{"report_id":"c5ae3d44-ff52-48c9-a1f8-e6c1f937882c","version":6,"status":"done","tags":[],"date":"2026-04-17T11:52:07Z","url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"title":"Security - Page Appeal","dom":{"size":364745,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (617)","md5":"d4d83e59d1b6674672ebfd227034118f","sha1":"9d2da2de1a56548e9437633e3f180a7f3672a4c3","sha256":"4b9fe2954a1f692988fe0e192d8da90e7ac909cd0d819c16e22f899b306bfcd5","sha512":"791c60e4b2ac6ad148736f7c48c639eda55faf10ce4011135ca9e334bb47b2e5e3037229f2b73ff20994e723aa5f22aa137046b10d8ba450dd3a0cef170c5aeb","ssdeep":"6144:jUq1d0IC7HQBEUSFKyCwY8iEhfTWFvGGGeibV4:Iq1d0UTSFKyCB","tlshash":"5974a52312f831370137c1e9246b4737f365984bba970a043e9c97e91feeca1a577668","dom_hash":"domhash6561d68ac894ff28efdcb956a7687826","first_seen":"2026-04-17T11:52:09.646757Z","last_seen":"2026-04-17T11:52:09.646757Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-22T11:52:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-17T11:51:44Z","timestamp":1776426704,"ip_dst":{"addr":"172.67.75.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":47958,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed External IP Lookup Domain (db-ip .com) in TLS SNI","source":"{\"timestamp\":\"2026-04-17T11:51:44.507602+0000\",\"flow_id\":2038084905508977,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":47958,\"dest_ip\":\"172.67.75.166\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2063074,\"rev\":1,\"signature\":\"ET INFO Observed External IP Lookup Domain (db-ip .com) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_06_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2025_06_18\"]}},\"tls\":{\"sni\":\"api.db-ip.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3511,\"start\":\"2026-04-17T11:51:44.499825+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"gretaruppousse.vercel.app","ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-03-04T16:34:23.936789Z","last_seen":"2026-03-04T16:34:23.936789Z","alert_count":40,"request_count":20,"received_data":903482,"sent_data":10385,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-12T22:35:46.689898Z","alert_count":0,"request_count":2,"received_data":51853,"sent_data":954,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-04-12T23:27:20.270056Z","alert_count":0,"request_count":1,"received_data":88518,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-12T22:33:20.808909Z","alert_count":0,"request_count":2,"received_data":280406,"sent_data":941,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.db-ip.com","ip":{"addr":"172.67.75.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-05-18","domain_rank":669398,"first_seen":"2017-01-30T02:58:03Z","last_seen":"2026-04-14T12:44:58.983415Z","alert_count":0,"request_count":2,"received_data":1973,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"246cdd9342d6df668fd36e314d7a3ffd","sha1":"e7f22a012295f5927074845f8556da9e50390261","sha256":"6e9718d5fbecd8e2f158db327e1e58f2b865bec456b59f058c0b8c65a91ac0b6","sha512":"4e4df852fac01c666fff9f5c3c7e90617b3d87ff9c9ca6be8d716e8849ee23d8c8d1db611f85be8e47727732654e83a74c0afc972ce5c13668060d53824ff3e4","ssdeep":"1536:5wkcpyQYq19XxReciupZvKST0VFsBbGFCVvzBT11EUD97cuqmSIC7HQBEUNpyFx6:G/Uq1d3B2IC7HQBEUSFKyI","tlshash":"b4e3300a33f56432425bb07a592fc60ab335a4472a4aad0c3e5c56dc5f1d87867f2fb8","size":152281,"data":"","first_seen":"2024-02-15T03:47:53Z","last_seen":"2026-06-13T17:35:33.351557Z","times_seen":15221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"77f3b8ce7fadadaf8cc1f727e2489349","sha1":"d52c5b85ee5efcca0ea533cacd984721a583adf1","sha256":"e46530c7c7b2c7db16bbe530bc23317721d612b6f2317affaf2a7e71c5a86253","sha512":"f67da25fcf984b90fc30458787709e8d9423ff07f350d675f5821400c8a6db09d98ecb053de613ebe6d452f0b3ec21f24a186a23d0e9e3cccb6cb0854cb7aa0e","ssdeep":"","tlshash":"8121d00e13a1163157737039b7df62152266a12324c0cd59be8c47483fc4aa5d7f1fd8","size":1381,"data":"","first_seen":"2025-06-07T18:33:09.285905Z","last_seen":"2026-05-03T02:45:24.017859Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"24725a7568f98eef0dbae7e82779569f","sha1":"350633c3e69884b9832a1d9affbf3cc4aa7676c8","sha256":"fb3f4cf3004917d868a8b902f6af51dc94257719f5b732d09a9a94b524d6e2ab","sha512":"198eab6e2b0f7fb5d6989386b5d47df1c1552ad098dcc6537054fce26860c71e81b01013204195e9df5d9b9dfaa58fa067364004b3744d7407d93a7a19704755","ssdeep":"","tlshash":"0a01a60112f10001858313abda9f4129aa30e03badecac883dcc224e7f57a8185eea84","size":791,"data":"","first_seen":"2025-07-28T05:39:55.634351Z","last_seen":"2026-05-03T02:45:24.020368Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.19/js/utils.