{"report_id":"c880ba34-9ec7-4c97-afd0-2e59ccaefcf5","version":0,"status":"done","tags":[],"date":"2026-08-04T02:48:37Z","url":{"schema":"https","addr":"www.visioncrm.co/","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"www.visioncrm.co/login","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"title":"Nexus CRM","dom":{"size":15380,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15376), with no line terminators","md5":"d50515930037e89644425745a2a95a8c","sha1":"e2100b3fac9702e3bf9227bc9d95186ff530a812","sha256":"77bcf21ba7814ebd9d831a1cc5b09da886f03311338d72d608b1e7d5de89277e","sha512":"52806afdd40b76ae78f08bb8a4872d3680c2901e87baa3244814e2c81771e21fb6af2056bc00176d044e6da44da9cdc663582332dec8f6f248e7867d6aaba5ef","ssdeep":"384:UdCcu6B2s2nfD+vg+vZ91sM2K2Bh0hjs811:UdCcuNZnL+vg+vL14rBit","tlshash":"1462441aa805ee579c3bac9c113d9e3a50ccc93bc638d979e29dcf5813929761bd9cc0","dom_hash":"domhashb7004fe7d73e807c6d8d2d4921d0fd5e","first_seen":"2026-08-04T02:27:17.968473Z","last_seen":"2026-08-04T04:29:01.974462Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.visioncrm.co/","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-08T02:48:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":1,"received_data":3965347,"sent_data":593,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.visioncrm.co","ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-04T02:34:44.442626Z","last_seen":"2026-08-04T02:34:44.442626Z","alert_count":30,"request_count":30,"received_data":1249764,"sent_data":15036,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"RxJS","description":"RxJS is a reactive library used to implement reactive programming to deal with async implementation, callbacks, and event-based programs.","website":"https://reactivex.io","common_platform_enumeration":"","icon":"RxJS.png","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":1,"received_data":1333,"sent_data":581,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0hm8_450fjfdj.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9986f6c86ba77c5e7eaab7a9f284e5e4","sha1":"a4cf830c20e64d0b7b7a7d0e54b901b61c71bf6f","sha256":"c8247c97259c844bc8b106731d17636f1e8acfcc58c9542b9f5aa878b57bfa71","sha512":"011ef70958722a44fdf6a62596ac21a551d42972b782794ca843ee74b44bd5f632486b1ef812e909e3bef2b168516c49d0e37ce1577b51073df4e98c860f3e39","ssdeep":"384:H15tO7PmSV65kB+oz22kQjUbUgqsDP3bjMxmDq8311JOBRao:Vy725ksozOQjUwpsjGmv11Yeo","tlshash":"f2b2e9f97251b0905bab4194c02b044af37e2975540e5834b3f56cfa3ab1e6db272f3a","size":24790,"data":"","first_seen":"2026-08-04T02:27:17.989746Z","last_seen":"2026-08-04T04:29:02.004399Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0gogvxblyxa9..js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f20e868125145aeb47b63b498ab8e7ec","sha1":"c65ce2022601ff6d9a76c18ba49dd485b9088da5","sha256":"d2bba61b7b3b7e328216e375f2e41a913ea216e4aa8669d3aba2315590b65907","sha512":"97a74358e7d3f658aca4b429ac5496760e58301e8eee1989bba585084a89813b8028ae4bea9b89b0baff3dd950b227a707379e11a180f9895a17fde84e5efdcd","ssdeep":"384:JZq+MofZ8oRSj6FWwVE1Ff8IiU5KbUSOWkiDitiU//Xdjzy/K9:q68owN5K1OWkiUMK9","tlshash":"10c29426a90705be2aee93d7e05cebd5dd385602e0898b0ce3878f319744bf85587b1d","size":26550,"data":"","first_seen":"2026-03-18T20:00:19.550201Z","last_seen":"2026-10-10T13:06:06.998571Z","times_seen":292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0he_1nmt-v8p6.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"224d42f94faa1b4c303b64ad111c6acd","sha1":"0acb0b92c6c00f81627c584d5d0bf1863dbc8ed5","sha256":"3613f531b8059eda676d2d0243899803b1b45a9987807aa19dda41872e8e06d0","sha512":"8149f3328ba17d4033b35ca8dbf340ca1af521a94a736dcae364350d6f65afee42a168222f14579b4f311e664bcd8d2f50a2d2166d3bbf1a3c3ebce00cd54535","ssdeep":"3072:6UjTjNeo2NZo+vBHnGEO0y1y4YlicLDbEX0iN4qmB:6UjTjNeoQZpvFGEO0+y4Sic/beN4qmB","tlshash":"eee3f7f935d1f482076b50aac03f0006f22c4db7189e6860e3e5ddda756465de2b3faa","size":145953,"data":"","first_seen":"2026-08-04T02:27:17.973568Z","last_seen":"2026-08-04T04:29:01.995463Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/login","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-10-12T04:28:10.55818Z","times_seen":287588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/login","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"a46813b779b37da3bc82a06a33b3f3ee","sha1":"790fd272e205cad0f104aeb6571bc29460436aba","sha256":"ce88c772667c33abbc730c716bf97425e1c900d91929e98334c0cb186359bd45","sha512":"c40a683f91914890419a5daef6d5c09aeb77bc8e9b4342f8383f2c721cc710fd7d5f97743836b7d901c3c6f5beb9d3d4b93809552188be1252d768c7a898c54d","ssdeep":"","tlshash":"be31c01be90efc936932cc5f002e4f2698d4ec3ba17a565db65ccf99436187a038c8c2","size":1749,"data":"","first_seen":"2026-08-04T02:27:18.000819Z","last_seen":"2026-08-04T04:29:02.01563Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/login","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"667f4194e69fd912a461033fa6bce2ac","sha1":"3ebf13e7955f5d18f7e1140b455d032c4d605b65","sha256":"539194c4a978c98c65dddde09ebe03b231a89e354c8c1cd9d37d3b8b2ed0d74f","sha512":"48c59ab890a559459235681bd3fc24ad8159e183c88946245b7eef2d61e7e6735a871578793b577997328673844c886349dbaee3e668c2b9adccd10c935cc20a","ssdeep":"96:LT6pzL2v43vXz5OwrIsPyDoCQ9QvXz5OwrIsPyDl7ZrUgpGVOLx:fC2gShhShfUgsC","tlshash":"17c1892e6806de4bec7e3c68113e9d3a10ccc97b8765deb8c19ece151b464792bd99c0","size":6011,"data":"","first_seen":"2026-08-04T02:27:18.001844Z","last_seen":"2026-08-04T04:29:02.016551Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/login","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a79b86de223687e9a9bf2841a369a76","sha1":"3b044a8271fc8b2c8a96a0df558eb3fc4e7d0511","sha256":"080e655b0a977716ae6f2d6bcf2eb031d888d43cf2c2bd2336d6c6f04623bfc8","sha512":"7478874d174c2f7173128edd877eeb09510621a527b3ee00650504b8d231fb6bc3648aaac7ea497b6cc372ba23c91a64ec24e3b6cd6f8326c5def689be397a83","ssdeep":"","tlshash":"d3c08054f015ffe624693471163df049316f044d554834f0111390e513055082627ac0","size":153,"data":"","first_seen":"2026-03-24T04:27