{"report_id":"cc12627b-cea9-4021-bc54-4881c293961e","version":6,"status":"done","tags":[],"date":"2025-12-26T11:40:44Z","url":{"schema":"http","addr":"www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"title":"Best Monitoring App for Android: Your Must-Have Android Monitoring Solution | Spylix","dom":{"size":35211,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (996)","md5":"3ee8c7cf0a6445206484d48da0381acc","sha1":"592957d0e663657e5a6d11a9792681a586711a88","sha256":"e104148841c12f2e4adc4a41152c17cfb0e63046686d4dcd8f91931db57238b2","sha512":"cb9e307178788914d844d2ddca7c1a2addae0c25fa8fc260a8cb907953e21161c1b0f27b1b88f10245a8e6d728710c0ed3f0b3d3b9185d542d9cf060c1a98e60","ssdeep":"384:yVju04LeIdOiz9v36gYSvh2NY4TyiLh0KInKItXvAhCOaMmT3W6k5Vqfb:yCeIdFJvxYSvFSZV0xKIhvcCF4Vqfb","tlshash":"2cf2333261f1227b0683c1d0b6386f49fb83d11bda97998672fd4b942f87c92cc53668","dom_hash":"domhasheef4af145ede99d712cd37348cbf11e1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-30T11:40:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.spylix.com","ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-10-25","domain_rank":2709445,"first_seen":"2021-04-19T09:01:27Z","last_seen":"2024-04-14T21:09:32Z","alert_count":36,"request_count":36,"received_data":1311243,"sent_data":21539,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-12-21T22:51:32.802585Z","alert_count":0,"request_count":4,"received_data":323172,"sent_data":1742,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"bat.bing.net","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":24312,"first_seen":"2023-11-04T08:19:21Z","last_seen":"2025-12-22T00:00:56.505324Z","alert_count":0,"request_count":2,"received_data":1054,"sent_data":1465,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bat.bing.com","ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1996-01-29","domain_rank":2924,"first_seen":"2014-04-08T09:23:16Z","last_seen":"2025-12-21T23:01:54.907071Z","alert_count":0,"request_count":2,"received_data":55892,"sent_data":827,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-12-21T22:22:06.545601Z","alert_count":0,"request_count":4,"received_data":2459,"sent_data":4942,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":1,"received_data":11630,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":5,"received_data":43457,"sent_data":2686,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-12-21T22:19:29.872886Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":794,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-21T22:17:33.83847Z","alert_count":0,"request_count":4,"received_data":1711917,"sent_data":1792,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-12-21T22:22:55.693237Z","alert_count":0,"request_count":1,"received_data":848,"sent_data":1260,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-701094853\u0026cx=c\u0026gtm=4e5ca1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"09ff7dc9b487313027b4158df77cac1b","sha1":"3ee038ebff1f4f3b354496d0d3859fcf385bab6f","sha256":"5b209ccbd6b3cbd6066c738c6095076eecb0779701204772709975635ec652fd","sha512":"e105933c0da853d70c3429929b76333e2fdf6e606aea7aacb4c2daa779669eead719ef728c12e36bacb732a14861c3d074ca49025e10ead7de726624f32ed697","ssdeep":"6144:EIeJF2bulKYXV1u99Yye5HDmHYmyBFzfnsyRuLjmWllxei4pN:1vbu7l1mcDnsy6SWsia","tlshash":"cd8429ce73c674269396a478403f118ba57b29e2b44ccc95f189cce42d74aaa4277f7c","size":393512,"data":"","first_seen":"2025-12-26T11:40:49.923749Z","last_seen":"2025-12-26T11:40:49.923749Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/action/187000103.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4efafdc9aac348ffbb09d482a1097bf0","sha1":"563f05b658ca021fc5808d1155b5b396268d4c40","sha256":"0622e3fde788e8f4938993664ebe05946ff8085c891eb94415561c784f62876d","sha512":"73d67cf36351f3c128cf24fdc1d29a2f52bf8e63cf35638444c5166a41b1423d39b11c9974627f0bbb7f8fc64b9b373c4eebf6cb2168b577cf287b54bbe60449","ssdeep":"","tlshash":"bbe0df1a61d16139d823ec2dd22b868d2fe2a31bd284ec11fd6cc6667fd55282d10f4c","size":399,"data":"","first_seen":"2025-09-26T21:37:57.874276Z","last_seen":"2026-06-13T12:09:10.037574Z","times_seen":79219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/bat.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1530465e2879fc93672deb7c4c276e3c","sha1":"4b64864aff54b29d7c644d458347cef6d4367df6","sha256":"567e72c15064f42d211a6a03b4675b66e237b2b159079dedf732421f13fdbf41","sha512":"fb5c93a19811fd4a364820f6c00a1f3a1965d2b0d25d04f78e6d85830f15744fb2f04e4f2da72d63514cbaa5182207ac27d4e3f12c845954eb8cadf83d60e2d8","ssdeep":"768:YcMOThici/2NIh+Qm3mT1OoLQBDWf6yPGV/Oj7Duy3:TMOTkci8/3ULMWf6yPGh4j","tlshash":"b7330a8333509a7645f9419c786a2903a336570e30be70ec7a8cf8e5945de4b7237b7a","size":54198,"data":"","first_seen":"2025-11-25T22:32:41.235324Z","last_seen":"2026-06-06T11:35:15.650571Z","times_seen":42675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-QP2Y8PK8Y0\u0026cx=c\u0026gtm=4e5ca1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd1543d6531b1d73e04f6b9b0172483e","sha1":"c5dea7eb38e419c76cecf2aac4800bda9dcfa140","sha256":"a243700a08332439b9429d9484320e4a13361f971f6b6b34f984bc8dc317c61b","sha512":"822dfe5e6fd10662dfbcc5c33cc4f8e164bc5d5aae7cae5b223935d2f4d75fd87da0df78e3b89aee1e0b0cb79c68ccf3e57f5e5d98e7832a5d444cdf15542433","ssdeep":"6144:bVIe7ma2bulKYX61u99Yye5HDmHYmyBFzvnsBO6QWllEKPad4XEPP5d:KC8bu7q1mcrnsAWawET","tlshash":"6bb4098e73c6742653daf478502f02cba9bb29e2b45dc896b1c9ccf02d3459a4167f78","size":504158,"data":"","first_seen":"2025-12-26T11:40:49.889974Z","last_seen":"2025-12-26T11:40:49.889974Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T17:33:46.023529Z","times_seen":368207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d69c980a4926cac0ad9fcaf18df0fc2a","sha1":"b3b9c12dea4b4f7591bc01bfa2e34c9e4d719c58","sha256":"238e09714f97871beb7edffa5b45865407f9c52d239f9854253763534e8e1d29","sha512":"e3b5c5d698b6bbc9f2b90b77d8216db4387f8bbd84251b58313a8b11c524bfbc4ddd65b53a4050fe008f250e36e79d2c7b34679e41b9919d686103efc60f380d","ssdeep":"","tlshash":"7de028db74150c7570dd05f633b1a11c71431508a8091c22cdfdc91428185c74c134cc","size":341,"data":"","first_seen":"2025-10-23T02:53:45.000521Z","last_seen":"2025-12-26T11:40:49.93983Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/swiper@8/swiper-bundle.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143706,"data":"","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-06-13T14:30:01.63546Z","times_seen":13511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/assets/common.js?v=2","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3950b0496067697ff4f7206ad2be0d3","sha1":"cafb2e83d9702ced051be5858233818d44186878","sha256":"52f0aeafbc66d438e8f8f3836556259817d79beaed228fd8808d410ebc71ae79","sha512":"4cfa39f85d090e9d46da7a0d0af93843410ca46bcad159100242f61fd4009e3aab8218c1c121a819d7bf02842d23ed347d37ae05e4b0d9ff91776b43065e2892","ssdeep":"768:NjmK6BeBU/VG0rju9GDTvn9FqZccB/eMkbA3ohWEtjh46nT8Ozrvu1wxXVem+I1J:5MBQU9Rrju9mwNGxSd2JWa","tlshash":"6113428563a064811b871e3f2b6e90f3e7b704c526c68eabcbc4a434249d627edd35f1","size":42172,"data":"","first_seen":"2025-12-26T11:40:49.919672Z","last_seen":"2025-12-26T11:40:49.919672Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/assets/bootstrap.bundle.js","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb2ab2f5bb58154ca9cc11ea437bfdbb","sha1":"9e673f8ced937d5eef2110f11e3f061453d0e9fd","sha256":"86db0050e22037cc64a28b69414ce6bda09b428eb1d8f34c4c3ee42d623ac984","sha512":"19093f613791c03d1d4e733ffe995f7169c64c6a86b74141df79914dc6dcb959de022e59add380dbc129265b6a17d970affd2345411c13ac9857b76e73530457","ssdeep":"1536:pEekASPeY2K/GofBEUnyN5ATiyPJ28YGL0Jy4pfrM9QGd5uRdvPBBmUGYKUCfWZS:SerOiK/TYB8Ue0MgSQ9aAw63M","tlshash":"492481093dfa2463452be57e8baf411af23180872509e9447d9c478c1fa5d3492ffbe9","size":209719,"data":"","first_seen":"2023-03-07T21:44:11Z","last_seen":"2026-06-10T12:25:44.49253Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFS5GL2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"65e8fa8c693df3e76a8d04495d304a4f","sha1":"d84a5b7a374bbbb6314292a1517d5518407747d8","sha256":"fe6e21d4365cd366e374871e10f5441175b99ce10be41bd21182ad64a0b0adac","sha512":"7740ad9f212fe8b6f2dfde1b3377980fbd08f323f8b803577b96aa2dd4e0334ed34a99f209076ca478ddade9313a416668aa2235ae13c01fb6dd1c9b77e7247d","ssdeep":"6144:62K3eJK2bulKYXV1u99Yye5GDmHYmyBFz0nsi2+WllO4ciRalB:62U4bu7l1mdAnswWWPiCB","tlshash":"a2942acdb3c6746a8392a078503f018ba57b69d2f44cd895f186cce42e746aa1237f7d","