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"813aa3ea23552307d5a15a7ac0cab1e2","sha1":"9800dc2e2ab5760e7ee7972d1dfa691f81400769","sha256":"b67fec30ceac38bc9439e34f50f29a25697238404f8d382641e0f81d214196bd","sha512":"8c473af7e5de39d7c3c0bba2f87a4f5a5f3ff3e7319077307339f06d51ab9959440890fe2f5c8dd0f963805d8c3ecebed5b4d7fa036fa3ff42dd827b9f88bdab","ssdeep":"3072:nE78ZABjN03k4Pc03C4PuQIAyMEZmTdTL6iYkgWBU6uRPvUQL+D4tQrylVS7x5qr:nPK52+ZmTdTLY/","tlshash":"1c34dfebd63c9736a5d97b35968eb3cd5a8cbca3c848527826c3b54f53788e0706c205","size":248845,"data":"","first_seen":"2023-03-13T08:52:24Z","last_seen":"2026-08-12T06:01:33.426727Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-14T00:40:02.130496Z","times_seen":185535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.19/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a65d712ff4ab7a09f61bbfe448238a4","sha1":"b467d76dd47b0fdcebca3b0fe7582f4cf90f8b76","sha256":"4d207cb73093f1034ad338e8103d58516f6f5f53492c24cbaa238c9e16105a6d","sha512":"73a86403273e78a0a7479ee71f5dc322b14de54d2b0b873a6d955add77a541fec21d9c62c11d1033c9b36ac20714c6f329d4ce41e389fee53e51dc845f45a6b4","ssdeep":"768:esqD7GzOoS+D45YdR3QWG6UdC8OxgtmKg3vTpzaDvCY9R:EfUQWodCjgtmKgNzazCw","tlshash":"ead20a9973551237a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a1b5734","size":29481,"data":"","first_seen":"2023-04-07T09:15:38Z","last_seen":"2026-08-13T22:42:14.075257Z","times_seen":2128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@18.1.1/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"56ac609bb900dc42d7df6667c5c3ce31","sha1":"7d9df7aa529524c88873d0af057d0d92e17da8e8","sha256":"116f7fd41bf96c3881805a25dc8bf19d731807de97a90316544fcf311ba5123b","sha512":"25275f2a9e4128ffea48900dee3af023409de00312c00b0a3b4d1a6471a6d34e55034b60e6e7e5eb6718311431fcd0bfefa8814151018e646d1cecffda375a21","ssdeep":"768:VqD7GOOoS+D45YPI3QW6O2six0Pthp5v4pIIWQCJm8R:wf8QWB2Jothp+IIZCP","tlshash":"78d22b9973512637a89ae0a1587f16476ebf34015684cc8cb8becdc80feced9a1b5734","size":30620,"data":"","first_seen":"2023-05-25T07:33:26Z","last_seen":"2026-08-11T11:26:08.181229Z","times_seen":1498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"33254fe50f066208c5232de139c159d0","sha1":"fcf9627466a245612428dc80febbd886074f3257","sha256":"9961f9ebc426fb65e7b893896c197c3dbb8cb62148ba06f4457e54cabe645af2","sha512":"e28b5996d957c76f2e5b1296af76972e931cfd8271ba6678e3303ac3c2e96294a76dd6dd4114d3dd5ff3674838eb48802a2fbcd30f751cfdf3ca45181656467d","ssdeep":"","tlshash":"de41cbec759cc68d45ab705f83cdb4149bf10029f912c412f4cd16821fba892c6138ed","size":2364,"data":"","first_seen":"2025-06-07T18:33:09.287438Z","last_seen":"2026-05-03T02:45:24.03347Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1dfec4a35eeeb98cec0225bbef92f097","sha1":"3b0ccd432971bfca5fcf18142077d9b5790492e6","sha256":"5c9332d1ee4e687e045146662287dae7993a28fe74054447cd3b05e7fe7b35ac","sha512":"a1a5b069041281d8b5e4bc8e597da9cd06229750d1c5f5e560c58e326213f538424027f4b9eef66d752140ca2e49b8bed9804a610cc000d0e54a4bd702a42a1b","ssdeep":"384:SzBaCYlrUGJFm01/qddc+mNjr4RK7IYuP72leP4uk4sk7Vh4MD4NArU9bxPr6Q5Q:erX6jr4W39asq","tlshash":"51d251699dba06b01f9bf1bf49ef1341b170405b5800e8047c6c8a805fdae2756bebf9","size":29860,"data":"","first_seen":"2025-09-16T12:18:00.74798Z","last_seen":"2026-05-03T02:45:24.03835Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/styles/style.css","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/styles/style.css HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 40273\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"e2153c520102b256288f309545548396\"\r\nlast-modified: Fri, 17 Apr 2026 00:40:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fsjvl-1776426704179-370ea398358f\r\ncontent-length: 3254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12075,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"7b1004fd0d9f201b8987de8070a16200","sha1":"f6ed97f6522636c2301b665988aad21fefb0ba44","sha256":"2ff1e393afb1b18849d23915ba64eba6f0aff1cb59760b2468eb584f41e72db6","sha512":"db4c854c05c0dee1ecc725c7e52d22a65341f80adc82f180315b8f2c7ca5058ff51d843911bc538dc5658811a7bff3195e63c424b98b1aeb233ec4bfb8827d99","ssdeep":"192:gCwX2xWiFwLKIDZmNi8+PMnqq3yTm7SIv02KFK9/dF+1dlDf6IyHppUIf4VP:9rAkD+knfz7h8vF0/dF+vlDfUBiP","tlshash":"494243966ef81608b51ad4a438e39f56f35e8082850eddbc76e4308c9fcd2c555be38c","first_seen":"2025-07-28T05:39:55.579151Z","last_seen":"2026-05-03T02:45:23.910713Z","times_seen":89,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@18.1.1/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@18.1.1/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 18.1.1\r\nx-jsd-version-type: version\r\netag: W/\"779c-fZ33qlKVJMiIc9CvBX0NkuF9qOg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\nage: 3039544\r\nx-served-by: cache-fra-etou8220044-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11435\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30620,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27283)","md5":"56ac609bb900dc42d7df6667c5c3ce31","sha1":"7d9df7aa529524c88873d0af057d0d92e17da8e8","sha256":"116f7fd41bf96c3881805a25dc8bf19d731807de97a90316544fcf311ba5123b","sha512":"25275f2a9e4128ffea48900dee3af023409de00312c00b0a3b4d1a6471a6d34e55034b60e6e7e5eb6718311431fcd0bfefa8814151018e646d1cecffda375a21","ssdeep":"768:VqD7GOOoS+D45YPI3QW6O2six0Pthp5v4pIIWQCJm8R:wf8QWB2Jothp+IIZCP","tlshash":"78d22b9973512637a89ae0a1587f16476ebf34015684cc8cb8becdc80feced9a1b5734","first_seen":"2023-05-25T07:33:26Z","last_seen":"2026-08-11T11:26:08.181229Z","times_seen":1498,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":55,"dns":0,"connect":33,"send":0,"wait":26,"receive":3,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/img/no_avatar.