb08b63cfb3a7d5c1f089aea9e41ca1094156c40d54d2d90a9a8ee123e58c35dce223748e88feda2cf532357deb184b1387b3045207766812025c714622ed45","ssdeep":"","tlshash":"26c012545838540200f820b8125f6617b4959a3b835c54e0d114ad7c09b814745e9963","size":183,"data":"","first_seen":"2026-08-10T14:47:35.81771Z","last_seen":"2026-08-16T12:48:20.827074Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mhvqol.shop/assets/index-BaMowjr6.js","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6831ba18dddebe44aa7f256af687efa","sha1":"beee448303aaa6f779079420f581347c50f6bdd4","sha256":"c03079f8b31291eaadca9f48fb4b2069e39cd118ddd58bd6714a6be0440a870f","sha512":"b021833641bf0fced21846a431ec071042e2cbc6c461d638779ed597ba5e4153e535555a5552e666e3f28aa67896925d364980fe7656b1db734fa51a7e75d519","ssdeep":"6144:9VcU6MPOnp3BGY6sC5AYh0t95VJPxAVeMoz1+QdyHtfkHI:9oBGY6sC5YtlJPxAVeMoz1+Ntj","tlshash":"623407e93282b03243e619e6507b0506f2392d55784e84d4f16deceb3d7784a92bbf6c","size":230831,"data":"","first_seen":"2026-08-10T14:47:35.807249Z","last_seen":"2026-08-16T12:48:20.816039Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mhvqol.shop/assets/access-precheck.DzjXh61c.js","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ed40fd53f7bc0ebdb8128e088f942fe","sha1":"7a888e6d7a8205a46d8723fdf2f3db61f6a7acc7","sha256":"fee559a43b730f85bce21c0e0ad82db99647eeb18a32579db18fb9f336ba7241","sha512":"fc625a916bd20b0bf8abc40b75712fdc514f77acc90b612d7a5fec68bcf45721d2da7f00cafaabd22aadd942fc9b588c99d0020db4432f957c4a19dadab6a395","ssdeep":"","tlshash":"6b4121dd30da213157e205be9333a204b0384b653c5c9190e21668ea3d7629f93bfe9d","size":1967,"data":"","first_seen":"2026-08-10T14:47:35.810113Z","last_seen":"2026-08-16T12:48:20.818751Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mhvqol.shop/assets/pages-security-check.C0FeH1EC.js","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"229e9d9913256958134a19657fa32482","sha1":"c13056d39c8047a46cffc4966b1fdc54b8bc230e","sha256":"afe723df70ce10a31289cf5f7b943ec6e30744f13c958f5c12f13653c5eda343","sha512":"564615169cb26fe6d1f1ca8bf8eecee143ebce982fe918a5bcb2b7c097aa4b5d132de311f3949add03fe64930d38ad384733e842351d38485e32d815900e8019","ssdeep":"192:SXR2olqnGeq5S1S6b2nuU3sCdZS94seTV6su7ASi8RMZ0xo2Cb8f:UPlqnGeq5S1S6CnRckZMMVt6BzaZURCU","tlshash":"2122189d7189be3923720665a1532222b13d2b529845009256fecd043e38e7ab7fffdd","size":10498,"data":"","first_seen":"2026-08-10T14:47:35.797682Z","last_seen":"2026-08-16T12:48:20.817388Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mhvqol.shop/assets/_plugin-vue_export-helper.DlAUqK2U.js","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-16T15:01:41.486175Z","times_seen":25568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mhvqol.shop/","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T12:47:51.757Z","timestamp":1786884471757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mhvqol.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 09 Aug 2026 11:00:00 GMT","end":"Sat, 07 Nov 2026 10:59:59 GMT"},"fingerprint":{"sha1":"57:BC:6D:4B:8E:22:46:5D:24:DF:6D:15:17:A8:A1:0B:45:0E:B6:37","sha256":"91:69:46:BD:A6:15:A2:88:68:FC:DC:C7:75:7D:D2:DD:44:51:1A:E7:DE:3F:5E:61:C5:CD:B5:96:50:E5:24:5D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mhvqol.