:29.644093Z","last_seen":"2026-09-22T04:45:11.308482Z","times_seen":434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/login","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"145ac6504fe0652f8249d8c4bfc16b77","sha1":"1b55f5fa10864b14ae3a3ae0297675bfd96ae8db","sha256":"e5e4224341e378b5a9955bc5921bbc0cb0a2114f0fc7fb1bbdf1a05391f11e44","sha512":"1fcf605e4466dbb0fa2156a3f26c4340089e19a509a202fe26d3dfeb5ee424ee72fbd0fbf364b5e0624af3e386b6d10c7cc261a06c5b6cb5a2d256412607d15d","ssdeep":"","tlshash":"77c08090cc42cc2dc6664f261c3a1c3621dcc974074555469dd5dd281985b3105b5d8a","size":177,"data":"","first_seen":"2025-05-18T16:00:22.23178Z","last_seen":"2026-10-12T03:22:39.813548Z","times_seen":4029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/login","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"aff7dbfef85a0f5b8c7c7d81b37f75a4","sha1":"9393b9a3e220faf7e4f12af8b3b8c88762b58772","sha256":"464beecc1bc6dbf31c60c8343cf7bb0360e5eef9e69d4fd074a5415bdde3d2a5","sha512":"b99d70bfc61eb174999b51a87c617a108d57598ffe46f0d308c760f98b3a641f2e7537b073875e2d6b9783a69d86c852f1d51614c83371ea7e3a0ca03dcaec47","ssdeep":"","tlshash":"76f0dc12ac0bfc03ef6bce1a143e3c3680c9cb3a44708b58a199cd904172c7a4fe1a46","size":482,"data":"","first_seen":"2026-08-04T02:27:18.003917Z","last_seen":"2026-08-04T04:29:02.019522Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/07uz2g0_38qia.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"39fc88b4c05f288f0ed0c18f8ade0885","sha1":"6ebfa594a38149d178f3d842ae365362b3bc0f62","sha256":"cf66c2368eaf773555b60cda3d490b14c8e8c4b949d16b5062c9d8df41350566","sha512":"2877b9ff2d73e22e4bacfab07aa6f29c06076dc35e4d3fa9ee8a8086fe74c632c784a53f725515bbf5848c50c1ac11ec2dbc002412b15e0220f393bfeac14054","ssdeep":"384:u7/A2dkTd93jBT0diRTRIpowbIBqjac/s+rPYjDExpCkKMny1V0U5+wQhKHAlwe4:aN8pcowkpc/s+zYXExp7ly1V0UVD","tlshash":"e413e7b132d4faa3529341e0e43f2016f2780d7520ad6470b7e89c9b754d88da6befa5","size":43946,"data":"","first_seen":"2026-03-25T09:36:27.556219Z","last_seen":"2026-10-11T22:40:10.323397Z","times_seen":1799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/15aeg-x6spjuo.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"939573a2c6749a0089fdee7a27abd900","sha1":"2fc6c6de44b8f6bb3dfd696bf077b10fe8b7eacc","sha256":"75c63b2c5d7aa1433a8262ac18dac4dbf271ff14067ae8fa6d280720a38cde38","sha512":"63349a3a90fec255fb20a49b5df6f994421627a2f4e1c8678cfe487626a6ca30a83e3a7b7e72a72dd2adafad0f1aa96fe3fae54c086f0ff796bc521a56516c47","ssdeep":"","tlshash":"3b5123042495aeec781a10e8a06ec24c711a7e2cce1fde79f5b47c6a1e664953e13f89","size":3092,"data":"","first_seen":"2026-08-04T02:27:17.978698Z","last_seen":"2026-08-04T04:29:01.979294Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/01xlw8hd842-c.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7ccf6943f2bdccb995fe5bb7d242b8a","sha1":"c9277a94258757e99759c5669e26390a63cc16a9","sha256":"aee2d073d2a1157cfe5c98907f90b3967de4c3625f9ffb154bd1979ae2b917b0","sha512":"376272243a92205856c2ae832c447172b5cefff730f0850cb0b805d286c5f1feb3be07b6817febda67cc2ecb6c38ef6027b0581f86bbe3617f7251ab9051f9f7","ssdeep":"","tlshash":"716161c9b2e2f8bb83675091407f205bf37e4cf1185d9194e7a5a4dbb82061d81f2fa8","size":3377,"data":"","first_seen":"2026-03-19T19:09:12.486153Z","last_seen":"2026-10-11T23:31:22.244262Z","times_seen":10571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0k-zmnqw6vtjx.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"00c173a1576ce395300119f152967030","sha1":"f70c46feae580b590ee7c3785a378b4bc2f9c9c3","sha256":"0b3da6c4d884cb7e9ac2ef033c3a0ce9f49d8b278970884f8cff9859b15a59bb","sha512":"0d69204ccd6bbb4bb96d173108e002bd607af2ebe6eed49d4cefad36feb13cf95bf1510b8c91faeadffa0e8e64fa0689e5e719312a470239babe146ef677ea4d","ssdeep":"384:HtTt8np7nG7dRFYztqIsk0OaHg2BDoql4JkcGCKKkHIVnGNeuvPBzmnIvUqxmuh2:HtTmGdHYBqIsiegGT9CKdHfmIDNh+vz","tlshash":"b5a21af5a14176a58fa741e980a3c01362ef2210180e8c34f6765cfe39f8ed5e677e69","size":21539,"data":"","first_seen":"2026-08-04T02:27:17.991075Z","last_seen":"2026-08-04T04:29:02.006807Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0v8amc.msey9d.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c143880da0fca988a31db34355a0b82","sha1":"9c994ab501c6f83d0a3fec604a17fee81a58a2de","sha256":"bb29f15fa8f02f15c4a70f50bb9572ba37ef3675a62ba1913f57a6cae1a3aed1","sha512":"7e02ed715f00f2319e1f744d7ee9331632ca904f222def52e5fc889f7e54fdecdbc8cd061871bd62afb26d282ff8984417cd9930fe17e38a2866801a533e8818","ssdeep":"6144:RVl+bM8arfp3umioE50CXq35i2JvdeH99LJGJVnW:wACXqM2JvIH9kVW","tlshash":"ba544da5b3ffea260b96109b10da0105e7fe4da45cbd5c91d2ac451eb3d8d94a0b3f2c","size":302326,"data":"","first_seen":"2026-08-04T02:27:17.975072Z","last_seen":"2026-08-04T04:29:01.998265Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0-nd8rx.k24zp.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"630c087559c77ea707a0e26cf221c6d1","sha1":"d31a8391710feb0ec22a56753fe318d031f5c65b","sha256":"0052c4fc795c03ba57f5ece36cefd721a341d0f9926d78c319fd567633536ee4","sha512":"9dbebfefdf7685b5f9349f02def0765c902135bd98f8f6413dd351166cedd5f1ea62d0b13a863a3dbbce93931af4714c988dc096a5e18debba4d5d6fd3ded149","ssdeep":"","tlshash":"6c61758192256fec691a14cc602e800d315b2f1ccb2f5d29b5b47c69257f8ea3e13b9d","size":3319,"data":"","first_seen":"2026-08-04T02:27:17.987006Z","last_seen":"2026-08-04T04:29:01.98963Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0n4z.7yu76je-.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a648f088ad544148210ae070401800cd","sha1":"283e51ae1715ff82a698d38a370dff4af2976884","sha256":"91fec54ca6bfa97c9bc4fefe9576b9a76aac47ed9f0009090ddf6a60030d55d3","sha512":"045b41574a3600911e4d65a734aa6ca8091609f954bfea447bc0a03d9ae0516d56e91c15679393ae4d732a2dbafc403ad56e6ec376c11288be04e198c9b3b653","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGV:vUWstOoS3HSqD95hdFQcCDFZ1dqF6SV","tlshash":"1933da753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","size":54646,"data":"","first_seen":"2026-03-20T07:59:15.953955Z","last_seen":"2026-10-11T02:23:22.069298Z","times_seen":1606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0o2nevg-oub2j.