size":418259,"data":"","first_seen":"2025-12-26T11:40:49.895286Z","last_seen":"2025-12-26T11:40:49.895286Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/assets/jquery.min.js","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89503,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-13T12:42:01.088555Z","times_seen":19817,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"37aa9bd655a8ca9ea0b4ee110216a7ed","sha1":"d30ec090ce5d4d91264c13964ac70403a7a547e9","sha256":"790e722c012c923c1407958d3ef0b9854a036ced4d69e10f162faa455629e46d","sha512":"5334d9226afa73b94bda64b80c74d74c2477c4a3cba14f8f98739a78733d73baa920297b11a57d74a01aded050af30e69a603bae125ed6c07a8c8a80dbcc1c00","ssdeep":"","tlshash":"dff0bf45546410622263ad3b293e93506472299bdcebbd3534dc9c09df3d13d46f56b4","size":455,"data":"","first_seen":"2024-08-21T07:00:26.803954Z","last_seen":"2025-12-26T11:40:49.941808Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/sandbox%20eval%20code","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-693805005\u0026cx=c\u0026gtm=4e5ca1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"758416aee92167b705a7431ac4927ae3","sha1":"597dc042188805a8cbb2d9a246aeb091c505343a","sha256":"9614c6811ed63db82b2cfe6483bdd2a6ed90b72d43fec873154200e8c4388764","sha512":"1ac048478f3cee5d02b281c12dfd26f9403b09694b54ca8e2ba8e40e6b7468750d4c55b51501c2c08cff27db71c142b387e8bb05bdd57ffe4e00c8978cae3aee","ssdeep":"6144:BIeJ+2bulKYXV1u99Yye5HDmHYmyBFzfnsyRuLjmWllxei4pN:ycbu7l1mcDnsy6SWsia","tlshash":"788429ce73c674269396a478403f118ba57b29e2b44ccc95f189cce42d74aaa4277f7c","size":393494,"data":"","first_seen":"2025-12-26T11:40:49.910427Z","last_seen":"2025-12-26T11:40:49.910427Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.spylix.com/images/android-bimg.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/android-bimg.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 214612\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-34654\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2FE2zw22NrhM0Gb5ayIBhb6gaq5%2BdT2JQZopGwYC46T%2FUcKRmX0sdbLsr%2BBt1e7ua%2FTa3Kehu4AqBQSpyrfBP49Qi8675CKWYlW5ig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8afac6b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 481, 8-bit/color RGBA, non-interlaced","md5":"0e0a8a1940668fbe6c3c78d38032a702","sha1":"3b10533e90c7838b8d69c74f243555d8ee1c6d41","sha256":"89e8a592e49ce69b7731717ba913efef33e55fe9e7c7339816d2d3678060665f","sha512":"0cf60e5f5e2eb338b10e1c834e73decc91727349967eae43511a7f9156018f4a1c46bb76b22ba3ab109194d56813586ac747ecffeae1bd96ebd5c3db0e4297b5","ssdeep":"6144:ZsKUBwV9x0/X8srXXJMrobRIXMnDgUe26vCVkiY8Z:Z71I8EXXJ1D3CvCqiBZ","tlshash":"a624232117afa5bf0ae8f6809854f440eefd6d2ab52186c603cdd064606063f2ffdad5","first_seen":"2025-12-26T11:40:49.865745Z","last_seen":"2025-12-26T11:40:49.865745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":466,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/android-bimg01.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/android-bimg01.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 110757\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-1b0a5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BDkbZB3NgCBcig5nog42fYL5vZmgI7cSLiEAOrzpW%2FWXXy%2B3IP9r%2BKkLToT0DRq09x3Y738QR5uFLuzC8pYQkzuBBaCggtVoMxzJCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b1ad6b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"7b2a0a87924bcafe20e2c09e787825c2","sha1":"41fadae0e2c10eece4398862ce43726acc275688","sha256":"04307829442138afa5f2ca95fa405589b30ef19716a56ef867f578a9570ada44","sha512":"22024b0419567f140f7627af722d77bdb19e9bb3af8fad48fb8b2b3d7422913ee073b179152b083ada96fa079db64c83ba9af7db14d19cd324530662549fd1a0","ssdeep":"3072:JAt/Khl7Kye9EwH2S4gesMDHleHYfff7dpyPnN:JAt9yYH2S4hfdffjd8vN","tlshash":"d8b3128e35a947cde3ef4cb212df1470394151f09faa619b0e5398b5dc42e46914f7a1","first_seen":"2025-12-26T11:40:49.868632Z","last_seen":"2025-12-26T11:40:49.868632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":361,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/assets/jquery.min.js","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /assets/jquery.min.js HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62e4e2dc-15d9f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 552624\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FLLAsviTRVLKsJ4xPg7QPCwK9Mg0IOXLRcXgqrlbXhOxySeepexWDOCjqEm2%2BlUUyl4z0FSuQTtTT4gF9%2BU9TjFwCIXgSCUhFR9fbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b404d8b2ae0b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89503,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-13T12:42:01.088555Z","times_seen":19817,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/i-gps.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/i-gps.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1451\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-5ab\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 26124\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5AK0fj5RBbCfary5DWgtMBEi621yDwh4NcXhpFnsuFNwAodb0oD5ssvR0ieemsZ6LHX7CQAUc%2BKJum2L1Wc%2FEA9iX88vyeaQS%2Bzjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b0acab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1451,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 64, 8-bit/color RGBA, non-interlaced","md5":"c00b6fe7e2b10e9bc12db95dc6ee7f3c","sha1":"9484d2fcaaf03e3051ea7712f2e88212b07649e4","sha256":"93f2541f6e9adc4fb74a90514a00262b80cc8a3f0bb46fd3ef41fa0df253bdb0","sha512":"f18bba378d0fcd2cd6e25cc3c0fac65c81f4e73c26b90ea67c8ed326c651577ab52ad1ff63df1d6cbdd72b6fe325f9d7bfdb91a604cbb475be5664c3b63a5119","ssdeep":"","tlshash":"3c3119c288f82cecee2c06ca6cff2c65c67bce4546884c85e510e1327d0b084badbe00","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.873269Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/why04.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/why04.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1349\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-545\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 95049\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g75wQicHe%2Faxve1dkNBcPz6M68fpqMggmNPiaoycjD6kR6r%2B2qpMrRcm7RhsveCyrVDnzjCOAo9ctEaWdz8WDTmth2tETSmUfAeJKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b1adcb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1349,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3dbdb086bd94066604aa37b6228d4914","sha1":"1b91079a8b194a7cf5aa4d94a6c9bdd40a28fa3a","sha256":"960da06104b005146d9bfa9f94f3b2bf324963d0eedc50562ea94b13766bf303","sha512":"70a31a06ad37509bd948571cb942140ad7e1c5191299a4d9be0d03215b6ff3be92f7dc43fb5e2285640cc2ab6891df24b0cc60b10acb72de0c69f5f231535fec","ssdeep":"","tlshash":"9a21b6e6a3c003d48207ca62d19193f0a5fcb0af26d6ac12e9defd9508db9840b97043","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.875795Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/swiper@8.4.7/swiper-bundle.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /swiper@8.4.7/swiper-bundle.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.spylix.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9b404d8bff3f5a0f-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 51409\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 26 Dec 2026 11:40:21 GMT\r\nlast-modified: Wed, 27 Aug 2025 02:09:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:9kWxLyfE6cEhDVclz6iUuGRkNy57G+y+RxJqX+gvmt4=:\r\nfly-request-id: 01K3MMJM2KAHGNPRK4NWZRPNK3-waw\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":143706,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-06-13T14:30:01.63546Z","times_seen":13511,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:22.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.spylix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 07:02:38 GMT\r\nexpires: Sun, 20 Dec 2026 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 535064\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-13T17:30:02.014587Z","times_seen":261565,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":95,"dns":2,"connect":21,"send":0,"wait":21,"receive":1,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.net/action/0?ti=187000103\u0026tm=gtm002\u0026Ver=2\u0026mid=e432a0ac-eeda-4bbb-a75b-96fa328bbd53\u0026bo=2\u0026gtm_tag_source=1\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=Best%20Monitoring%20App%20for%20Android%3A%20Your%20Must-Have%20Android%20Monitoring%20Solution%20%7C%20Spylix\u0026p=https%3A%2F%2Fwww.spylix.com%2Fandroid-spy.html%3Fgad_source%3D1%26gad_campaignid%3D20225052932%26gclid%3DCj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026r=\u0026lt=1155\u0026evt=pageLoad\u0026sv=2\u0026asc=D\u0026cdb=AQAY\u0026rn=30246","fqdn":"bat.