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 12:47:51 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 14 Aug 2026 14:00:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f1f8e-49e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1182,"size_decoded":1055,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"6b0934d44aa49e1e532acd9eca0d525c","sha1":"cc8d07a674cc99aa961d57a9697a4491812d1508","sha256":"25a4ea78a02ec8e4c268b6ab8588053e409cc99cda8c200b0bf55a08d74e1a8d","sha512":"d15a6953b5641e1f5d4b85512edf495b79003f35dcbaf586226e36dd2db2e50456da51d571709069ee554352a1804ff1c8bfae1084997c839c9227f3b0284133","ssdeep":"","tlshash":"a2214e07d4108805a1a407382ac2f4142494da77838cada4b0eeb07dced9bd2cafb7b8","first_seen":"2026-08-10T14:47:35.803082Z","last_seen":"2026-08-16T12:48:20.814532Z","times_seen":3,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":3,"connect":54,"send":0,"wait":54,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mhvqol.shop/assets/index-BaMowjr6.js","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mhvqol.shop/","date":"2026-08-16T12:47:52.164Z","timestamp":1786884472164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mhvqol.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 09 Aug 2026 11:00:00 GMT","end":"Sat, 07 Nov 2026 10:59:59 GMT"},"fingerprint":{"sha1":"57:BC:6D:4B:8E:22:46:5D:24:DF:6D:15:17:A8:A1:0B:45:0E:B6:37","sha256":"91:69:46:BD:A6:15:A2:88:68:FC:DC:C7:75:7D:D2:DD:44:51:1A:E7:DE:3F:5E:61:C5:CD:B5:96:50:E5:24:5D"}}},"request":{"raw":"GET /assets/index-BaMowjr6.js HTTP/1.1\r\nHost: mhvqol.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mhvqol.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 12:47:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 11:04:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c5357-385af\"\r\nexpires: Mon, 17 Aug 2026 00:47:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":230831,"size_decoded":88157,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50256)","md5":"f6831ba18dddebe44aa7f256af687efa","sha1":"beee448303aaa6f779079420f581347c50f6bdd4","sha256":"c03079f8b31291eaadca9f48fb4b2069e39cd118ddd58bd6714a6be0440a870f","sha512":"b021833641bf0fced21846a431ec071042e2cbc6c461d638779ed597ba5e4153e535555a5552e666e3f28aa67896925d364980fe7656b1db734fa51a7e75d519","ssdeep":"6144:9VcU6MPOnp3BGY6sC5AYh0t95VJPxAVeMoz1+QdyHtfkHI:9oBGY6sC5YtlJPxAVeMoz1+Ntj","tlshash":"623407e93282b03243e619e6507b0506f2392d55784e84d4f16deceb3d7784a92bbf6c","first_seen":"2026-08-10T14:47:35.807249Z","last_seen":"2026-08-16T12:48:20.816039Z","times_seen":3,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mhvqol.shop/assets/pages-security-check.C0FeH1EC.js","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mhvqol.shop/","date":"2026-08-16T12:47:52.443Z","timestamp":1786884472443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mhvqol.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 09 Aug 2026 11:00:00 GMT","end":"Sat, 07 Nov 2026 10:59:59 GMT"},"fingerprint":{"sha1":"57:BC:6D:4B:8E:22:46:5D:24:DF:6D:15:17:A8:A1:0B:45:0E:B6:37","sha256":"91:69:46:BD:A6:15:A2:88:68:FC:DC:C7:75:7D:D2:DD:44:51:1A:E7:DE:3F:5E:61:C5:CD:B5:96:50:E5:24:5D"}}},"request":{"raw":"GET /assets/pages-security-check.C0FeH1EC.js HTTP/1.1\r\nHost: mhvqol.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mhvqol.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 12:47:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 11:05:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c535e-2902\"\r\nexpires: Mon, 17 Aug 2026 00:47:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10498,"size_decoded":4722,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10477)","md5":"229e9d9913256958134a19657fa32482","sha1":"c13056d39c8047a46cffc4966b1fdc54b8bc230e","sha256":"afe723df70ce10a31289cf5f7b943ec6e30744f13c958f5c12f13653c5eda343","sha512":"564615169cb26fe6d1f1ca8bf8eecee143ebce982fe918a5bcb2b7c097aa4b5d132de311f3949add03fe64930d38ad384733e842351d38485e32d815900e8019","ssdeep":"192:SXR2olqnGeq5S1S6b2nuU3sCdZS94seTV6su7ASi8RMZ0xo2Cb8f:UPlqnGeq5S1S6CnRckZMMVt6BzaZURCU","tlshash":"2122189d7189be3923720665a1532222b13d2b529845009256fecd043e38e7ab7fffdd","first_seen":"2026-08-10T14:47:35.797682Z","last_seen":"2026-08-16T12:48:20.817388Z","times_seen":3,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mhvqol.shop/assets/access-precheck.DzjXh61c.js","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mhvqol.shop/","date":"2026-08-16T12:47:52.444Z","timestamp":1786884472444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mhvqol.