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"789294f29c9602f7446c6ad4914415f5","sha1":"90cb4a41a4e2b9ccb1d5733de490f92205b0b343","sha256":"5d7e553ff9c9eec8d0411aa65bdf838d5ef4db61f800f0aa5afd6a24f0836763","sha512":"437b1cde28b17883f6adacd4b7086a58d9fecc054f87c2790735dcfa0548edac7ef6f72bc7d7bb1d030d3639082702a29c1cd3f550f3e580fadce6fd3f1578b4","ssdeep":"3072:UFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwdH++D:UFLtKOfGWYpyI9vGzD58nwdH++D","tlshash":"9524fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","size":227538,"data":"","first_seen":"2026-08-04T02:27:17.971148Z","last_seen":"2026-08-04T04:29:01.984201Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0klk81zjllqkn.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ef790f16f871cbf12bc654f931bc9d2","sha1":"d242bf58dd85889a0654ce94c09279fb680377fb","sha256":"510c3491fcf1a8ca47c26bfaf1aeeec0679f4b91790cd53760c341889509af71","sha512":"11282ca536e09a5066d0b648367faa9cc1f45c30ef8f45ce61c0a04652af48258edacd598d2bf67913d5b62396dded1ae60252f313abc492baf7b11168265b9c","ssdeep":"384:uzqA0Cn7vBmY9ekpzHCFnjlLsG2QCk15WwE6PEQ0IcT7N:uzqA0Cn7QYoSziFBLsw1LPIN","tlshash":"d9c2d5aa7195f4911ba354a9803f500bf2391d36286ce0b0a3e2ccf579e049de537fd9","size":27819,"data":"","first_seen":"2026-05-01T10:57:39.895207Z","last_seen":"2026-08-04T04:29:02.009015Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/turbopack-0smb_avlon03x.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5572388200d7768db008be4a6d2ac8a8","sha1":"62d60d98873917634e89cba0027255b221cad6d7","sha256":"968ead062807fa05979658e88cb4cc9a5a6f9762958cf234a3ae67c5cb3d5b9f","sha512":"c652e787a8f2e46e2c11dbce3dd56303ba5d6af6ca58916d966b4676f3dc9d0857c0ad13e05bbf8c09e4f68b62c63876741044b73b30c9091f34ceebcb3ba390","ssdeep":"192:ks1QME9A68kEsgfo2YEM+TEb4lgB59QnZr8BT4FIhcXXqGHov2:ks1QME9Y9xA4lmCZgSIWKK","tlshash":"f522c8da33a6f073436fa1ebd06f4044f17984a9145d141cd39ca8eb28394ae85e7f76","size":10508,"data":"","first_seen":"2026-08-04T02:27:17.983802Z","last_seen":"2026-08-04T04:29:01.988499Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0zlolnt2uydtn.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"44e4b4056b63b1ed84058026cd5851bb","sha1":"4646271f7c9f43818a410804ab8f035f026bbbfc","sha256":"c7c11c509cdd75d75c4f41e4bced701243fcaa6275ab5b5b010429af59d70a58","sha512":"32d2917bab76e89a3117314ebefc9fb5fe0ef292781d3b1d88683181f876b24593332b08137b37451995a6f871488c8b111b9b548f2514f774488f9a3f1215d3","ssdeep":"192:zlUGjlHl4OCQSeCFeUJfHXfn7i/78HH99Fkl+Dsf:zzthbiXfG8HH/2leY","tlshash":"60f1c7a130a0f9d5929b0195803f440cf13e2e3d946fa8f4b7f99cf556a085db1a3f96","size":7591,"data":"","first_seen":"2026-08-04T02:27:17.972279Z","last_seen":"2026-08-04T04:29:01.978007Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialsymbolsoutlined/v364/kJEhBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oFsI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.729Z","timestamp":1785811690729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/materialsymbolsoutlined/v364/kJEhBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oFsI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.visioncrm.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3964532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 18:31:37 GMT\r\nexpires: Fri, 30 Jul 2027 18:31:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 29 Jul 2026 22:14:27 GMT\r\ncontent-type: font/woff2\r\nage: 375393\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3964532,"size_decoded":3965347,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 3964532, version 1.0","md5":"b8e69929345621062fedf6ba66608712","sha1":"d408249bd6c0f502186f1a22364261a52c81d962","sha256":"db8aab2e789995a025efe34a3ebbc0c00371c1d80c582f2a5d9460e88c4ca2eb","sha512":"b827c2b911a88b2841b540873725e4478865e36cbc2c962134fa0e616721a4f09bcafc51ded1b916d2ae8593f2bfcd49395714989477b1e553b0ca5a256e1cf1","ssdeep":"24576:4osCRDbxi5RIo8Qo7LB3saPm3pfnGEna0MOMGl28wD:DRniRI3QqdJWoZ0MOMb","tlshash":"7b2533eeed3f5d9095c018a0eef8cd2641afe3a2d997d1c0109b77d264970d34b216ea","first_seen":"2026-07-30T19:48:05.279736Z","last_seen":"2026-08-27T12:27:17.282048Z","times_seen":191,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":2,"connect":29,"send":0,"wait":17,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/favicon.ico?favicon.0x3dzn~oxb6tn.ico","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.942Z","timestamp":1785811690942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /favicon.ico?favicon.0x3dzn~oxb6tn.ico HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: zstd\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: image/x-icon\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:11 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25931,"size_decoded":10579,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-10-12T04:28:13.060355Z","times_seen":48371,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/login","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T02:48:09.866Z","timestamp":1785811689866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:09 GMT\r\netag: \"17360cw7lgybsq\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"RxJS","description":"RxJS is a reactive library used to implement reactive programming to deal with async implementation, callbacks, and event-based programs.","website":"https://reactivex.io","common_platform_enumeration":"","icon":"RxJS.png","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15294,"size_decoded":4523,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15290), with no line