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:23.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bat.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 21 Oct 2025 02:00:33 GMT","end":"Sun, 19 Apr 2026 02:00:33 GMT"},"fingerprint":{"sha1":"62:7A:BC:C4:E3:80:17:91:83:49:E3:83:45:24:DB:AE:BF:0B:EB:1F","sha256":"49:47:A8:23:DF:CE:A3:73:C0:ED:8D:5E:33:E9:AB:A1:79:C3:B9:92:74:C0:63:B4:37:11:CF:FB:2E:39:9D:CF"}}},"request":{"raw":"GET /action/0?ti=187000103\u0026tm=gtm002\u0026Ver=2\u0026mid=e432a0ac-eeda-4bbb-a75b-96fa328bbd53\u0026bo=2\u0026gtm_tag_source=1\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=Best%20Monitoring%20App%20for%20Android%3A%20Your%20Must-Have%20Android%20Monitoring%20Solution%20%7C%20Spylix\u0026p=https%3A%2F%2Fwww.spylix.com%2Fandroid-spy.html%3Fgad_source%3D1%26gad_campaignid%3D20225052932%26gclid%3DCj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026r=\u0026lt=1155\u0026evt=pageLoad\u0026sv=2\u0026asc=D\u0026cdb=AQAY\u0026rn=30246 HTTP/1.1\r\nHost: bat.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\naccess-control-allow-origin: *\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 7F91BF99190F41ADAB413EAD71EE20AD Ref B: OSL231050214040 Ref C: 2025-12-26T11:40:23Z\r\ndate: Fri, 26 Dec 2025 11:40:22 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/swiper@8/swiper-bundle.min.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /swiper@8/swiper-bundle.min.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 50\r\ncf-ray: 9b404d8b3fa2b1b8-OSL\r\nlocation: /swiper@8.4.7/swiper-bundle.min.css\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16493,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":50,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/step-arrow-2.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/step-arrow-2.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1577\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-629\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 26124\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLG8Dkv9SLnNCWpShsjy169tU2n%2FhFmWv%2FJhpTuI6xy1fSmh6p5xMN%2F0dHA3q3%2FD0nqkAOhzIZ9JjqYe8%2FQcI9UpJ0m6ZpdB53qwbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b1ad4b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1577,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 323 x 32, 8-bit/color RGBA, non-interlaced","md5":"efd0a33a1a1d1e1856e50c4ce82dfdb3","sha1":"5bce5afc79c2a4e6b6d6a35d1e9e5704c3a76fd1","sha256":"2690dc01901f24708ad689cefc3efc245fff120c7a4575bb14d1ad42864e4001","sha512":"b2f03da805e6bb06a36c31bcc024818e57ba6612f743cd8b3174c39d13afe114156d26991fb0a18c3fb014d58a584e29518a9050a8679da6283d23e71fa1931d","ssdeep":"","tlshash":"e731bae7f0d20539346fd5260b67b1aadddd8e169a278f5e104aa4064130d410eadf47","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.880281Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/assets/bootstrap.bundle.js","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /assets/bootstrap.bundle.js HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62e4e2dc-33337\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 743639\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYORhfjDAZcTzVsWecfKgkoICzOiY36gJ357KTnmJSX6w%2Bddb0PsnCtqagfZThF7aNg4BWZZxZCVu2FyVmv0wCIw0lyXngSqPmcrog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b404d8b2ae2b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209719,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (620)","md5":"bb2ab2f5bb58154ca9cc11ea437bfdbb","sha1":"9e673f8ced937d5eef2110f11e3f061453d0e9fd","sha256":"86db0050e22037cc64a28b69414ce6bda09b428eb1d8f34c4c3ee42d623ac984","sha512":"19093f613791c03d1d4e733ffe995f7169c64c6a86b74141df79914dc6dcb959de022e59add380dbc129265b6a17d970affd2345411c13ac9857b76e73530457","ssdeep":"1536:pEekASPeY2K/GofBEUnyN5ATiyPJ28YGL0Jy4pfrM9QGd5uRdvPBBmUGYKUCfWZS:SerOiK/TYB8Ue0MgSQ9aAw63M","tlshash":"492481093dfa2463452be57e8baf411af23180872509e9447d9c478c1fa5d3492ffbe9","first_seen":"2023-03-07T21:44:11Z","last_seen":"2026-06-10T12:25:44.49253Z","times_seen":223,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:22.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.spylix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Dec 2025 19:56:18 GMT\r\nexpires: Thu, 24 Dec 2026 19:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 143044\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-06-13T17:30:01.648682Z","times_seen":257242,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":142,"dns":1,"connect":22,"send":0,"wait":21,"receive":2,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-QP2Y8PK8Y0\u0026cid=1388804069.1766749223\u0026gtm=45je5ca1h1v871231111z8855362328za20gzb855362328zd855362328\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115616985~115938466~115938469~116184927~116184929~116251938~116251940\u0026z=958408473","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:23.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:59:22 GMT","end":"Wed, 25 Feb 2026 15:59:21 GMT"},"fingerprint":{"sha1":"E3:8A:B3:9D:E4:8B:53:E7:04:0F:DC:F1:FF:B6:DA:2F:A5:13:E7:D1","sha256":"3D:CC:25:A1:DF:57:5C:E5:5E:62:8C:3E:4C:9E:BF:21:67:03:6E:09:DE:4F:C1:38:17:4D:91:E4:81:A1:1D:6E"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-QP2Y8PK8Y0\u0026cid=1388804069.1766749223\u0026gtm=45je5ca1h1v871231111z8855362328za20gzb855362328zd855362328\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115616985~115938466~115938469~116184927~116184929~116251938~116251940\u0026z=958408473 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 26 Dec 2025 11:40:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-13T17:31:26.117895Z","times_seen":948042,"resource_available":true,"data":null}},"time_used":564,"timings":{"blocked":256,"dns":1,"connect":21,"send":0,"wait":35,"receive":0,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/i-chat.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/i-chat.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1647\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-66f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 18694\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jjQNKcX%2BjljmFPidN9M%2F5KlsOD7xPP1n4ayIGyXjlFOBygC%2BcvbmiANvkLLgSR95Isj9eOuJScHCuTvIdr0jaF3sCYz4G%2BYRKfIufQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8afac7b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1647,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 64, 8-bit/color RGBA, non-interlaced","md5":"acf5e75519a535b5271129a3b60b0681","sha1":"828c0e98ce692d100bb2f1a11fe2eb9bfc879db7","sha256":"dfeecca09a5430fcf51f55e9912dd7ad8c177c7719c8d62dcd4b3e839822b355","sha512":"5fc19f745dfbc4f480f191a446b7ee5f042f6fe47acb671f90fbfd64997190292b9fd8d4ab1185c18a1ee1d79e6fed12dbe9bb30ea801358afb149a417aefd24","ssdeep":"","tlshash":"bb310cc476d6aad1061c13725e2aacb6fd775eff1cab3d042b18cd589c059024d07626","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.884217Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/i-calllogs.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/i-calllogs.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1527\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-5f7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 26124\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hNDTjEvNxAozu%2FC5%2B9ewNLOPfSufwO2M3RNy9gWJmI90%2FOpoBWPtrAW6YPU%2FLh0FVevs9LQ91jhzMLZxR4rTMoXLZmUm7swdM%2BPY4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b0acbb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 64, 8-bit/color RGBA, non-interlaced","md5":"d246c95aa5c3172a11ace6e3ef3e17d8","sha1":"c4c0d0e395968d0a3e9f80732a4119b1d6bf44d2","sha256":"3329c984ac379f5b9a5d764d70198eeb4966b8f14eece5f2bccca3185bf3d96c","sha512":"9b75af87790f5e74c62864add497ebd1f1eb62dd68e3d70b19af6a1e54c97156f077519c2b80f899b544c65d433e46620471188dbbd026436bc561fdbb9044fc","ssdeep":"","tlshash":"0131f9eee7999fb2850f1a7e1d07d0637f576fac2d81b88085c2011c9281f0c1d3a131","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.885816Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/why06.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/why06.