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/img/no_avatar.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60180\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"no_avatar.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"d5d30f28ca92743610c956684a424b7e\"\r\nlast-modified: Thu, 16 Apr 2026 19:08:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vzjbb-1776426704169-ff418784498f\r\ncontent-length: 6043\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"d5d30f28ca92743610c956684a424b7e","sha1":"fd4a7207b724254d981a4ed4c7f675fd87868535","sha256":"4b842e25c6be485fd7f06b745ac91db2b6e9eee778c5442b157be78d51f83563","sha512":"7d0a522805b0a34b33f48791bbbfdfc361b9d91ee9d5843d67e8e1a774f9d8dad42c7d0efa429738a0680fcb8d71dacc4b47e22f1daa8ce718dbf36e6db35328","ssdeep":"96:s7xaydiMkBvGfzBKIFuC/bG6UAlQloqPZ6UtCjcphNixjT0vtK9E0NJGNKIX3D7b:s7xxr3oFloqPHtCQViV0vMVUj3D71rrx","tlshash":"fec19ee35fd67937430ad6fb6ee962c62b416188acb5f24c023373406157c548fa5e2d","first_seen":"2024-01-09T09:55:04Z","last_seen":"2026-08-13T14:35:02.665816Z","times_seen":14554,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30462\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 08:34:57 GMT\r\nexpires: Fri, 16 Apr 2027 08:34:57 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 98207\r\nlast-modified: Tue, 12 Sep 2023 02:38:22 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-14T00:40:02.130496Z","times_seen":185535,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":140,"dns":1,"connect":8,"send":0,"wait":9,"receive":8,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/bot/barcode.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /bot/barcode.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60186\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"barcode.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"921a0084b7d0ea06826ec7a74d4f7036\"\r\nlast-modified: Thu, 16 Apr 2026 19:08:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k9tgk-1776426704162-73c8389f3593\r\ncontent-length: 926\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":926,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"921a0084b7d0ea06826ec7a74d4f7036","sha1":"4e6b73ef01e0e50d37ffd4e3baddeed30c8dc7a7","sha256":"a6ed07b7c170170f09244f22a6da8e812d99284871f934dfa86bba5e07ed73ce","sha512":"2c97ecf530829ef410651dabfa6eb932f99db8defc2facff9bae3eb22729bff53804354e843709215f5bc73fb4d983703a536fe00201e9249f33beb82d74bf81","ssdeep":"","tlshash":"5c1184b92e4c952ac20c773792bb8902f93f8b1e3776c90470bbb0125c954308495d57","first_seen":"2025-07-06T09:11:55.624792Z","last_seen":"2026-08-13T07:06:59.386181Z","times_seen":470,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/img/phone.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/img/phone.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::vzjbb-1776426704164-fe1f93e0798e\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"6da9d186d437d30cfb34a8f2e8b6dcf7","sha1":"e1fbf6c2124e00d4c2b871776d3d17fc57269d96","sha256":"9927ceb077fa522c17f3af91f1fd7c1f002de6193977fb8f6a4c1a12c617849f","sha512":"6e482834d5d895be072c38b9e4b6dd080615b0ad047e842d45de20e6f8ed8aeede8f0ceaa1aad0dd21164524124a94470ece51f21d3c9f9b6fe57d6ae4b71098","ssdeep":"","tlshash":"9ca0222f0a838cae33c000a03003823b20380323afa2e20082cc2320280c8cfb3800f8","first_seen":"2026-04-17T11:52:09.657424Z","last_seen":"2026-04-17T11:52:09.657424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/img/star.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/img/star.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 40273\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"star.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"aae920faed2a3fe4c3083b339cd783df\"\r\nlast-modified: Fri, 17 Apr 2026 00:40:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xtxg8-1776426704169-b133704463eb\r\ncontent-length: 1980\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1980,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 41, 8-bit colormap, non-interlaced","md5":"aae920faed2a3fe4c3083b339cd783df","sha1":"be5e47195c28b585d65478e2399d0d5f9b74435c","sha256":"f75d9bcacc1a1aabc6f93c383f5494307d91f7f302c266626d6dc92b4b86585e","sha512":"968d180a7d9a2fe273a075174f6e7b4561a060f37fd7b1c6f12b2fd7a7d653318672f298245373b15f9aeca1982b2138546f300d48ec2dafaac73f3339147653","ssdeep":"","tlshash":"2d414c54345724a0d24b0be3d2a1bee3e0123e995ce0362c169048b4ffbad49d0e691a","first_seen":"2024-01-09T09:55:04Z","last_seen":"2026-08-13T14:35:02.659071Z","times_seen":14512,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.19/js/utils.