terminators","md5":"b0763fb2f5989b06727199a20c7a9e40","sha1":"b0b933997fc4369db60aafc09ba324314ff058cb","sha256":"116a8b981bbb3b66cec1d69a608c6dcbcaf2a7a12b85a9088b6939e04b6f7f9d","sha512":"6478055a5dba6225f479a3549adf0af4a0f31a64e9980ada428cc2ec70b4e798426f10030d03103fb6c6ba7dbc05efb6968b2f701688d6d3d45a70a4a0eef8ba","ssdeep":"384:GezHOFB2cT2MvcW+vr+vK91+M2K2Bh0hjs813:GezHOCcaM/+vr+v41arBiP","tlshash":"2662531aa801ee579c3bacac113d9e3a50ccc93bc638d97de19dce5817929761bd9cc0","first_seen":"2026-08-04T02:27:17.997692Z","last_seen":"2026-08-04T04:29:01.983148Z","times_seen":4,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/media/caa3a2e1cccd8315-s.p.09~u27dqhyhd6.woff2","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.223Z","timestamp":1785811690223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/media/caa3a2e1cccd8315-s.p.09~u27dqhyhd6.woff2 HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: font/woff2\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"7268-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\ncontent-length: 29288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29288,"size_decoded":30332,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29288, version 1.0","md5":"f4634c3bc1fa7cb53247e1f2872adb5a","sha1":"9d846db84c501327431670fe23b1a8ea1d2a5349","sha256":"9b6f5ff45b278c744b5f379a2c4ecbaf858a842b8eaf82ac8d21b699ca16c608","sha512":"e480a1ca3a52fdfd2f59daf185b56c9f203c4b0daa7a36537410ccefee9bfab229308145026aeea53a49d02cd7f0e89de8d4c05ec15fe80a2b09e754197afa49","ssdeep":"768:ePXLNqwQ5RnlpBAyv/2+NR6C36OojNMUp06QIhgXZY2Ko1K:e/LNHQtpBAQO+NR6k/eFp06zE0","tlshash":"27d2f155036f442269023b6a0619a9a0c172469fa9bd73c2407a6a931f67fd7d37dc8c","first_seen":"2026-05-13T23:24:18.838523Z","last_seen":"2026-10-12T04:28:10.448318Z","times_seen":20129,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0o2nevg-oub2j.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.234Z","timestamp":1785811690234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/0o2nevg-oub2j.js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"378d2-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":227538,"size_decoded":72109,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"789294f29c9602f7446c6ad4914415f5","sha1":"90cb4a41a4e2b9ccb1d5733de490f92205b0b343","sha256":"5d7e553ff9c9eec8d0411aa65bdf838d5ef4db61f800f0aa5afd6a24f0836763","sha512":"437b1cde28b17883f6adacd4b7086a58d9fecc054f87c2790735dcfa0548edac7ef6f72bc7d7bb1d030d3639082702a29c1cd3f550f3e580fadce6fd3f1578b4","ssdeep":"3072:UFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwdH++D:UFLtKOfGWYpyI9vGzD58nwdH++D","tlshash":"9524fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","first_seen":"2026-08-04T02:27:17.971148Z","last_seen":"2026-08-04T04:29:01.984201Z","times_seen":4,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0v8amc.msey9d.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.248Z","timestamp":1785811690248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/0v8amc.msey9d.js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"49cf6-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302326,"size_decoded":75638,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"4c143880da0fca988a31db34355a0b82","sha1":"9c994ab501c6f83d0a3fec604a17fee81a58a2de","sha256":"bb29f15fa8f02f15c4a70f50bb9572ba37ef3675a62ba1913f57a6cae1a3aed1","sha512":"7e02ed715f00f2319e1f744d7ee9331632ca904f222def52e5fc889f7e54fdecdbc8cd061871bd62afb26d282ff8984417cd9930fe17e38a2866801a533e8818","ssdeep":"6144:RVl+bM8arfp3umioE50CXq35i2JvdeH99LJGJVnW:wACXqM2JvIH9kVW","tlshash":"ba544da5b3ffea260b96109b10da0105e7fe4da45cbd5c91d2ac451eb3d8d94a0b3f2c","first_seen":"2026-08-04T02:27:17.975072Z","last_seen":"2026-08-04T04:29:01.998265Z","times_seen":4,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/forgot-password?_rsc=jpp6l","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:11.329Z","timestamp":1785811691329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /forgot-password?_rsc=jpp6l HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KGF1dGgp/forgot-password/__PAGE__\r\nnext-url: /login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:11 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1411,"size_decoded":1642,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (772)","md5":"3030f962423e7fdc15f5341e4f688d4c","sha1":"ac9ca836890945c1eef64597cea3412cbdf0226d","sha256":"1d3ee8aec5bb8f89b096c352f76a887d2c56c4d8c246bef86415ebe83b6730e1","sha512":"4114039784be4a22d470c0697eef344c5f203f511217da74b64b63dfb8446466f8457e74ba76d1343b2aeb0f54988159fb35acf5644caab0b73c89831e374ad9","ssdeep":"","tlshash":"aa21282bce19feaa4862cc5c281f9f2750985837ea31cd5dd68edcb803958761b881c1","first_seen":"2026-08-04T02:27:17.996757Z","last_seen":"2026-08-04T04:29:01.981781Z","times_seen":4,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0r3vj_0.mr1nr.css","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.227Z","timestamp":1785811690227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/0r3vj_0.mr1nr.css HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/css; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"6a9-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1705,"size_decoded":1768,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1704)","md5":"6b4dd1728a188bcee3b92fd82651de8a","sha1":"3f153d98684f1c5539ecc883891eb338ff3e12f7","sha256":"c05d71a9e1827bab29233c2b1ecf3b23ee23c798bada2887c9a0b7edfe05f105","sha512":"f18640dcb750882199a36e8278e5a296b5241553fd653dd6a2d401201763723904b6110b8041f766ffbc5353536ea3599ab328aa892fb534cf08c7124850052e","ssdeep":"","tlshash":"5831c334401ba40ad6e78c7330ce6da3781a54214ba95663993d1eb84eef97f17e1b28","first_seen":"2026-06-30T01:35:06.41951Z","last_seen":"2026-08-04T04:29:02.003103Z","times_seen":5,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/forgot-password?_rsc=m8m8p","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:11.165Z","timestamp":1785811691165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /forgot-password?