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1041\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-411\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 606850\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8DGatDOMqlscWfiJHPnIbYxc1K5L2om7EwYZO7JxrA4nDrDDMGNQKtsu%2BOE4twpxkKU94q%2BzZQEMJZaKMlY2%2BH9%2FV%2FIaD9iEaIUzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b1addb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"58c06256ceb15fc54737542a89181658","sha1":"c80f1cfc62c3ed27e66ce6798f31ed7334949ea0","sha256":"25f0133d9cccca835cf6252673359bff5f9aead655442702cea3d75576711d51","sha512":"f81c94fcbb9591eac8d05c93de02a88af5113948b68372ccbad28bc3ea03cb61a4d7057984df4e3207de7857e611375289b7d0bbce5df8b659ab8490ee5280ce","ssdeep":"","tlshash":"d711b5c6135532f27a0de537617942aeaa9741bd178a5c7b1a7b301502120856da335e","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.887653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:22.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.spylix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Dec 2025 20:59:17 GMT\r\nexpires: Thu, 24 Dec 2026 20:59:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 139265\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-13T17:30:15.612603Z","times_seen":244969,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":207,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-QP2Y8PK8Y0\u0026cx=c\u0026gtm=4e5ca1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:22.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-QP2Y8PK8Y0\u0026cx=c\u0026gtm=4e5ca1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 26 Dec 2025 11:40:22 GMT\r\nexpires: Fri, 26 Dec 2025 11:40:22 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159863\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":504158,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10892)","md5":"cd1543d6531b1d73e04f6b9b0172483e","sha1":"c5dea7eb38e419c76cecf2aac4800bda9dcfa140","sha256":"a243700a08332439b9429d9484320e4a13361f971f6b6b34f984bc8dc317c61b","sha512":"822dfe5e6fd10662dfbcc5c33cc4f8e164bc5d5aae7cae5b223935d2f4d75fd87da0df78e3b89aee1e0b0cb79c68ccf3e57f5e5d98e7832a5d444cdf15542433","ssdeep":"6144:bVIe7ma2bulKYX61u99Yye5HDmHYmyBFzvnsBO6QWllEKPad4XEPP5d:KC8bu7q1mcrnsAWawET","tlshash":"6bb4098e73c6742653daf478502f02cba9bb29e2b45dc896b1c9ccf02d3459a4167f78","first_seen":"2025-12-26T11:40:49.889974Z","last_seen":"2025-12-26T11:40:49.889974Z","times_seen":1,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-26T11:40:21.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Nov 2025 08:20:34 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRMOq6cfuRzznIV9%2FID4AMInXBjQhdireJ0XB%2FvmYundC4mIMvGLZKu5k4Lycl8Ld3efDUUUnyj%2FcXQDMQi4sKgr5Sq3uIEF1P4iQCVP\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b404d87ab564c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":32873,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (846)","md5":"1754973b7d3891447cc8fd5e592674d0","sha1":"10f06a858f6b79ee9437a5a150d4b977d08a890a","sha256":"0357aaef50c1449f3b6b663d8ecde5e430d4defad0fcf70b29d862e8697edc3f","sha512":"01d82a4cfe6f9ab0e0ef9c56e3af77b3f8567a60fc95c5b9eecad065afae81179c09ee3436deaa755e62daf41269a64f54ed9978c808f7ffb7b5b3357ef1ae43","ssdeep":"384:m2LnNko9vE67BSv3XYG4TyiPX0i2Rx72NvyhC+hQchUCLj6kJ7VG:msnNkov3BSv9SZf0bj76vmCR6VG","tlshash":"15e2213261f1227b0683c1d0ba286f49ff83d517caa7a586b2fd4b941f87c92dc53658","first_seen":"2025-12-26T11:40:49.891426Z","last_seen":"2025-12-26T11:40:49.891426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":19,"dns":0,"connect":1,"send":0,"wait":362,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/logo-spylix.svg","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/logo-spylix.svg HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"62e4e2dc-19b7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZssDjcNt8EQZq%2FNQ2q%2BlUOrA1bjzk%2BvZxZNpUZ8VBLawH7hMIjVUYk3Rzy%2F%2B1f9cgLcAEtR2zexQeGisZnxjADBJ3R%2B%2Bx%2Fzkq6c3CQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b404d8afac1b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6583,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1415095b8ff425de5c1935ee1487fa84","sha1":"9563acf2302ce7fbecfd7be827add16dbe07d5a6","sha256":"39cc8d02f80dc32005b65d4215719e198d3b9fe66ebb3035b1f914bec9e6ba2a","sha512":"f692006310aec3398bfb0a8c4c600f2287762c8023a6de5a356de3bb0eb9dfa08bd2655de619984cc826efc8f7adc5f62b8d82ed624759a3595208d8785dee9a","ssdeep":"96:WQRrPR0jcordcQL5N7AoSkUYvXAfTBslnVyFbypJa17wAHdsUQ/pSr8QWYr:F0oo9HUhYvwLBsPyFepywWsbpSr8QW4","tlshash":"38d185d9abd8a3e0e00af7f5de2551aa371b38fa3346ce7482956d08d9010dec599c84","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.893251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFS5GL2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:22.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtm.js?id=GTM-KFS5GL2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 26 Dec 2025 11:40:22 GMT\r\nexpires: Fri, 26 Dec 2025 11:40:22 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 26 Dec 2025 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142008\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":418259,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8735)","md5":"65e8fa8c693df3e76a8d04495d304a4f","sha1":"d84a5b7a374bbbb6314292a1517d5518407747d8","sha256":"fe6e21d4365cd366e374871e10f5441175b99ce10be41bd21182ad64a0b0adac","sha512":"7740ad9f212fe8b6f2dfde1b3377980fbd08f323f8b803577b96aa2dd4e0334ed34a99f209076ca478ddade9313a416668aa2235ae13c01fb6dd1c9b77e7247d","ssdeep":"6144:62K3eJK2bulKYXV1u99Yye5GDmHYmyBFz0nsi2+WllO4ciRalB:62U4bu7l1mdAnswWWPiCB","tlshash":"a2942acdb3c6746a8392a078503f018ba57b69d2f44cd895f186cce42e746aa1237f7d","first_seen":"2025-12-26T11:40:49.895286Z","last_seen":"2025-12-26T11:40:49.895286Z","times_seen":1,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":123,"dns":2,"connect":30,"send":0,"wait":58,"receive":81,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/swiper@8/swiper-bundle.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /swiper@8/swiper-bundle.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 49\r\ncf-ray: 9b404d8b3fa3b1b8-OSL\r\nlocation: /swiper@8.4.7/swiper-bundle.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143706,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:22.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.spylix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Dec 2025 21:59:25 GMT\r\nexpires: Thu, 24 Dec 2026 21:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135657\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-13T17:30:01.9726Z","times_seen":356090,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":108,"dns":3,"connect":7,"send":0,"wait":21,"receive":14,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/action/187000103.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:23.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 16 Dec 2025 22:38:02 GMT","end":"Sun, 14 Jun 2026 22:38:02 GMT"},"fingerprint":{"sha1":"D1:12:1E:C8:CC:CA:91:1F:2E:2C:96:3D:8A:DF:DB:ED:79:E2:74:3A","sha256":"D0:AC:6B:45:B9:2C:EC:35:CC:09:B3:CB:4F:77:11:93:75:BF:B7:D1:3B:3D:31:C6:7F:67:5D:38:EB:99:98:4A"}}},"request":{"raw":"GET /p/action/187000103.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private,max-age=1800\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 15740F9925B34437AC82468F3DD45C35 Ref B: OSL231050215062 Ref C: 2025-12-26T11:40:23Z\r\ndate: Fri, 26 Dec 2025 11:40:22 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"4efafdc9aac348ffbb09d482a1097bf0","sha1":"563f05b658ca021fc5808d1155b5b396268d4c40","sha256":"0622e3fde788e8f4938993664ebe05946ff8085c891eb94415561c784f62876d","sha512":"73d67cf36351f3c128cf24fdc1d29a2f52bf8e63cf35638444c5166a41b1423d39b11c9974627f0bbb7f8fc64b9b373c4eebf6cb2168b577cf287b54bbe60449","ssdeep":"","tlshash":"bbe0df1a61d16139d823ec2dd22b868d2fe2a31bd284ec11fd6cc6667fd55282d10f4c","first_seen":"2025-09-26T21:37:57.874276Z","last_seen":"2026-06-13T12:09:10.037574Z","times_seen":79219,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/set_partitioned_cookie?frm=0\u0026en=page_view\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026url=https%3A%2F%2Fwww.spylix.com%2Fandroid-spy.html\u0026scrsrc=www.googletagmanager.com\u0026gad_source=1\u0026gad_source_src=2\u0026lps=1\u0026rnd=426675117.1766749222\u0026dt=Best%20Monitoring%20App%20for%20Android%3A%20Your%20Must-Have%20Android%20Monitoring%20Solution%20%7C%20Spylix\u0026auid=1315905626.1766749222\u0026gclaw=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026navt=n\u0026npa=1\u0026gtm=45He5ca1h1v855362328za200zd855362328xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026tft=1766749222453\u0026tfd=1428\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:23.