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.19/js/utils.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 45672\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"63208edf-b268\"\r\nlast-modified: Tue, 13 Sep 2022 14:08:31 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 608934\r\nexpires: Wed, 07 Apr 2027 11:51:44 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSRK1IxPF7eVSzw2%2BCn1CW5733j%2BO3N13OqfmhoqWO0upjPNLzwyfHHXyE24HvUZyfMReMpJhYCbuid3KyP41xFWEYEbwiizbXMGvrsDcFQOYoByjTbiW2PU68cHlmbKWY6rqVw3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9edb3838a90db4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248845,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"813aa3ea23552307d5a15a7ac0cab1e2","sha1":"9800dc2e2ab5760e7ee7972d1dfa691f81400769","sha256":"b67fec30ceac38bc9439e34f50f29a25697238404f8d382641e0f81d214196bd","sha512":"8c473af7e5de39d7c3c0bba2f87a4f5a5f3ff3e7319077307339f06d51ab9959440890fe2f5c8dd0f963805d8c3ecebed5b4d7fa036fa3ff42dd827b9f88bdab","ssdeep":"3072:nE78ZABjN03k4Pc03C4PuQIAyMEZmTdTL6iYkgWBU6uRPvUQL+D4tQrylVS7x5qr:nPK52+ZmTdTLY/","tlshash":"1c34dfebd63c9736a5d97b35968eb3cd5a8cbca3c848527826c3b54f53788e0706c205","first_seen":"2023-03-13T08:52:24Z","last_seen":"2026-08-12T06:01:33.426727Z","times_seen":332,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.19/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.19/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8933\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"63208edf-22e5\"\r\nlast-modified: Tue, 13 Sep 2022 14:08:31 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 275351\r\nexpires: Wed, 07 Apr 2027 11:51:44 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdUNjR7wXiVOperMrxXpo6wMRNVyWOSSWFlCZWMAs0asOBb85I69hsUOVXYw8L0SVBsW8CDut4viNpLZg0hcUqHdz6sPp4naH53VxvHoA9sUlaUIdHeFqRKWpL5ICQjgYSgmIVvQ\"}]}\r\ncf-ray: 9edb38355c575684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29519,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26956)","md5":"1a65d712ff4ab7a09f61bbfe448238a4","sha1":"b467d76dd47b0fdcebca3b0fe7582f4cf90f8b76","sha256":"4d207cb73093f1034ad338e8103d58516f6f5f53492c24cbaa238c9e16105a6d","sha512":"73a86403273e78a0a7479ee71f5dc322b14de54d2b0b873a6d955add77a541fec21d9c62c11d1033c9b36ac20714c6f329d4ce41e389fee53e51dc845f45a6b4","ssdeep":"768:esqD7GzOoS+D45YdR3QWG6UdC8OxgtmKg3vTpzaDvCY9R:EfUQWodCjgtmKgNzazCw","tlshash":"ead20a9973551237a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a1b5734","first_seen":"2023-04-07T09:15:38Z","last_seen":"2026-08-13T22:42:14.075257Z","times_seen":2128,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":29,"dns":8,"connect":2,"send":0,"wait":10,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.db-ip.com/v2/free/self/","fqdn":"api.db-ip.com","domain":"db-ip.com","tld":"com"},"ip":{"addr":"172.67.75.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"db-ip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 09:58:49 GMT","end":"Sun, 24 May 2026 10:58:41 GMT"},"fingerprint":{"sha1":"9C:C8:5E:19:D1:34:2F:4E:E5:5A:5B:02:7E:E3:30:E9:12:0B:14:7B","sha256":"9D:1E:B4:71:9D:67:5C:72:8D:D6:35:75:E1:03:30:27:BC:A9:94:3C:27:19:3D:9F:7A:71:85:6F:69:C3:F4:2C"}}},"request":{"raw":"GET /v2/free/self/ HTTP/1.1\r\nHost: api.db-ip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gretaruppousse.vercel.app/\r\nOrigin: https://gretaruppousse.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1800\r\nx-iplb-request-id: A29EDE0B:4682_93878F2E:0050_69E21ED0_B080BF9:1A0A0\r\nx-iplb-instance: 54033\r\nlast-modified: Fri, 17 Apr 2026 11:51:44 GMT\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SRJrxqfdKQ%2FIkpSaYC5WxqRiDjfggPNqRigC0I4T7W76IMPuzjBTyvXx%2Ft1rTR063imSh3LIcl2nEm%2BsylNNxcr43gBOWWWOY64txp2%2BwuEMlNuEVQQ%2BwQ0iGfr5d8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9edb3837399d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b3cbea51f9a9fcaf6275e88da822e6aa","sha1":"b9740712e7a8e51a3cfa95a11c75c671644c5ab2","sha256":"9976a8ae9b1a43de4fb568b400d7026c135c71935aa1041418252b0882ba41ff","sha512":"6d8eaa66b856c1b0793c4d39da790212306dd5a7679f87e3310dd3c478277ffa360497c29eb2512f1b7c681881732862077d0185f2c3a3b0452db396bb69ea52","ssdeep":"","tlshash":"62d01234c9082e5749e4744a644e196212107647cf05315e7f9cdf9d0fd8dbf30340ad","first_seen":"2023-05-09T17:22:56Z","last_seen":"2026-06-07T06:02:11.63444Z","times_seen":9724,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":23,"dns":6,"connect":1,"send":0,"wait":99,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/img/block_2.