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 09 Aug 2026 11:00:00 GMT","end":"Sat, 07 Nov 2026 10:59:59 GMT"},"fingerprint":{"sha1":"57:BC:6D:4B:8E:22:46:5D:24:DF:6D:15:17:A8:A1:0B:45:0E:B6:37","sha256":"91:69:46:BD:A6:15:A2:88:68:FC:DC:C7:75:7D:D2:DD:44:51:1A:E7:DE:3F:5E:61:C5:CD:B5:96:50:E5:24:5D"}}},"request":{"raw":"GET /assets/access-precheck.DzjXh61c.js HTTP/1.1\r\nHost: mhvqol.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mhvqol.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 12:47:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 11:04:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c534d-7af\"\r\nexpires: Mon, 17 Aug 2026 00:47:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1967,"size_decoded":1404,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1966)","md5":"8ed40fd53f7bc0ebdb8128e088f942fe","sha1":"7a888e6d7a8205a46d8723fdf2f3db61f6a7acc7","sha256":"fee559a43b730f85bce21c0e0ad82db99647eeb18a32579db18fb9f336ba7241","sha512":"fc625a916bd20b0bf8abc40b75712fdc514f77acc90b612d7a5fec68bcf45721d2da7f00cafaabd22aadd942fc9b588c99d0020db4432f957c4a19dadab6a395","ssdeep":"","tlshash":"6b4121dd30da213157e205be9333a204b0384b653c5c9190e21668ea3d7629f93bfe9d","first_seen":"2026-08-10T14:47:35.810113Z","last_seen":"2026-08-16T12:48:20.818751Z","times_seen":3,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mhvqol.shop/assets/_plugin-vue_export-helper.DlAUqK2U.js","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mhvqol.shop/","date":"2026-08-16T12:47:52.450Z","timestamp":1786884472450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mhvqol.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 09 Aug 2026 11:00:00 GMT","end":"Sat, 07 Nov 2026 10:59:59 GMT"},"fingerprint":{"sha1":"57:BC:6D:4B:8E:22:46:5D:24:DF:6D:15:17:A8:A1:0B:45:0E:B6:37","sha256":"91:69:46:BD:A6:15:A2:88:68:FC:DC:C7:75:7D:D2:DD:44:51:1A:E7:DE:3F:5E:61:C5:CD:B5:96:50:E5:24:5D"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper.DlAUqK2U.js HTTP/1.1\r\nHost: mhvqol.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mhvqol.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 12:47:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 91\r\nlast-modified: Wed, 12 Aug 2026 11:05:09 GMT\r\netag: \"6a7c5365-5b\"\r\nexpires: Mon, 17 Aug 2026 00:47:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":608,"mime_type":"application/javascript","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-16T15:01:41.486175Z","times_seen":25568,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mhvqol.shop/assets/security-check-BnXYpA1v.css","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mhvqol.shop/","date":"2026-08-16T12:47:52.451Z","timestamp":1786884472451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mhvqol.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 09 Aug 2026 11:00:00 GMT","end":"Sat, 07 Nov 2026 10:59:59 GMT"},"fingerprint":{"sha1":"57:BC:6D:4B:8E:22:46:5D:24:DF:6D:15:17:A8:A1:0B:45:0E:B6:37","sha256":"91:69:46:BD:A6:15:A2:88:68:FC:DC:C7:75:7D:D2:DD:44:51:1A:E7:DE:3F:5E:61:C5:CD:B5:96:50:E5:24:5D"}}},"request":{"raw":"GET /assets/security-check-BnXYpA1v.css HTTP/1.1\r\nHost: mhvqol.