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /pagead/set_partitioned_cookie?frm=0\u0026en=page_view\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026url=https%3A%2F%2Fwww.spylix.com%2Fandroid-spy.html\u0026scrsrc=www.googletagmanager.com\u0026gad_source=1\u0026gad_source_src=2\u0026lps=1\u0026rnd=426675117.1766749222\u0026dt=Best%20Monitoring%20App%20for%20Android%3A%20Your%20Must-Have%20Android%20Monitoring%20Solution%20%7C%20Spylix\u0026auid=1315905626.1766749222\u0026gclaw=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026navt=n\u0026npa=1\u0026gtm=45He5ca1h1v855362328za200zd855362328xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026tft=1766749222453\u0026tfd=1428\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Fri, 26 Dec 2025 11:40:23 GMT\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nset-cookie: GCL_AW_P=GCL.1766749223.Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB; expires=Thu, 26-Mar-2026 11:40:23 GMT; path=/; domain=google.com; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nexpires: Fri, 26 Dec 2025 11:40:23 GMT\r\ncache-control: private\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/ic-apple.svg","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/ic-apple.svg HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 30 Jul 2022 07:50:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"62e4e2dd-60f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GtnC3Ubpn1JDGW7cmLAIV01GpJfLDWCAl6ku9OMJPpYN58E6mswQ46Y4vJJjYC2PKQmVoGcpnA8D3sAxdxVn2OIzy2TArNYYzoISbQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b404d8afac4b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1551,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb48652674c8fa496668d78210ab0e6f","sha1":"4315adab2c22b2a868c93aa8eead455da337a11c","sha256":"89c9e96e9d399532734ab24345d34d370e3fcc1d9cb28b8301e2577e3aa06a53","sha512":"2a35c2ef64bc42a78cc296e41a0a37658fc362b5ac3c032c009f19b1618c725f04d49d38be34e7cf7fa38bafdd5319dcd3eb4c0c5306f249111031803f5f5a71","ssdeep":"","tlshash":"453120d625e83be2de47c3d8c427d89a246379fa3ea7d54cd3a4da64a10b5ac410880c","first_seen":"2025-12-26T11:40:49.898265Z","last_seen":"2025-12-26T11:40:49.898265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/step02.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/step02.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 6222\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-184e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 26124\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0De1tmL2Rg7pjznRd3JOLqwk%2BFtX7JSch6O0j8NEUMw%2B73xV50mlu%2BMt%2Bc07iCxzxK1bjSJO99hk4xnMb8IwWq2LBdnESIhQ50kPkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b0ad3b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6222,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"a58d103a76e782113a46ea1009602180","sha1":"8ffa7e9764eb57fd78faaaa1c6c0e4d9817a40bc","sha256":"7200015588d7c7993d5b52ba3e4b1d498f80a5c6713ff615001113dc5a647b35","sha512":"1b8153b20fc82611e7365b4e6e3df5b799deed7d247afd90b495809ef4ae0410ba8f901fdb64ae7a14e8c37396b9817d0ef29a4157de4e89eb2b1e625936df81","ssdeep":"192:0SroWNLaslV/dsEfTep6AhfS3b812NkAn4jfrbdI/:zUqWa7sEfI6ARG8MNkU4LPdI/","tlshash":"2cd1b0e1b261035ba9ce8ac2334c3cdb14f09542e9b809dcb74699ccdab1655e827e21","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.899911Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/step03.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/step03.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 6307\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-18a3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 26124\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQvCfVXbkw65%2F%2FEmmBUbYd8kkO44g82d%2BIkTe92p%2BC05HpINqvaS9dUQluXQNA58HIsaTTfDdHFrdrsQuxMKPYqJ05BAsJVArta9pg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b1ad5b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"88197506ceac913bfede99e433fe0320","sha1":"28fe0b49e2f3380edd43db6fde17f7677941414c","sha256":"671da374b6f7c96c0d581468ba8cc94f35ad9955584ba975dd1ffb4433bdde07","sha512":"8b93493b887b309758cc43fbe26fc193b5a4af07aeff28f500905d15c4caa0a334cd04777b2377e065692359520a33516be4d557cd7c3fbf659f387ceed707a0","ssdeep":"96:0Sce0Ixb/MQ33rJXDJSi32aKWSvfaKWB8TRxb3yi7kme2niEQZUv7rclycAE:0Sce0A/jxlS22zl7/15nkmXiEQLyS","tlshash":"91d1aefa833bb1210189ca72eef1726ec03a5c9c4a93a06e9dd7057c8f481c7c024b26","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.902239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/why01.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/why01.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1276\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-4fc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 287337\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FjWkeAwXOmEdTb5kY9PD3%2BZRArRPtQ29snxQV3orZ5cDiADe4I1yyrvEhDEs1bcpgfV%2BknkwEdNIZdwgO1x1SkzjwNUNZUERjTG4Og%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b1ad8b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"4b9f8533f9a76f468036aed14975d37c","sha1":"aed210be4041c476d828bc377321e64df1311167","sha256":"ad2880b85232e8ad264787b9b260dab53fc17f7b5f611ac0842d3450875903be","sha512":"6c7f28783e7025bb872dc7bbadddead859be76d5c5ecd9c7f78f44bea6c4492749f01a909eae6bf7ca5dd2afd1d2582cb8b23ffdd31337428b605d10681fcef8","ssdeep":"","tlshash":"5921c5c10bdad845934f28b142629531c30771e0e95518eee5744c2a8e05f48823fbb3","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.904724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 26 Dec 2025 12:28:21 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bg0poJgrZSdPp2MrDH0Ly2XAtszuwJRdTyLs%2Bosw9VwzHMYWT10weUhpwr2oz2kP53iSCTGiwysKRnBdW1HbTcBoK7aAseMN3rcOTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncf-ray: 9b404d8b2adfb4f3-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T17:33:46.023529Z","times_seen":368207,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-QP2Y8PK8Y0\u0026gtm=45je5ca1h1v871231111z8855362328za20gzb855362328zd855362328\u0026_p=1766749222031\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1388804069.1766749223\u0026ul=en-us\u0026sr=1280x1024\u0026lps=1\u0026ir=1\u0026frm=0\u0026pscdl=noapi\u0026_eu=EA\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115616985~115938466~115938469~116184927~116184929~116251938~116251940\u0026sid=1766749222\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.spylix.com%2Fandroid-spy.html%3Fgad_source%3D1%26gad_campaignid%3D20225052932%26gclid%3DCj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026dt=Best%20Monitoring%20App%20for%20Android%3A%20Your%20Must-Have%20Android%20Monitoring%20Solution%20%7C%20Spylix\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1920","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:23.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-QP2Y8PK8Y0\u0026gtm=45je5ca1h1v871231111z8855362328za20gzb855362328zd855362328\u0026_p=1766749222031\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1388804069.1766749223\u0026ul=en-us\u0026sr=1280x1024\u0026lps=1\u0026ir=1\u0026frm=0\u0026pscdl=noapi\u0026_eu=EA\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115616985~115938466~115938469~116184927~116184929~116251938~116251940\u0026sid=1766749222\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.spylix.com%2Fandroid-spy.html%3Fgad_source%3D1%26gad_campaignid%3D20225052932%26gclid%3DCj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026dt=Best%20Monitoring%20App%20for%20Android%3A%20Your%20Must-Have%20Android%20Monitoring%20Solution%20%7C%20Spylix\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1920 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.spylix.com/\r\nOrigin: https://www.spylix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://www.spylix.com\r\ndate: Fri, 26 Dec 2025 11:40:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":269,"dns":0,"connect":21,"send":0,"wait":33,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/i-image.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/i-image.