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/img/block_2.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60188\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"block_2.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"8942e3ff39cd6784c7c89bd6eb26d604\"\r\nlast-modified: Thu, 16 Apr 2026 19:08:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xtxg8-1776426704150-a72c213da945\r\ncontent-length: 18787\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18787,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced","md5":"8942e3ff39cd6784c7c89bd6eb26d604","sha1":"b03e96fa075ba36fc3d6729fb312f0a59c2a023a","sha256":"9b7c1670777cc38a18fc6b98443b40036fde8de97cdba6087e2a31a1de9e748b","sha512":"af5040882b3ba0d18c56b5cf0cad4c2f8e6fcbabda8b85d0284dab2662a5bab76e38ce6fdd261b27a394d55e58f427aba7edbe8d3a8a33ee422d43cba85bf741","ssdeep":"384:RLwiYUB+GVTS4XHEHc6jMfHrk0T0U0t9424sWnUq5/cYC1/KNk7:miYdvGH+MDk0Y79jjBqRcYcKNe","tlshash":"d782c058d78053e1602cc99617a890bb8a578433259fcc67fa5e88c57fa079d390b3ce","first_seen":"2023-12-25T05:22:01Z","last_seen":"2026-08-13T14:35:02.658342Z","times_seen":15300,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/bot/id-verified.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /bot/id-verified.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60185\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"id-verified.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"56af35c59e34cef0e455b292a4d1908c\"\r\nlast-modified: Thu, 16 Apr 2026 19:08:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vqsl5-1776426704155-6aca16492a3f\r\ncontent-length: 868\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":868,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"56af35c59e34cef0e455b292a4d1908c","sha1":"a6e89fa4704b1de8545661c29be1b98b8fb1de5d","sha256":"0a63c06e30d6c569649d0a93982c4f2c2f89a483df2b90a8378964b6e2855f5e","sha512":"e1aca665a1a8e3a2f4873c92559a424b61dfdfda13d62c8441e270baf6d4a7ef374f6089c4ec9b2ce758fe4e8bea5d50b688818b6d2869432b6dad6e3f1ad444","ssdeep":"","tlshash":"401152ed8278aa7f452acb0ee084561c3d71a01e940aa81c30d9e0bad332e0b57f9912","first_seen":"2025-07-06T09:11:55.639496Z","last_seen":"2026-08-13T07:06:59.366748Z","times_seen":433,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/img/2FA.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/img/2FA.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60182\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"2FA.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"03d39d5d071182aba1b01ba2e859de39\"\r\nlast-modified: Thu, 16 Apr 2026 19:08:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xtxg8-1776426704164-b37c30f98458\r\ncontent-length: 114767\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114767,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 541 x 252, 8-bit/color RGBA, non-interlaced","md5":"03d39d5d071182aba1b01ba2e859de39","sha1":"7ba8f968b03e92fd59a6c4f6ce5c8aa36a5d2b92","sha256":"a7fd65363687e512751d88f7850b61969427e8d3aa9a177946bcd4bc280b71ad","sha512":"5bf4d0b9ff650ff11c8ff69c409c45fbfd31bc3f8c4b55f665bea8e11a42c412b9ea25b9974908ab9b670a22e80a445692a26b98535b84cb49299c37c22e16e6","ssdeep":"3072:SOEFifYmNYKElSiLVN6MOzKqJdnJYJe4kiUh6sq:SIZYKEzmXZdJ8eYx","tlshash":"3cb31251b4a03e28e812f3ea73d7f49a4c71e374785d41a294047ec7e72da56f04afa4","first_seen":"2024-01-09T09:55:04Z","last_seen":"2026-08-13T14:35:02.664569Z","times_seen":9891,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/ico.ico","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /ico.ico HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::xfql2-1776426704733-18779fbf16e5\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a99a836205954c2d87f0cb3e214a735d","sha1":"005a34abb16ee4948ec462856b125fcfb4eabe12","sha256":"f382871b12e048d232f7e3fd6d0f867a9514fb25904de9d1270820576c140fae","sha512":"8bdadfc6f4761de9038cde033aff3be0929ac895e45e90cb4fa6347c7b6b8647d816c8144806dd718b1ee7d51b0fc60ae2c8ba08be327ae27c7838e692426c01","ssdeep":"","tlshash":"fda0121f0248184e7390008021055134102082235b61e20062e816141c000cd63480c1","first_seen":"2026-04-17T11:52:09.66932Z","last_seen":"2026-04-17T11:52:09.66932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@18.1.1/build/css/intlTelInput.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@18.1.1/build/css/intlTelInput.