_rsc=m8m8p HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:11 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1119,"size_decoded":1657,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (746)","md5":"57defae3a408d9cd53858da3357b0e1e","sha1":"8609c5df6133cdb5146e2f1f3bf6ba61a30fc127","sha256":"5c3734d4415f91a9777887f324c32b4c1067405d7723e7cb8437874742f5649f","sha512":"93757ad8358b5c8d5c5b4cf58af21cc5152eac158b004394ec4925ae77f37e0c3684d7e030e76b347766d0f72c5a010bb6a1801c87f0771759789672ec33f651","ssdeep":"","tlshash":"b921203b8608ec5f2fbbc988005fd30b626d16379a750eb9914dce28079843b1b912e1","first_seen":"2026-08-04T02:27:17.995512Z","last_seen":"2026-08-04T04:29:01.992902Z","times_seen":4,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0zlolnt2uydtn.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.241Z","timestamp":1785811690241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/0zlolnt2uydtn.js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"1da7-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7591,"size_decoded":4395,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7591), with no line terminators","md5":"44e4b4056b63b1ed84058026cd5851bb","sha1":"4646271f7c9f43818a410804ab8f035f026bbbfc","sha256":"c7c11c509cdd75d75c4f41e4bced701243fcaa6275ab5b5b010429af59d70a58","sha512":"32d2917bab76e89a3117314ebefc9fb5fe0ef292781d3b1d88683181f876b24593332b08137b37451995a6f871488c8b111b9b548f2514f774488f9a3f1215d3","ssdeep":"192:zlUGjlHl4OCQSeCFeUJfHXfn7i/78HH99Fkl+Dsf:zzthbiXfG8HH/2leY","tlshash":"60f1c7a130a0f9d5929b0195803f440cf13e2e3d946fa8f4b7f99cf556a085db1a3f96","first_seen":"2026-08-04T02:27:17.972279Z","last_seen":"2026-08-04T04:29:01.978007Z","times_seen":4,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0klk81zjllqkn.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.229Z","timestamp":1785811690229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/0klk81zjllqkn.js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"6cab-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27819,"size_decoded":9675,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24385)","md5":"6ef790f16f871cbf12bc654f931bc9d2","sha1":"d242bf58dd85889a0654ce94c09279fb680377fb","sha256":"510c3491fcf1a8ca47c26bfaf1aeeec0679f4b91790cd53760c341889509af71","sha512":"11282ca536e09a5066d0b648367faa9cc1f45c30ef8f45ce61c0a04652af48258edacd598d2bf67913d5b62396dded1ae60252f313abc492baf7b11168265b9c","ssdeep":"384:uzqA0Cn7vBmY9ekpzHCFnjlLsG2QCk15WwE6PEQ0IcT7N:uzqA0Cn7QYoSziFBLsw1LPIN","tlshash":"d9c2d5aa7195f4911ba354a9803f500bf2391d36286ce0b0a3e2ccf579e049de537fd9","first_seen":"2026-05-01T10:57:39.895207Z","last_seen":"2026-08-04T04:29:02.009015Z","times_seen":6,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0he_1nmt-v8p6.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.232Z","timestamp":1785811690232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/0he_1nmt-v8p6.js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"23a21-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145953,"size_decoded":40268,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"224d42f94faa1b4c303b64ad111c6acd","sha1":"0acb0b92c6c00f81627c584d5d0bf1863dbc8ed5","sha256":"3613f531b8059eda676d2d0243899803b1b45a9987807aa19dda41872e8e06d0","sha512":"8149f3328ba17d4033b35ca8dbf340ca1af521a94a736dcae364350d6f65afee42a168222f14579b4f311e664bcd8d2f50a2d2166d3bbf1a3c3ebce00cd54535","ssdeep":"3072:6UjTjNeo2NZo+vBHnGEO0y1y4YlicLDbEX0iN4qmB:6UjTjNeoQZpvFGEO0+y4Sic/beN4qmB","tlshash":"eee3f7f935d1f482076b50aac03f0006f22c4db7189e6860e3e5ddda756465de2b3faa","first_seen":"2026-08-04T02:27:17.973568Z","last_seen":"2026-08-04T04:29:01.995463Z","times_seen":4,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0-nd8rx.k24zp.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.243Z","timestamp":1785811690243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/0-nd8rx.k24zp.js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"cf7-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3319,"size_decoded":2620,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3319), with no line terminators","md5":"630c087559c77ea707a0e26cf221c6d1","sha1":"d31a8391710feb0ec22a56753fe318d031f5c65b","sha256":"0052c4fc795c03ba57f5ece36cefd721a341d0f9926d78c319fd567633536ee4","sha512":"9dbebfefdf7685b5f9349f02def0765c902135bd98f8f6413dd351166cedd5f1ea62d0b13a863a3dbbce93931af4714c988dc096a5e18debba4d5d6fd3ded149","ssdeep":"","tlshash":"6c61758192256fec691a14cc602e800d315b2f1ccb2f5d29b5b47c69257f8ea3e13b9d","first_seen":"2026-08-04T02:27:17.987006Z","last_seen":"2026-08-04T04:29:01.98963Z","times_seen":4,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0hm8_450fjfdj.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.245Z","timestamp":1785811690245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/0hm8_450fjfdj.js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"60d6-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24790,"size_decoded":10483,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24790), with no line terminators","md5":"9986f6c86ba77c5e7eaab7a9f284e5e4","sha1":"a4cf830c20e64d0b7b7a7d0e54b901b61c71bf6f","sha256":"c8247c97259c844bc8b106731d17636f1e8acfcc58c9542b9f5aa878b57bfa71","sha512":"011ef70958722a44fdf6a62596ac21a551d42972b782794ca843ee74b44bd5f632486b1ef812e909e3bef2b168516c49d0e37ce1577b51073df4e98c860f3e39","ssdeep":"384:H15tO7PmSV65kB+oz22kQjUbUgqsDP3bjMxmDq8311JOBRao:Vy725ksozOQjUwpsjGmv11Yeo","tlshash":"f2b2e9f97251b0905bab4194c02b044af37e2975540e5834b3f56cfa3ab1e6db272f3a","first_seen":"2026-08-04T02:27:17.989746Z","last_seen":"2026-08-04T04:29:02.004399Z","times_seen":4,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/media/inter-latin-500-normal.0frew35n-hgkk.woff2","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.733Z","timestamp":1785811690733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/media/inter-latin-500-normal.0frew35n-hgkk.woff2 HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://www.visioncrm.co/_next/static/chunks/0sq12x3sh7dnw.