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1267\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-4f3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 26124\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M74a1%2FUlxJ3iguP%2BLcM0yyDN%2F6weSuD0jQ2u4w9hnoG0CHz2tOPYmsncTLmW1I89Pe8D1RKA7CrcW7qAgy4M%2FbZ8XaKN%2BwaEjaze6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b0acfb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 64, 8-bit/color RGBA, non-interlaced","md5":"de2db4dadfd827e2a89687eef30acd31","sha1":"e45a5811f69af310a34ea22cc899e26163458f95","sha256":"dc8c4f62517bcb6342cc90ccf2a7284918b079f46eaf79f85960d0604af1ecb6","sha512":"9cea295959334566fcb4e33cc9105ad2a16da24dc575bc4a11723a773cf0f9aa556b44ed32b4f28fbff5234c2240698771ed9552f03671386476e2558a94670a","ssdeep":"","tlshash":"1a21b7deede4ae45ae8f8db54111e6078c6101678d25c38d6962573c17b6699ee0403c","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.907354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/why23.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/why23.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 674\r\nlast-modified: Sat, 30 Jul 2022 07:50:53 GMT\r\netag: \"62e4e2dd-2a2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 606851\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WSQGau0izL5uJEoyItZepnEtc40h3Va6RShZLfzFGbCU6kBYvPlr4Ab0041FMGYa0r8hc7jenY7STbdm57bFHTnfTACjJ%2BUjnrhItQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b1adab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":674,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ee8114fea2296e604c148e519531d3c2","sha1":"96fde22115f4de6ee75a052544257e81aae2075a","sha256":"f5898d3771c34d42cb0f50dd4cb3e39faf767325dba5edd3c2fe9794d834f506","sha512":"04fed103a24ff21376536d6d0673e2393b506b68d0d7a74e3f4ef05d81516233482b2e8c136c95ce10309bfb6f8a655a6c798755182d4f03ddfa74764aafa108","ssdeep":"","tlshash":"280144fa9d6416405029cdac3162972f657adceac211ae188c03c0651901650d98e6e7","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.908829Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-693805005\u0026cx=c\u0026gtm=4e5ca1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:22.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=AW-693805005\u0026cx=c\u0026gtm=4e5ca1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 26 Dec 2025 11:40:22 GMT\r\nexpires: Fri, 26 Dec 2025 11:40:22 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 26 Dec 2025 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 132558\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":393494,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"758416aee92167b705a7431ac4927ae3","sha1":"597dc042188805a8cbb2d9a246aeb091c505343a","sha256":"9614c6811ed63db82b2cfe6483bdd2a6ed90b72d43fec873154200e8c4388764","sha512":"1ac048478f3cee5d02b281c12dfd26f9403b09694b54ca8e2ba8e40e6b7468750d4c55b51501c2c08cff27db71c142b387e8bb05bdd57ffe4e00c8978cae3aee","ssdeep":"6144:BIeJ+2bulKYXV1u99Yye5HDmHYmyBFzfnsyRuLjmWllxei4pN:ycbu7l1mcDnsy6SWsia","tlshash":"788429ce73c674269396a478403f118ba57b29e2b44ccc95f189cce42d74aaa4277f7c","first_seen":"2025-12-26T11:40:49.910427Z","last_seen":"2025-12-26T11:40:49.910427Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/step01.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/step01.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 6927\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-1b0f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 26124\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LjMzkATdiM%2BTDmjx%2B3zg6G8KVXLqHZJ%2FYuoMH6VPcU5xr9MHfB3h%2BZiGq%2FZ6hCgbiJEA6%2BCfBKTb3tYEQHt8Orq49huSb%2Bca5Dn6ww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b0aceb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6927,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"3ae5bc1845110b62299c5ca65e927953","sha1":"8f67290fd33debba6342ffeac625a24d865e86fc","sha256":"612f7be58fceb5eeca102776ee4994e8ca39258c54be737c23af56ef8f87cb5a","sha512":"d9cbf039db8f75b34a5510b42cd9771a860873d20537187c02cee24a167738d79b830ded732ae78b80484ae1c1df824f2f80eadaa564054966c80db2a9e8d2a3","ssdeep":"192:0S8TpRtjS0GwD2CIhJnSF3Y0e39BaKdY6GV962Rkx/0G:z8TpbRG53nSF3Yp3BdeXkx/H","tlshash":"05e1b1c32655fcbed14761c3c81448a68cb8ba2f974a301e3f92435d72ed71c5441cb5","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.91191Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/android-bimg02.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/android-bimg02.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 166891\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-28beb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nj%2Fr%2B5PVHXES82vK2B%2FI%2F7V1WYSbWw4hjfjpgWYbuTHRrey0IYViNyijngb0oZkPsSq9YekOyTn22CcvPbWIP%2BhRMWuuERVucw4ONw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b1ad7b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166891,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 570 x 616, 8-bit/color RGBA, non-interlaced","md5":"df4e463934887873ee6e9351638621dd","sha1":"905d03d4e91f41a8179da9e99674fcaa6fda04cd","sha256":"7dfd6f0954eae494ea28b7a9ebc7e3f71106017ff49f6799bb1dc304af1c7d86","sha512":"034eb8e62de4ebd100d4e209008782d69a03d2d5023e347e59505682bc83189c2b5327b38f535fe23a76988e10a0d4a9ce37b6d7b86b3a20e5a59a97ac531982","ssdeep":"3072:qOfCUIFrDwrIjgdbrNxQs1lK3sYUPDfiPSID71fPxFHuL5+5mipWrlVosuG:q2CHFwrIjabrn9HLYMiPSIDpPxA+4iIl","tlshash":"79f323cc44bd3320865f59270f1e8359efa5b2eb0672a300a2cc92c14a296d79cf756f","first_seen":"2025-12-26T11:40:49.9136Z","last_seen":"2025-12-26T11:40:49.9136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":352,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/swiper@8.4.7/swiper-bundle.min.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /swiper@8.4.7/swiper-bundle.min.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.spylix.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncf-ray: 9b404d8bff465a0f-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 628536\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 26 Dec 2026 11:40:21 GMT\r\nlast-modified: Wed, 17 Sep 2025 00:17:20 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:Mi0V2Z77eSyUGlIC+o/H7p6TKEcic4P/lgUWMzigjqw=:\r\nfly-request-id: 01K5AGGVW6F17XM3XR0C9YRBTE-waw\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":16493,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16237)","md5":"04720c60bc020cbba92785dd4029f7d2","sha1":"af008e8793ba75c346360e94e96e3cda314ce27f","sha256":"322d15d99efb792c941a5202fa8fc7ee9e932847227383ff9605163338a08eac","sha512":"37622c5ae2ac0586221cd61d684b8ae1e691274a277d41be71d66296775868c12150642afcc72c154ef9ab737e8db2543579ba3be2b9d8346b2be6d2a411a3d3","ssdeep":"192:i2mUJbiKneTT4bHZ+SKqnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:iTUbeTMbHZ+knh2AVfHfA4XYz","tlshash":"f57223681340282753274f374b71cbb9ddb444d24b93896e91c0ee88d7b6cb9236f6e9","first_seen":"2023-04-05T08:09:54Z","last_seen":"2026-06-13T14:28:08.228971Z","times_seen":11587,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/bat.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:22.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 16 Dec 2025 22:38:02 GMT","end":"Sun, 14 Jun 2026 22:38:02 GMT"},"fingerprint":{"sha1":"D1:12:1E:C8:CC:CA:91:1F:2E:2C:96:3D:8A:DF:DB:ED:79:E2:74:3A","sha256":"D0:AC:6B:45:B9:2C:EC:35:CC:09:B3:CB:4F:77:11:93:75:BF:B7:D1:3B:3D:31:C6:7F:67:5D:38:EB:99:98:4A"}}},"request":{"raw":"GET /bat.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private,max-age=1800\r\ncontent-length: 15132\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 25 Nov 2025 17:45:13 GMT\r\naccept-ranges: bytes\r\netag: \"801a5640335edc1:0\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 35904A163970404B9001707E76305AFF Ref B: OSL231050215062 Ref C: 2025-12-26T11:40:22Z\r\ndate: Fri, 26 Dec 2025 11:40:22 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54195), with CRLF line terminators","md5":"1530465e2879fc93672deb7c4c276e3c","sha1":"4b64864aff54b29d7c644d458347cef6d4367df6","sha256":"567e72c15064f42d211a6a03b4675b66e237b2b159079dedf732421f13fdbf41","sha512":"fb5c93a19811fd4a364820f6c00a1f3a1965d2b0d25d04f78e6d85830f15744fb2f04e4f2da72d63514cbaa5182207ac27d4e3f12c845954eb8cadf83d60e2d8","ssdeep":"768:YcMOThici/2NIh+Qm3mT1OoLQBDWf6yPGV/Oj7Duy3:TMOTkci8/3ULMWf6yPGh4j","tlshash":"b7330a8333509a7645f9419c786a2903a336570e30be70ec7a8cf8e5945de4b7237b7a","first_seen":"2025-11-25T22:32:41.235324Z","last_seen":"2026-06-06T11:35:15.650571Z","times_seen":42675,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":10,"dns":16,"connect":1,"send":0,"wait":33,"receive":1,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/icon-geofencing.