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 18.1.1\r\nx-jsd-version-type: version\r\netag: W/\"4cd1-TlXalafRjT7L3hZEBITfOAu68P4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\nage: 171754\r\nx-served-by: cache-fra-eddf8230137-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19665,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (19665), with no line terminators","md5":"b41fad07c500d63c076f70669ba7f9e6","sha1":"4e55da95a7d18d3ecbde16440484df380bbaf0fe","sha256":"a1e9f2c7a8c80a11fd8da5caddf517a5c28e7a64d01c84295014283897c762d8","sha512":"e11bcbc70e078d84bea8d7f122523428ca7d69c1c68c6115d0bd7291de59dfc1aa938c83946df43fe63e54a8fc76ec99d852d83e02844c2c9ab7d2285e4dc3b5","ssdeep":"192:mDyGnXh/TVc6jU+4v7fix43obCfCfIlSc:mDyuXhK6jU+4vTixaACaglSc","tlshash":"9692201709a32429f62bd5e251708eb637278c07f4264fba49153e7ca2825d41df3fe2","first_seen":"2025-02-10T16:54:34.881884Z","last_seen":"2026-07-16T11:42:41.523232Z","times_seen":770,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":61,"dns":0,"connect":30,"send":0,"wait":28,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/img/phone.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/img/phone.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::ltdxh-1776426704429-2e7ee60105c9\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"3077bccc3b3719f1164a117c21b3bfa4","sha1":"9d2b87366930834bf118b411ce796682b51b8f88","sha256":"2b4819afad4add3b928d4e8895e4e4f0eec22d421493454929f57e9d1eecab1b","sha512":"91805563f4a522217a83f8d696a8787249258a2702992590891ca062e34811fe3233bc5e5b4fa7490c30429f5214368a6b0d74e03c91d40a90a2c6dc2464a417","ssdeep":"","tlshash":"44a0120e4090089e33c81420212101341420521399e59112158c330075084ce7340044","first_seen":"2026-04-17T11:52:09.672889Z","last_seen":"2026-04-17T11:52:09.672889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/styles/bootstrap.min.css","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/styles/bootstrap.min.css HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60180\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bootstrap.min.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"27437f8c5a04a831892ab1192853b77f\"\r\nlast-modified: Thu, 16 Apr 2026 19:08:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vzjbb-1776426704140-afe05b6d1c38\r\ncontent-length: 27117\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":185717,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (334)","md5":"6636c2dab79c70d2af7ee3ac42212655","sha1":"feb8913114476bee87f055089baa9333760b74c9","sha256":"1f0b3550fd4a1380d991b3d2ef78a91ca45b8caef07a142a401df48d114aaeb8","sha512":"4558627800306466163353911c190209d54e2ecc52b225d379c17b58bc75943592f279f8c284218ace0f1ac7e79515ac2df7d6f15701098c7e7857c1ccab7f6c","ssdeep":"1536:7oo0pe3VX8IFqCvnUEE9RMPenjyCFeDm9M5FKBnpNfb:7Ae3CxM5FKBnpNfb","tlshash":"b0045499fdf128085a178558a443bbf97b2d1085b709ee79f4a33651e3883c1e4f3e89","first_seen":"2024-09-20T16:38:26Z","last_seen":"2026-05-03T02:45:23.947437Z","times_seen":5849,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/img/meta-logo-grey.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/img/meta-logo-grey.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 180479\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"meta-logo-grey.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"ffba640622dd859d554ee43a03d53769\"\r\nlast-modified: Wed, 15 Apr 2026 09:43:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j79nj-1776426704159-b4374b5e0696\r\ncontent-length: 105511\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105511,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced","md5":"ffba640622dd859d554ee43a03d53769","sha1":"c91a100db7bfc04df9a5f3223d5b6f17536bf5ee","sha256":"139d38d0fbfed2fd9f2b782af9b3eb08005b9bc75faaa31fe29720cc64bcab0f","sha512":"70c7c4df14a22e00a0caf1daf001e608454604fa0b4c13583efac7a8caff6c726d62c024f9e0626760b524f7d08184e4e30cf4a49be505acb1f9d29cfce35993","ssdeep":"1536:VudXKa4pprle5L3Ve48HXzXl4F4fTy9AeC9hhxVK0cYUFLWyMjmy/Yu:/xe5UHDaCTy9bmPJURWBjma","tlshash":"efa3022ee1d5311eced3515032d47e985a86ace5cf421c08758cca9b8f34e994aed3ea","first_seen":"2024-01-09T09:55:04Z","last_seen":"2026-08-13T14:35:02.661291Z","times_seen":15751,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/img/dir.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/img/dir.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::j79nj-1776426704169-0da83df51ec9\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"f69c686b7576bc53b763a0b1a596173f","sha1":"d42ddd7ac4b3755f70ed4e7f5099109bd472d081","sha256":"a8b0ccd943950e46bf7934f80422be13067b7fc226176f05c3cbc314639c28b6","sha512":"9c707015ee0f8cb0fb90e6ba5141149b7d4636121df486a75e2d09295c18c09806b13522bce252bcb042fdc40b97c046715888c0bd36a7f39eb38c293a0c8e5c","ssdeep":"","tlshash":"3ea0120f028008df33c0200021421138a52402177a63d501408817001c045ceb344085","first_seen":"2026-04-17T11:52:09.677377Z","last_seen":"2026-04-17T11:52:09.677377Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.db-ip.com/v2/free/self/","fqdn":"api.db-ip.com","domain":"db-ip.com","tld":"com"},"ip":{"addr":"172.67.75.