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: font/woff2\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"5ed0-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\ncontent-length: 24272\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24272,"size_decoded":25316,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24272, version 1.0","md5":"51205681a1ba304816fc629e8989256b","sha1":"6b66c741bf8bc3ce248af04b2051a648a38391d6","sha256":"f3779f1efccc4bdcdf9c0a02ab95bf6bd092ed09c48c08cedc725889edd1d19f","sha512":"06a0f1bb5df53f0f01a69fcde97dac63e6cf382bdc38ac84cde4021c8f38f8998c525b564c24fc9caa47fa7253a1b8eb1f50093b9d6b858ac59f358d08285ac8","ssdeep":"384:G+N/IC1hZek0x7rvoWFOdMoldqrE4Fc8BGW8CqKiLIPGFpLDK12JBoB/cYGnIYz+:GpAhodx7DXOdMcsZF38M58p212JBoiYp","tlshash":"f3b2e02211fa659d906a131e29fd782b77bb373d3940cc8aa86f49cd9dc675308c5cd8","first_seen":"2025-06-02T05:01:52.622319Z","last_seen":"2026-10-12T03:41:59.363913Z","times_seen":7834,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/forgot-password?_rsc=17yrj","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.998Z","timestamp":1785811690998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /forgot-password?_rsc=17yrj HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:11 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":706,"size_decoded":1512,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (338)","md5":"38577e3b450abb1d6d13d8bbac6fc5cf","sha1":"e9e632fa72bdfed93ce75d79f9af684402b783a0","sha256":"195203f077e86be1ace0be85b3cf3469292b8ae4ae81d00b02301e55db11342d","sha512":"689763233acf731a083afed78da8367bc6050c837262b6adeae118be67d44affc53d120a0a1838a6225233f4dc737f30e51b3493e44c4e1f5a887086f4e4c517","ssdeep":"","tlshash":"6d017b72850d2cc9add0d494125aeb0b146d102771fd4da9c8ddce6403b64790b8ab87","first_seen":"2026-08-04T02:27:17.992106Z","last_seen":"2026-08-04T04:29:02.000462Z","times_seen":4,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/forgot-password?_rsc=4c4j4","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:11.175Z","timestamp":1785811691175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /forgot-password?_rsc=4c4j4 HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:11 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2187,"size_decoded":2003,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1706)","md5":"383e4f063b4fa9e616caf9ecd1bbe9fc","sha1":"d5e42089888dab307694f3523f9c0fec9e96046d","sha256":"01e41e1db272202c5058eb1c0cbaee728404d52cfaaaae0f4e5f28e106c40f93","sha512":"f285576b929278cd0738c0ac8f99149f2040943a4e53d5ce33bb7d9d2fbe9c34e2e0e91811576ab5e80705fbee193402cbc40962642a509d06e17362d413827d","ssdeep":"","tlshash":"ba41eb3f864abeaf392b5898501fd31ba05c453b9769dd7ed2ad9e2803910711f8a7c0","first_seen":"2026-08-04T02:27:17.981781Z","last_seen":"2026-08-04T04:29:02.010069Z","times_seen":4,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/forgot-password?_rsc=12sxf","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:11.177Z","timestamp":1785811691177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /forgot-password?_rsc=12sxf HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KGF1dGgp\r\nnext-url: /login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:11 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1524,"size_decoded":1764,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1153)","md5":"dbe6e57377f10e6089c087fae916a2e8","sha1":"a831c608308e6318ee46b80bc480f5bcc71d28a1","sha256":"1ff9e3fab2448edb1f3c018d60e4b795a0cf2d549ea047a260eace74f5889290","sha512":"16b024d89fbaec6812370880c105d88a9faee76f4cb41b0bc579bce92154e2c00ddab4755abcd9cb4b8e9c34efb39ab2b6a3e04766dfafe69ffe6994bfb5ba3d","ssdeep":"","tlshash":"3c319e2e460beeaf5d374848581ed32a515c897bea36cdbed2ed9d6403814311f8a3c4","first_seen":"2026-08-04T02:27:17.986043Z","last_seen":"2026-08-04T04:29:02.007894Z","times_seen":4,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/15aeg-x6spjuo.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:11.465Z","timestamp":1785811691465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/15aeg-x6spjuo.js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:11 GMT\r\netag: W/\"c14-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3092,"size_decoded":2572,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3092), with no line terminators","md5":"939573a2c6749a0089fdee7a27abd900","sha1":"2fc6c6de44b8f6bb3dfd696bf077b10fe8b7eacc","sha256":"75c63b2c5d7aa1433a8262ac18dac4dbf271ff14067ae8fa6d280720a38cde38","sha512":"63349a3a90fec255fb20a49b5df6f994421627a2f4e1c8678cfe487626a6ca30a83e3a7b7e72a72dd2adafad0f1aa96fe3fae54c086f0ff796bc521a56516c47","ssdeep":"","tlshash":"3b5123042495aeec781a10e8a06ec24c711a7e2cce1fde79f5b47c6a1e664953e13f89","first_seen":"2026-08-04T02:27:17.978698Z","last_seen":"2026-08-04T04:29:01.979294Z","times_seen":4,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/media/inter-latin-700-normal.17~mssnzv.d-8.woff2","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.731Z","timestamp":1785811690731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/media/inter-latin-700-normal.17~mssnzv.d-8.woff2 HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://www.visioncrm.co/_next/static/chunks/0sq12x3sh7dnw.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: font/woff2\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"5f24-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\ncontent-length: 24356\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24356,"size_decoded":25400,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24356, version 1.0","md5":"8ca0a51552960933d0fd52c19175cbe9","sha1":"5197a7aeb22454110aa1f3ef3ed4c98ca7ef1ba1","sha256":"6f56409fd3d64bb85f7d070bce20749db2d66b6d63cec586cc22d1c761be2491","sha512":"90ab60c6717c27109e8b818e17a696f8665b2fa6247dfcd13a8eb22027aad26ab7becf08e3260bffa8ab3e97d7b1e09830f7d59652c28ec6af13cf925a176393","ssdeep":"384:18j7oxsH+H811z2d2GksjGcVQbNTw4W0LclnfWf7xN5mmOFbxOBAeVLLRIDqGrdt:Y7B1h20GkXRTw70L/pmmybCAaBZGBprf","tlshash":"d9b2e07b99dfeba1dde7def5252e0480ca6c80d06380a6fa135c51b7f50b80710af989","first_seen":"2025-09-20T14:27:23.117722Z","last_seen":"2026-10-12T02:50:27.308816Z","times_seen":6307,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/favicon.ico?favicon.0x3dzn~oxb6tn.ico","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.941Z","timestamp":1785811690941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /favicon.ico?favicon.0x3dzn~oxb6tn.ico HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: zstd\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: image/x-icon\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:11 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25931,"size_decoded":10579,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-10-12T04:28:13.060355Z","times_seen":48371,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/07uz2g0_38qia.