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/icon-geofencing.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1379\r\nlast-modified: Sat, 30 Jul 2022 07:50:53 GMT\r\netag: \"62e4e2dd-563\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3m4v%2Bj9QIaKzH1jY3gUwVkhEZDEI%2BVIZKgMkKOrO3Tpuq3fNNLQ%2BiL1XdvCSFhEYuRS4OSK60Nsghq86sY1ac8ZVuR1eojyt%2Bw0IQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b0ac9b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1379,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced","md5":"e5591d4ee1e84c636f4a4a8a1edabd26","sha1":"b5e685fcbeb8c526d3c9f244ad4bc78bb70cd1dd","sha256":"7f34461aaabf64f3bb41fe5a0e846a5713188aa9b86e02c683fe6397dcfe17c6","sha512":"3df79e310f1d560619ddb121c725d123bc1af8b46b35c64fabeb58a7bbfabd79895bfe3e64269166faf9667678ee9a0d061c7159e5ae4cb5356e933b54ca0d20","ssdeep":"","tlshash":"e4210bd79764f2db091d8e21a11deb50f145352058680a4fac4f954493b0e4603af293","first_seen":"2025-12-26T11:40:49.916763Z","last_seen":"2025-12-26T11:40:49.916763Z","times_seen":1,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/why03.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/why03.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1014\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\npriority: u=4,i=?0\r\netag: \"62e4e2dc-3f6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1427698\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RjFONPNAwvUaFjzM%2BTKDFPKkyZmUMiK9B6342O91tM1xQ1bR83x7NEi%2BIYFn8CLaP4glrzQR6YjZ1J%2FwDi%2Fqb58Qm%2FnyfQsFdi4W9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b1adbb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ccb9db5590d93d82c2e017ce6dd765e5","sha1":"b3a6c55ed57ebab6d1d446e6197be5ec55973931","sha256":"51235f33a9294cd814de14082e7c508aea0e46edc3978c2613785e6022da1a1b","sha512":"cb21c5d98cf1cb5acaa3e819e5d0d9f835812148ebd72697fb087d78d4d702fa684d4f0447cad1383dbb5edf27db059741a9adb2859482d1f0edac4a23953ed4","ssdeep":"","tlshash":"0f11c8e19354a4356cbd095073953ae32fd330e7b3d8608a0a30e8b826100d129bb293","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.918243Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/assets/common.js?v=2","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /assets/common.js?v=2 HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Sep 2024 06:57:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66fa4bc3-a4bc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 656324\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HuCVZNgXZAxXz2VyRopiM%2FBPXHpPA%2BtA2mPYvlGdQeFidW1k0RVq8ZHIdirOZxVe1FeOHMUWe%2BLQdTTt40gx%2BpIXdEcIuX2eHpC3DA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b404d8b2ae3b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42172,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (42126), with no line terminators","md5":"f3950b0496067697ff4f7206ad2be0d3","sha1":"cafb2e83d9702ced051be5858233818d44186878","sha256":"52f0aeafbc66d438e8f8f3836556259817d79beaed228fd8808d410ebc71ae79","sha512":"4cfa39f85d090e9d46da7a0d0af93843410ca46bcad159100242f61fd4009e3aab8218c1c121a819d7bf02842d23ed347d37ae05e4b0d9ff91776b43065e2892","ssdeep":"768:NjmK6BeBU/VG0rju9GDTvn9FqZccB/eMkbA3ohWEtjh46nT8Ozrvu1wxXVem+I1J:5MBQU9Rrju9mwNGxSd2JWa","tlshash":"6113428563a064811b871e3f2b6e90f3e7b704c526c68eabcbc4a434249d627edd35f1","first_seen":"2025-12-26T11:40:49.919672Z","last_seen":"2025-12-26T11:40:49.919672Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026dl=https%3A%2F%2Fwww.spylix.com%2Fandroid-spy.html\u0026scrsrc=www.googletagmanager.com\u0026gad_source=1\u0026gad_source_src=2\u0026lps=1\u0026rnd=426675117.1766749222\u0026dt=Best%20Monitoring%20App%20for%20Android%3A%20Your%20Must-Have%20Android%20Monitoring%20Solution%20%7C%20Spylix\u0026auid=1315905626.1766749222\u0026gclaw=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026navt=n\u0026npa=1\u0026gtm=45He5ca1h1v855362328za200zd855362328xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026tft=1766749222453\u0026tfd=1428\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:23.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026dl=https%3A%2F%2Fwww.spylix.com%2Fandroid-spy.html\u0026scrsrc=www.googletagmanager.com\u0026gad_source=1\u0026gad_source_src=2\u0026lps=1\u0026rnd=426675117.1766749222\u0026dt=Best%20Monitoring%20App%20for%20Android%3A%20Your%20Must-Have%20Android%20Monitoring%20Solution%20%7C%20Spylix\u0026auid=1315905626.1766749222\u0026gclaw=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026navt=n\u0026npa=1\u0026gtm=45He5ca1h1v855362328za200zd855362328xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026tft=1766749222453\u0026tfd=1428\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain\r\ndate: Fri, 26 Dec 2025 11:40:23 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/i-whatsapp.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/i-whatsapp.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1434\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-59a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 26124\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2F54YYszRfXOvYfgwylzlhMGK3xn%2BZeOHmgMNNiuNw1kH%2F92CkqZIwciQ3ag6wGNGhQ47gVjcRAvr6dpejs%2BTyWIJLtRzs%2FYBpVRTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8afac8b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 64, 8-bit/color RGBA, non-interlaced","md5":"ee250b2499ddc5679780ffde84732b0d","sha1":"1a16b0a36af3c872deb7d247aa26c063f2a1bdc6","sha256":"5d7044b4b415287672d81b0aa7d8be1179e2a324a214e0462d86b595a8f237bf","sha512":"ac4198c754dc8ee4860faa68c0dd373afe2dcfa8c4f5e25633c2be052a03932bf74e7871613fa328981dbe50da2fc632f0fbad012f1e9e55870d51cee21c2099","ssdeep":"","tlshash":"87211bc47310e570db490f9b911e2839dd35885e45871d64834815abfd15272f2b7155","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.921108Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/set_partitioned_cookie?frm=0\u0026en=page_view\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026url=https%3A%2F%2Fwww.spylix.com%2Fandroid-spy.html\u0026scrsrc=www.googletagmanager.com\u0026gad_source=1\u0026gad_source_src=2\u0026lps=1\u0026rnd=426675117.1766749222\u0026dt=Best%20Monitoring%20App%20for%20Android%3A%20Your%20Must-Have%20Android%20Monitoring%20Solution%20%7C%20Spylix\u0026auid=1315905626.1766749222\u0026gclaw=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026navt=n\u0026npa=1\u0026gtm=45He5ca1h1v855362328za200zd855362328xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026tft=1766749222453\u0026tfd=1428\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:22.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:31 GMT","end":"Wed, 25 Feb 2026 15:57:30 GMT"},"fingerprint":{"sha1":"68:80:26:07:1C:4F:AC:C8:FF:32:F4:DD:86:41:D6:6E:85:27:90:D4","sha256":"6D:27:81:39:F2:6D:26:4E:B8:CE:4F:0B:02:95:B6:5D:C4:E2:58:C9:A9:A0:80:1D:02:70:91:FB:E9:98:E6:8B"}}},"request":{"raw":"GET /pagead/set_partitioned_cookie?frm=0\u0026en=page_view\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026url=https%3A%2F%2Fwww.spylix.com%2Fandroid-spy.html\u0026scrsrc=www.googletagmanager.com\u0026gad_source=1\u0026gad_source_src=2\u0026lps=1\u0026rnd=426675117.1766749222\u0026dt=Best%20Monitoring%20App%20for%20Android%3A%20Your%20Must-Have%20Android%20Monitoring%20Solution%20%7C%20Spylix\u0026auid=1315905626.1766749222\u0026gclaw=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026navt=n\u0026npa=1\u0026gtm=45He5ca1h1v855362328za200zd855362328xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026tft=1766749222453\u0026tfd=1428\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.spylix.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Fri, 26 Dec 2025 11:40:22 GMT\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nset-cookie: GCL_AW_P=GCL.1766749222.Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB; expires=Thu, 26-Mar-2026 11:40:22 GMT; path=/; domain=google.com; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nexpires: Fri, 26 Dec 2025 11:40:22 GMT\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":177,"dns":0,"connect":17,"send":0,"wait":31,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.net/actionp/0?ti=187000103\u0026tm=gtm002\u0026Ver=2\u0026mid=e432a0ac-eeda-4bbb-a75b-96fa328bbd53\u0026bo=1\u0026evt=consent\u0026src=enforced\u0026cdb=AQAY\u0026asc=D","fqdn":"bat.