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"db-ip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 09:58:49 GMT","end":"Sun, 24 May 2026 10:58:41 GMT"},"fingerprint":{"sha1":"9C:C8:5E:19:D1:34:2F:4E:E5:5A:5B:02:7E:E3:30:E9:12:0B:14:7B","sha256":"9D:1E:B4:71:9D:67:5C:72:8D:D6:35:75:E1:03:30:27:BC:A9:94:3C:27:19:3D:9F:7A:71:85:6F:69:C3:F4:2C"}}},"request":{"raw":"GET /v2/free/self/ HTTP/1.1\r\nHost: api.db-ip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gretaruppousse.vercel.app/\r\nOrigin: https://gretaruppousse.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1800\r\nx-iplb-request-id: A29EDE0B:468A_93878F2E:0050_69E21ED0_B080BFC:1A0A0\r\nx-iplb-instance: 54033\r\nlast-modified: Fri, 17 Apr 2026 11:51:44 GMT\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xOYE1hbyLiRQ%2B2233XQmcXKqEnEiUF9hI62t67ZxWnp8BD3psZeAduknXjN15v%2FMQF0rfSQo1fXG0siKGsAu5tdoeJovxIoMNblQcyx4z6dAEedXNh%2Bh8mqokB9rfk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9edb383749a85fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b3cbea51f9a9fcaf6275e88da822e6aa","sha1":"b9740712e7a8e51a3cfa95a11c75c671644c5ab2","sha256":"9976a8ae9b1a43de4fb568b400d7026c135c71935aa1041418252b0882ba41ff","sha512":"6d8eaa66b856c1b0793c4d39da790212306dd5a7679f87e3310dd3c478277ffa360497c29eb2512f1b7c681881732862077d0185f2c3a3b0452db396bb69ea52","ssdeep":"","tlshash":"62d01234c9082e5749e4744a644e196212107647cf05315e7f9cdf9d0fd8dbf30340ad","first_seen":"2023-05-09T17:22:56Z","last_seen":"2026-06-07T06:02:11.63444Z","times_seen":9724,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T11:51:43.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/bwurhuzvzgajtx.html HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 65165\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bwurhuzvzgajtx.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 17 Apr 2026 11:51:43 GMT\r\netag: W/\"34a52c10ed9a29261d698feaeea8e244\"\r\nlast-modified: Thu, 16 Apr 2026 17:45:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j79nj-1776426703857-5a15689a1506\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":271060,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (617)","md5":"34a52c10ed9a29261d698feaeea8e244","sha1":"0c84a659eafe2fba822bb1a899466cc84709988c","sha256":"c8cfe4abfa486fd96c985acd87ed8515e3dfd3a0e382714119885b78d93ec753","sha512":"0ec3b935771bc55df1f925af36faf52c0bfc7b0e272541bf5173bbb941949237299c08122b50b382f43820555ada07ce0cab30212ab405537c7a82a57cf14a50","ssdeep":"1536:ZwkcpyQYq19XxReciupZvKST0VFsBbGFCVvzBT11EUD97cuqmSIC7HQBEUNpyFxi:m/Uq1d3B2IC7HQBEUSFKyD5gL5H7","tlshash":"de44e75a32f92176018ba07a5e2f860b7731a047560a99083e5c17dc0f5ec79e6b7ff8","first_seen":"2025-09-20T16:22:28.149077Z","last_seen":"2026-05-03T02:45:23.969926Z","times_seen":7,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":30,"dns":4,"connect":1,"send":0,"wait":11,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/img/444.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/img/444.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60187\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"444.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"d940f9c780c77c033d7a82baaa8e6286\"\r\nlast-modified: Thu, 16 Apr 2026 19:08:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vzjbb-1776426704155-754aacb52b6b\r\ncontent-length: 118348\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":118348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 506 x 300, 8-bit/color RGBA, non-interlaced","md5":"d940f9c780c77c033d7a82baaa8e6286","sha1":"f2ebd3d6f46b940f77ae15deeca2f2d33e6c7f09","sha256":"2586b8825af967b202bcd006856a1f1917a28fb919b107d239c3caffacdd524a","sha512":"809f3100e9d6a10dc0f1e051d1aa0bf3e0d7adf9bf5114a642d5607cd594d232517a63a907600b4500e76ddf2537c6bd55c9c4eb730dcdb0500b5cce600afb71","ssdeep":"3072:s6estwzZ11/RlRRZytGT2fs4dYo68cwUITHaX9cW:s6e8UZ11JlROMyEdHnGHaeW","tlshash":"94c31205e66e2dfa6723e4aef5af25691c0c68b0d45797303ce20dfa7c201d96c58c57","first_seen":"2025-07-05T20:49:37.078618Z","last_seen":"2026-05-03T02:45:23.986991Z","times_seen":46,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/img/save_img.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/img/save_img.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60184\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"save_img.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"8d3bcd1278891fc1e52d38e72549b3d0\"\r\nlast-modified: Thu, 16 Apr 2026 19:08:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jlfkb-1776426704156-5c81c0754554\r\ncontent-length: 7550\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"8d3bcd1278891fc1e52d38e72549b3d0","sha1":"af1ab86b5a3993c468c3be9c59a8ed3d9091454d","sha256":"8fc3f44a189200b47c93a90ad8dffe40fcdeda8a718e62bb4baf98f00d536e97","sha512":"e8c73ab69e70bdca02c1c7004947186455c632692311b4ca91d1bea143ce7f0b986dc0b0623b8ae82f9561549337171b3e89a55f7bcd92964fe214ddab1c4feb","ssdeep":"192:ri4sn8ZlCLFUm5Dk3CqDEkV8YaTETosC1nEDuO0f+htV:rfsn4CBnKCqYkaUoseEDuO0C7","tlshash":"d8f18e4d66788d2d74db13ab8c3b69b38d3e2b809e52692ecb574058356962e830fc06","first_seen":"2023-12-25T05:22:02Z","last_seen":"2026-08-13T14:35:02.652953Z","times_seen":15919,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/img/doc.