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.231Z","timestamp":1785811690231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/07uz2g0_38qia.js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"abaa-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43946,"size_decoded":10264,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23937)","md5":"39fc88b4c05f288f0ed0c18f8ade0885","sha1":"6ebfa594a38149d178f3d842ae365362b3bc0f62","sha256":"cf66c2368eaf773555b60cda3d490b14c8e8c4b949d16b5062c9d8df41350566","sha512":"2877b9ff2d73e22e4bacfab07aa6f29c06076dc35e4d3fa9ee8a8086fe74c632c784a53f725515bbf5848c50c1ac11ec2dbc002412b15e0220f393bfeac14054","ssdeep":"384:u7/A2dkTd93jBT0diRTRIpowbIBqjac/s+rPYjDExpCkKMny1V0U5+wQhKHAlwe4:aN8pcowkpc/s+zYXExp7ly1V0UVD","tlshash":"e413e7b132d4faa3529341e0e43f2016f2780d7520ad6470b7e89c9b754d88da6befa5","first_seen":"2026-03-25T09:36:27.556219Z","last_seen":"2026-10-11T22:40:10.323397Z","times_seen":1799,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/turbopack-0smb_avlon03x.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.236Z","timestamp":1785811690236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-0smb_avlon03x.js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"290c-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10508,"size_decoded":5238,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10508), with no line terminators","md5":"5572388200d7768db008be4a6d2ac8a8","sha1":"62d60d98873917634e89cba0027255b221cad6d7","sha256":"968ead062807fa05979658e88cb4cc9a5a6f9762958cf234a3ae67c5cb3d5b9f","sha512":"c652e787a8f2e46e2c11dbce3dd56303ba5d6af6ca58916d966b4676f3dc9d0857c0ad13e05bbf8c09e4f68b62c63876741044b73b30c9091f34ceebcb3ba390","ssdeep":"192:ks1QME9A68kEsgfo2YEM+TEb4lgB59QnZr8BT4FIhcXXqGHov2:ks1QME9Y9xA4lmCZgSIWKK","tlshash":"f522c8da33a6f073436fa1ebd06f4044f17984a9145d141cd39ca8eb28394ae85e7f76","first_seen":"2026-08-04T02:27:17.983802Z","last_seen":"2026-08-04T04:29:01.988499Z","times_seen":4,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/01xlw8hd842-c.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.238Z","timestamp":1785811690238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/01xlw8hd842-c.js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"d31-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3377,"size_decoded":2546,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3377), with no line terminators","md5":"c7ccf6943f2bdccb995fe5bb7d242b8a","sha1":"c9277a94258757e99759c5669e26390a63cc16a9","sha256":"aee2d073d2a1157cfe5c98907f90b3967de4c3625f9ffb154bd1979ae2b917b0","sha512":"376272243a92205856c2ae832c447172b5cefff730f0850cb0b805d286c5f1feb3be07b6817febda67cc2ecb6c38ef6027b0581f86bbe3617f7251ab9051f9f7","ssdeep":"","tlshash":"716161c9b2e2f8bb83675091407f205bf37e4cf1185d9194e7a5a4dbb82061d81f2fa8","first_seen":"2026-03-19T19:09:12.486153Z","last_seen":"2026-10-11T23:31:22.244262Z","times_seen":10571,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.541Z","timestamp":1785811690541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 04 Aug 2026 02:48:10 GMT\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":649,"size_decoded":1063,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e42161b6849d2371de72b04aaf50f1fd","sha1":"7128c74b2f8ba103a44899b7d019333df15740ac","sha256":"92e3dfcabd09a97febce81797971018b121f38f4c1c9025dda69849cadd81bd9","sha512":"aa0a38c178c38f75329af79a0706a998e31bd4ad83725dc75ddd552cec08af7687d71f236abf4beffd354275f2fe537b1a6405c338b48c58bd9429bf2f2517ef","ssdeep":"","tlshash":"3ff078986a5a5805a5150c87330f3f221e1d492f294ad8feaf410d0c9efe9774349b0f","first_seen":"2026-07-31T06:24:16.817141Z","last_seen":"2026-08-13T17:05:47.152269Z","times_seen":28,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T02:48:09.502Z","timestamp":1785811689502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:09 GMT\r\netag: \"5yvzq0jlj456n\"\r\nlocation: /login\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T04:30:52.508551Z","times_seen":19046091,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":76,"connect":69,"send":0,"wait":129,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0n4z.7yu76je-.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.240Z","timestamp":1785811690240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/0n4z.7yu76je-.js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"d576-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54646,"size_decoded":13967,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54644), with no line terminators","md5":"a648f088ad544148210ae070401800cd","sha1":"283e51ae1715ff82a698d38a370dff4af2976884","sha256":"91fec54ca6bfa97c9bc4fefe9576b9a76aac47ed9f0009090ddf6a60030d55d3","sha512":"045b41574a3600911e4d65a734aa6ca8091609f954bfea447bc0a03d9ae0516d56e91c15679393ae4d732a2dbafc403ad56e6ec376c11288be04e198c9b3b653","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGV:vUWstOoS3HSqD95hdFQcCDFZ1dqF6SV","tlshash":"1933da753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","first_seen":"2026-03-20T07:59:15.953955Z","last_seen":"2026-10-11T02:23:22.069298Z","times_seen":1606,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0gogvxblyxa9..js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.246Z","timestamp":1785811690246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/0gogvxblyxa9..js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"67b6-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26550,"size_decoded":9395,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26550), with