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mhvqol.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 12:47:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Aug 2026 11:05:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c5363-183f\"\r\nexpires: Mon, 17 Aug 2026 00:47:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6207,"size_decoded":2471,"mime_type":"text/css","magic":"ASCII text, with very long lines (6206)","md5":"816b6efccc4302e3fef95a9c56cd0230","sha1":"72187930d5cdd14b65de8d5153481bd91e1002ae","sha256":"38ee4357790956b52cb35de25939866b6ec96a89a478baf5e23dc18c9569c97d","sha512":"f114b58929686f2b4ff66d19ddb21e7866531b557418179c2083503d811cbcd1f98ec4b1417f015022217dc814a5db2161ddd82a1739159e09aab7b57769e646","ssdeep":"192:2wh72RQazOCQ7wkHkAiggWt8SiqNhu5lFaeHAe2tgyBvolH96i+RRmrdirwa0:l8RQaO7wkHkAiggWt8SiqNhu5lFaegeT","tlshash":"09d1533d7b4c142adc37e7722e507648433ee3519b1a8f8d9a9bee20c987577246b348","first_seen":"2026-07-29T12:52:40.887444Z","last_seen":"2026-08-16T12:48:20.821581Z","times_seen":9,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mhvqol.shop/static/r_f7a2c8.png","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mhvqol.shop/","date":"2026-08-16T12:47:52.511Z","timestamp":1786884472511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mhvqol.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 09 Aug 2026 11:00:00 GMT","end":"Sat, 07 Nov 2026 10:59:59 GMT"},"fingerprint":{"sha1":"57:BC:6D:4B:8E:22:46:5D:24:DF:6D:15:17:A8:A1:0B:45:0E:B6:37","sha256":"91:69:46:BD:A6:15:A2:88:68:FC:DC:C7:75:7D:D2:DD:44:51:1A:E7:DE:3F:5E:61:C5:CD:B5:96:50:E5:24:5D"}}},"request":{"raw":"GET /static/r_f7a2c8.png HTTP/1.1\r\nHost: mhvqol.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mhvqol.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 12:47:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 12 Aug 2026 11:04:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c5347-1226e\"\r\nexpires: Tue, 15 Sep 2026 12:47:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74350,"size_decoded":73324,"mime_type":"image/png","magic":"PNG image data, 720 x 589, 8-bit/color RGBA, non-interlaced","md5":"4dd91911b613e8a47eefa9744c0eea7c","sha1":"3fdb6505a6674b07a69e7f200f0ffe69c51a8523","sha256":"309d3df30f5aaf77d8c6ed72ce863636634b06192254bc40b0cbed046f0c6020","sha512":"ecfc90f19961e4c2307e9074fd67236bc5c643c6784574bb74533198cf1914255a541b1b6af2fbb2eb0d51fc5f4a15e021e6672afdf6ed1d5470871d7a521ec9","ssdeep":"1536:uPYpDfeCwwCijjJ2UrjO+GEhPIYpoFjpotmNk1ok8Tm1mNN8:uOfeCNrjjsoORjEoppImNk1WmAb8","tlshash":"f0730203db018c5fd6a48d3a04d705897436eca748e6d2a47316fa470afad690cbbf8d","first_seen":"2026-06-24T12:29:43.693944Z","last_seen":"2026-08-16T12:48:20.822861Z","times_seen":34,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mhvqol.shop/assets/uni.ddee3048.css","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mhvqol.shop/","date":"2026-08-16T12:47:52.161Z","timestamp":1786884472161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mhvqol.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 09 Aug 2026 11:00:00 GMT","end":"Sat, 07 Nov 2026 10:59:59 GMT"},"fingerprint":{"sha1":"57:BC:6D:4B:8E:22:46:5D:24:DF:6D:15:17:A8:A1:0B:45:0E:B6:37","sha256":"91:69:46:BD:A6:15:A2:88:68:FC:DC:C7:75:7D:D2:DD:44:51:1A:E7:DE:3F:5E:61:C5:CD:B5:96:50:E5:24:5D"}}},"request":{"raw":"GET /assets/uni.ddee3048.css HTTP/1.1\r\nHost: mhvqol.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mhvqol.