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/img/doc.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 40273\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"doc.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"95382a6dab40d5911185a921c53e6f6b\"\r\nlast-modified: Fri, 17 Apr 2026 00:40:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8w57x-1776426704157-283308b007e8\r\ncontent-length: 5723\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5723,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"95382a6dab40d5911185a921c53e6f6b","sha1":"4229cb577571111d747021988aac9dd6cd50634f","sha256":"e341d9055288dfcd7dd5facab6c915f6b7bcffbf80f8b48468c7275b8cada069","sha512":"58dfd1656f931bf14044a8d4d790ccd3369a33d42aea35774bf4b0f2242173795c86fde3280d74849be492bbc50d4515f3f3985f93766559544da37e9988bc03","ssdeep":"96:upH/omZ4SOy3uxD+WxV6jD9/zIvNVCvEknBgSjERtW82iAsuFQAIFbISS2V0wZ:upHRZ3qKvZzMGvBg5RuaAIFc5ohZ","tlshash":"89c1af99f79ec4b282d44b322cab03918b39702160116bed319d9375fe9d74cc9284f1","first_seen":"2023-12-25T05:22:01Z","last_seen":"2026-08-13T14:35:02.660329Z","times_seen":15913,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/bot/calendar.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /bot/calendar.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60185\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"calendar.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"bd1fed76ddbb6b27fba56e99ce33a4d5\"\r\nlast-modified: Thu, 16 Apr 2026 19:08:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sn6sd-1776426704155-43685e55588e\r\ncontent-length: 1023\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"bd1fed76ddbb6b27fba56e99ce33a4d5","sha1":"0b2a1caa10c52e686d15f159a046f06136473cc2","sha256":"70e32bcc659ebc16352b84979f32a510494e5f22d3809882e39f2c349c146816","sha512":"2b6b9670090cad2dfcb6a559255dd6b3ffba3387aa550bd084df3a59539b04399ad1028ae6d5cb1a2512a79b534d488a40ec1aee24ce1f04ef65d81e2ef33521","ssdeep":"","tlshash":"2011c8ebf02a313d905ca7552899c32a69b967710e229adbbc780e17861f350a23d7d0","first_seen":"2025-07-06T09:11:55.630521Z","last_seen":"2026-08-13T07:06:59.379558Z","times_seen":468,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/img/fb_round_logo.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/img/fb_round_logo.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60183\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fb_round_logo.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\netag: \"81bb5cf1e451109cf0b1868b2152914b\"\r\nlast-modified: Thu, 16 Apr 2026 19:08:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vqsl5-1776426704161-4659079ebb10\r\ncontent-length: 42676\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"81bb5cf1e451109cf0b1868b2152914b","sha1":"b70017639afc079394be1ea8625f7c4beb44d617","sha256":"676c83478e410d324fe56aca428d3305505732c648667b22e15c8222117c75e6","sha512":"1782966b78f57cc91392f3ff03f05d37e0a5fd8b04b0997b2ef708d13c162ea4aad607e7705a36e0539d6a6b60337432ef271bff062f7170018b42c9b8b81de6","ssdeep":"768:QJ6R1m5mLWd4WdvyQqjv9YRNt2ZDmzqSqBoruj6f3drrFpY85JW81Cl1xB+aArel:QJ41emLWxdv7C8Nt2UzqSuu46v9rvY8I","tlshash":"b613f1da546bcdfec2f950b418ffe653f43ad07b1a8c446fe644eca2ec518a024e2641","first_seen":"2024-01-09T09:55:04Z","last_seen":"2026-08-13T14:35:02.663929Z","times_seen":15788,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gretaruppousse.vercel.app/hiaioezmwcxabxga.html/img/dir.png","fqdn":"gretaruppousse.vercel.app","domain":"gretaruppousse.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html","date":"2026-04-17T11:51:44.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /hiaioezmwcxabxga.html/img/dir.png HTTP/1.1\r\nHost: gretaruppousse.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gretaruppousse.vercel.app/hiaioezmwcxabxga.html/bwurhuzvzgajtx.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Fri, 17 Apr 2026 11:51:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::vzjbb-1776426704429-83aa8f4e23eb\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e39fc68cc9a39a9f579e10c9921eabab","sha1":"e79fad3cf3eb2b5e7ef58df1c9ec226f82f01fc7","sha256":"bd6409b5549b337ccfc7348f9da8478f2d1be7e7a9a1afabcea7843bc4b5f1f7","sha512":"25f75154a427a2ac52b66f7901f326886eb793e0036e385dce50739ccce969f32b5db4545a5995875b154fd16e1108700bbb67dc9f8be3cd15d070605dfa5ebe","ssdeep":"","tlshash":"fea024df44474ddd33c00c10f5010135103105535df7d10103cc130055041cd7300070","first_seen":"2026-04-17T11:52:09.686169Z","last_seen":"2026-04-17T11:52:09.686169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"gretaruppousse.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"gretaruppousse.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