no line terminators","md5":"f20e868125145aeb47b63b498ab8e7ec","sha1":"c65ce2022601ff6d9a76c18ba49dd485b9088da5","sha256":"d2bba61b7b3b7e328216e375f2e41a913ea216e4aa8669d3aba2315590b65907","sha512":"97a74358e7d3f658aca4b429ac5496760e58301e8eee1989bba585084a89813b8028ae4bea9b89b0baff3dd950b227a707379e11a180f9895a17fde84e5efdcd","ssdeep":"384:JZq+MofZ8oRSj6FWwVE1Ff8IiU5KbUSOWkiDitiU//Xdjzy/K9:q68owN5K1OWkiUMK9","tlshash":"10c29426a90705be2aee93d7e05cebd5dd385602e0898b0ce3878f319744bf85587b1d","first_seen":"2026-03-18T20:00:19.550201Z","last_seen":"2026-10-10T13:06:06.998571Z","times_seen":292,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/media/inter-latin-400-normal.0vig85~_2mxl3.woff2","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.735Z","timestamp":1785811690735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/media/inter-latin-400-normal.0vig85~_2mxl3.woff2 HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://www.visioncrm.co/_next/static/chunks/0sq12x3sh7dnw.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: font/woff2\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"5c70-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\ncontent-length: 23664\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23664,"size_decoded":24708,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"da03732a27e16543f09d6a6a62b0cdd4","sha1":"68f645c6b6ff12e25c54b13d4ed119e631dcbb26","sha256":"8909904ab6c872eb994093482a88a28eca2cd95912d7b6fecd72103b0dc07edc","sha512":"8f8a1b22d7fedc8a5c0b75a237932fa00b71d25b1c13d1ec6f9c31fbeceba5d7e1a728a06fc3c2abd803337617394f91d2cc08e9798417b73e3587da3b9d882e","ssdeep":"384:LDIByvvcpxzNfjZ7amidC7gcUH6rpfmzO59sT+m+WFg5ivhjpaBNSS6X:LMBYabZ7aXvaVfSCWSogoSSSi","tlshash":"fdb2e0e97b5be3e2e077c67d41bbdf94e64c2860435e4b830e24be14e2d24fe6484416","first_seen":"2025-05-30T09:01:41.826892Z","last_seen":"2026-10-12T04:11:21.766268Z","times_seen":20789,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/forgot-password?_rsc=1iaoq","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:11.179Z","timestamp":1785811691179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /forgot-password?_rsc=1iaoq HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KGF1dGgp/forgot-password\r\nnext-url: /login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:11 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":445,"size_decoded":1386,"mime_type":"text/x-component","magic":"ASCII text","md5":"e03614c89bb36e746fc9a2b81f7d6a33","sha1":"d3532e97ea2b819ecffadf7c57e7a64ce32d6c96","sha256":"8160610922f07d025f69b3a23e225065a4b49548a1a338b017756b45f05be735","sha512":"c7c88d401a8f7fee75270f65e6f95f5070d72f057e99eb1f72ea834a344fdf85290e581e667da5b9790c74b81ac7c3d67dd75893a5e3f97459d949d8818e2623","ssdeep":"","tlshash":"6ef02b27825cfdab1d77c84c041d831f116d5c3bb63659a9a28c8d2c139187747da6c1","first_seen":"2026-08-04T02:27:17.982822Z","last_seen":"2026-08-04T04:29:02.001751Z","times_seen":4,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0sq12x3sh7dnw.css","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.225Z","timestamp":1785811690225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/0sq12x3sh7dnw.css HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/css; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"213e2-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":136162,"size_decoded":24795,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b285277b53925473527afd90412906d6","sha1":"15dc7a6e294da36c1765fce74127162f61199f31","sha256":"47aa63168d268268b8793d0da88700a84b0d355d706307904b3946c45a8b6d44","sha512":"f3989c337920655d228ccf21e5f7edc36af3da2af48c2ebf62ed35a95a1da8a4065fe4b513564e843cd2fa36b31f08601b06161a21e4913bf799d7138246c516","ssdeep":"3072:TJJhcgsUaxjLMRZcDjnygYdr8UG36UjyvEl18eDz3KkJcOna1p7XpMgi2Oa6+smr:9JhcgsUaxjLMRZcDjnygt18eA1ZXpMgp","tlshash":"44d3d860b13dd93fbd3354b993dce88c65087080dd651beafe1561222acbbf3ad9a114","first_seen":"2026-08-04T02:27:17.998653Z","last_seen":"2026-08-04T04:29:02.011163Z","times_seen":4,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.visioncrm.co/_next/static/chunks/0k-zmnqw6vtjx.js","fqdn":"www.visioncrm.co","domain":"visioncrm.co","tld":"co"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.visioncrm.co/login","date":"2026-08-04T02:48:10.249Z","timestamp":1785811690249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.visioncrm.co","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:FC:C7:C1:C3:EA:92:CF:79:EB:3E:E5:5A:74:14:73:8B:DD:5B:57","sha256":"2A:AD:D5:06:5F:49:97:B4:B5:DE:7F:32:D3:66:F1:02:71:A0:D0:E5:9C:89:55:24:62:63:44:8E:0C:F6:10:8C"}}},"request":{"raw":"GET /_next/static/chunks/0k-zmnqw6vtjx.js HTTP/1.1\r\nHost: www.visioncrm.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.visioncrm.co/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://flagcdn.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ws: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Tue, 04 Aug 2026 02:48:10 GMT\r\netag: W/\"5423-19fa81f4368\"\r\nlast-modified: Tue, 28 Jul 2026 09:47:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21539,"size_decoded":8799,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21539), with no line terminators","md5":"00c173a1576ce395300119f152967030","sha1":"f70c46feae580b590ee7c3785a378b4bc2f9c9c3","sha256":"0b3da6c4d884cb7e9ac2ef033c3a0ce9f49d8b278970884f8cff9859b15a59bb","sha512":"0d69204ccd6bbb4bb96d173108e002bd607af2ebe6eed49d4cefad36feb13cf95bf1510b8c91faeadffa0e8e64fa0689e5e719312a470239babe146ef677ea4d","ssdeep":"384:HtTt8np7nG7dRFYztqIsk0OaHg2BDoql4JkcGCKKkHIVnGNeuvPBzmnIvUqxmuh2:HtTmGdHYBqIsiegGT9CKdHfmIDNh+vz","tlshash":"b5a21af5a14176a58fa741e980a3c01362ef2210180e8c34f6765cfe39f8ed5e677e69","first_seen":"2026-08-04T02:27:17.991075Z","last_seen":"2026-08-04T04:29:02.006807Z","times_seen":4,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"www.visioncrm.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}