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 12:47:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Aug 2026 11:05:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c5364-1ff2\"\r\nexpires: Mon, 17 Aug 2026 00:47:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8178,"size_decoded":2463,"mime_type":"text/css","magic":"ASCII text, with very long lines (8177)","md5":"93fe31c3a5df48246ce80f37f9488840","sha1":"7cc6cbbc7be7c130190c11cfbaa4cbb3903ee9e2","sha256":"ddee30489add78b0681012c2c2b41beb8a7a49fa5b6285f0649120dd5e015fd2","sha512":"d8356219ae25773099929cc77f1b2b16f3a6aa9ea71eca23795c28939236dffb83907f338afd842e8b56cc320e73b0d53ea8ad13a9de41ceae44d9a3f62d283e","ssdeep":"192:Ujj8LGJ0CQLnWL9/CWh57nYV2UNXVA8MED/Ph/:UXpmLWLAg8bB/","tlshash":"7ef15371d440132eb517cf2e12e2db4f312245b2dd123f28bf7624b44fa92c6693a786","first_seen":"2026-07-29T12:52:40.901968Z","last_seen":"2026-08-16T12:48:20.823767Z","times_seen":9,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mhvqol.shop/assets/index-7PqCSV5L.css","fqdn":"mhvqol.shop","domain":"mhvqol.shop","tld":"shop"},"ip":{"addr":"85.121.148.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mhvqol.shop/","date":"2026-08-16T12:47:52.165Z","timestamp":1786884472165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mhvqol.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 09 Aug 2026 11:00:00 GMT","end":"Sat, 07 Nov 2026 10:59:59 GMT"},"fingerprint":{"sha1":"57:BC:6D:4B:8E:22:46:5D:24:DF:6D:15:17:A8:A1:0B:45:0E:B6:37","sha256":"91:69:46:BD:A6:15:A2:88:68:FC:DC:C7:75:7D:D2:DD:44:51:1A:E7:DE:3F:5E:61:C5:CD:B5:96:50:E5:24:5D"}}},"request":{"raw":"GET /assets/index-7PqCSV5L.css HTTP/1.1\r\nHost: mhvqol.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mhvqol.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 12:47:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Aug 2026 11:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c5356-6d20\"\r\nexpires: Mon, 17 Aug 2026 00:47:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27936,"size_decoded":5025,"mime_type":"text/css","magic":"ASCII text, with very long lines (27935)","md5":"70fd2858b35cc04d66475c799b11a1da","sha1":"887d4f5810feffd5b84b310aa71b0668aac3c4ca","sha256":"164cc6e120387396a59aaf8281f3100c15afcbb5e82d7ea4788dbc21c73e46fe","sha512":"7b41631914b096f594d370851f67326983768e5de03d48ba127cdcf7ad38a2cfebcc3c66675ef7bc8405c802faad70dca7a33c7685f69ae2b415026a083fdb54","ssdeep":"384:FzDzFzaGIK5jBzQxtGkH9213E9z4TYDCHl:lDpOEF","tlshash":"20c2ffb2aa503d4be27d8b33ec91176835105061936313f277a76f9a8d0d65f85633ce","first_seen":"2026-08-10T14:47:35.815137Z","last_seen":"2026-08-16T12:48:20.824579Z","times_seen":3,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"mhvqol.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.174.83.126","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mhvqol.shop/","date":"2026-08-16T12:47:55.621Z","timestamp":1786884475621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mhvqol.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 12:47:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sun, 16 Aug 2026 15:47:56 GMT\r\ncache-control: max-age=10800\r\nset-cookie: __uni__uid=rBACeGqBsXwtZ8TpBE2wAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__uni__uid","value":"rBACeGqBsXwtZ8TpBE2wAg==","quoted":false,"path":"/","domain":"dcloud.net.cn","raw_expires":"Thu, 31-Dec-37 23:55:55 GMT","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__uni__uid=rBACeGqBsXwtZ8TpBE2wAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-16T15:08:27.138759Z","times_seen":20260,"resource_available":false,"data":null}},"time_used":1014,"timings":{"blocked":0,"dns":3,"connect":250,"send":0,"wait":250,"receive":0,"ssl":511},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}