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:23.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bat.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 21 Oct 2025 02:00:33 GMT","end":"Sun, 19 Apr 2026 02:00:33 GMT"},"fingerprint":{"sha1":"62:7A:BC:C4:E3:80:17:91:83:49:E3:83:45:24:DB:AE:BF:0B:EB:1F","sha256":"49:47:A8:23:DF:CE:A3:73:C0:ED:8D:5E:33:E9:AB:A1:79:C3:B9:92:74:C0:63:B4:37:11:CF:FB:2E:39:9D:CF"}}},"request":{"raw":"POST /actionp/0?ti=187000103\u0026tm=gtm002\u0026Ver=2\u0026mid=e432a0ac-eeda-4bbb-a75b-96fa328bbd53\u0026bo=1\u0026evt=consent\u0026src=enforced\u0026cdb=AQAY\u0026asc=D HTTP/1.1\r\nHost: bat.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.spylix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\naccess-control-allow-origin: *\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: B5D8EF37FBFB464F899A10B7F9182183 Ref B: OSL231050214040 Ref C: 2025-12-26T11:40:23Z\r\ndate: Fri, 26 Dec 2025 11:40:22 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":19,"dns":1,"connect":2,"send":0,"wait":29,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/logo-spylix.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/logo-spylix.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 4495\r\nlast-modified: Sat, 30 Jul 2022 07:50:53 GMT\r\netag: \"62e4e2dd-118f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 552624\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wX2dWMGQQYoAbXf9QyZYfEZJ%2BYxy4Xic2ROwCS5Gli8mILKfv7xgt%2FZs67WlXJE55qTWk0mDRQ91uvxJ8XqmTvrfv25l%2FlFYawFXDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b2ae1b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4495,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 64, 8-bit/color RGBA, non-interlaced","md5":"b9bef6fe7ffe911a6ac139ce1668f571","sha1":"3241de4b4a92b5d8a6a3b13bc300eceaf9532e4f","sha256":"d79c73e80ff1834dfb9242ee8973c44109e675ac37f4e9711531d98fb2528cd4","sha512":"3fd3592ab5561467b965537826ffc26644237091f945df844e4cd5fb06569435eff4a03c6a3fe2c992f44a4911aad722cc6e50282cd5123089d5c275fae305be","ssdeep":"96:5si5Smiala23m03/kVpfQUkwe6dIjpl3F0VPEWGX1:qi8Bwr3m03/QpBkwe6dIT10V8WGX1","tlshash":"a5916b8370cce229b81781b3c91d4096698e21bd702603cabe5b148c0a4249eb27dfba","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.922429Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-701094853\u0026cx=c\u0026gtm=4e5ca1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:22.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=AW-701094853\u0026cx=c\u0026gtm=4e5ca1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 26 Dec 2025 11:40:22 GMT\r\nexpires: Fri, 26 Dec 2025 11:40:22 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 26 Dec 2025 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 132567\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":393512,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"09ff7dc9b487313027b4158df77cac1b","sha1":"3ee038ebff1f4f3b354496d0d3859fcf385bab6f","sha256":"5b209ccbd6b3cbd6066c738c6095076eecb0779701204772709975635ec652fd","sha512":"e105933c0da853d70c3429929b76333e2fdf6e606aea7aacb4c2daa779669eead719ef728c12e36bacb732a14861c3d074ca49025e10ead7de726624f32ed697","ssdeep":"6144:EIeJF2bulKYXV1u99Yye5HDmHYmyBFzfnsyRuLjmWllxei4pN:1vbu7l1mcDnsy6SWsia","tlshash":"cd8429ce73c674269396a478403f118ba57b29e2b44ccc95f189cce42d74aaa4277f7c","first_seen":"2025-12-26T11:40:49.923749Z","last_seen":"2025-12-26T11:40:49.923749Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026dl=https%3A%2F%2Fwww.spylix.com%2Fandroid-spy.html\u0026scrsrc=www.googletagmanager.com\u0026gad_source=1\u0026gad_source_src=2\u0026lps=1\u0026rnd=426675117.1766749222\u0026dt=Best%20Monitoring%20App%20for%20Android%3A%20Your%20Must-Have%20Android%20Monitoring%20Solution%20%7C%20Spylix\u0026auid=1315905626.1766749222\u0026gclaw=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026navt=n\u0026npa=1\u0026gtm=45He5ca1h1v855362328za200zd855362328xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026tft=1766749222453\u0026tfd=1428\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:22.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:31 GMT","end":"Wed, 25 Feb 2026 15:57:30 GMT"},"fingerprint":{"sha1":"68:80:26:07:1C:4F:AC:C8:FF:32:F4:DD:86:41:D6:6E:85:27:90:D4","sha256":"6D:27:81:39:F2:6D:26:4E:B8:CE:4F:0B:02:95:B6:5D:C4:E2:58:C9:A9:A0:80:1D:02:70:91:FB:E9:98:E6:8B"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026dl=https%3A%2F%2Fwww.spylix.com%2Fandroid-spy.html\u0026scrsrc=www.googletagmanager.com\u0026gad_source=1\u0026gad_source_src=2\u0026lps=1\u0026rnd=426675117.1766749222\u0026dt=Best%20Monitoring%20App%20for%20Android%3A%20Your%20Must-Have%20Android%20Monitoring%20Solution%20%7C%20Spylix\u0026auid=1315905626.1766749222\u0026gclaw=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\u0026navt=n\u0026npa=1\u0026gtm=45He5ca1h1v855362328za200zd855362328xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116251938~116251940\u0026tft=1766749222453\u0026tfd=1428\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.spylix.com/\r\nOrigin: https://www.spylix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 11:40:22 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.spylix.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":210,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/i-right-arrow.svg","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/i-right-arrow.svg HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 30 Jul 2022 07:50:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"62e4e2dd-207\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CBZGrFLL1bsIvpOSjSgehEq0fj8ePLf%2Bc3z1fGU1cC%2B%2F%2FLhm%2FAbPSmMXgMJ9T79j6zff%2BOREVTbaHuXSXxz%2BoIFn%2FA%2BpqHo7pfKWYA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b404d8afac5b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":519,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"787a1dc59d761f344e465197bb5efcc6","sha1":"5395faaec21c57d8a838f15c2eb47972f6cc5911","sha256":"92e21716b177182a03ea0bdf404ac6474ef103245d91e6f389519006b2fe4675","sha512":"90ba594815d340331bdc177a318d00272e30574ba8d68ab7754232c6829631f5be9d2daba01f3572416d377f3c9a2c07fed5fd6cf6a8e55ef36d6e4cdc867318","ssdeep":"","tlshash":"30f0c0ef8c4145d0fc0bc7e48e18c1126c5739b3673d46582271c900b30122d781c9d4","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.925004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/step-arrow-1.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/step-arrow-1.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1652\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-674\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 26124\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YdUX1b%2FXkThORGf3tPFKa4yVHZ3z%2FNm4AqYR2mWBti6xb9gLMmER%2B98bC8iz%2BDVYd1qhsKntpx1zng42pajsleQ7InvGZEbQ50mJsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b0ad0b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 317 x 32, 8-bit/color RGBA, non-interlaced","md5":"c5d8834b4dc2f415b4eeb676ed07eb44","sha1":"eb96496fac4fa5f86e5a4d8c7ff7dc31c3faf451","sha256":"1bfaa1bf4f936496cc0f61bcc4db9489eda76bbba038fa418c3241d9b87e241d","sha512":"71c6db47213b225e264d068e1ea69fbe57249b2ddd63b720b75d8901552ef64f181cd23d3cb714ad575601f726f4b9a2c630659bbdca321fb70e5b21080b2100","ssdeep":"","tlshash":"b931fac285ac04eaf938d8d063b0c7c01eda4061b1a21966f8bea981275d96cf24bed5","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.926206Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:22.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.spylix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Dec 2025 09:56:55 GMT\r\nexpires: Fri, 25 Dec 2026 09:56:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 92607\r\nlast-modified: Mon, 15 Sep 2025 16:35:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"8d91ec1ca2d8b56640a47117e313a3e9","sha1":"a9e9bafe64666f4595051a0e895b47a5fa39e67e","sha256":"78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb","sha512":"bd3a864bd45f39ee83ee79ba4469a156ad8ff3dd33d8aae11e3edd97b29c2ef7f610ac851726041251e34b0108f618a2f945038bf6c0de9a7982e0d643cdfcfb","ssdeep":"192:S5upwnqrBHPLA3J73KAQDPh50uFdXrnpjDS7LjvQnRb:S5ELrBvLA3J76AIPhi+vXwzQnRb","tlshash":"68f19de0200937e4f73d5feee6276b7f2e2edb05e25305aa7556014c69de39310d21a2","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-06-13T17:35:59.671366Z","times_seen":73378,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":85,"dns":2,"connect":7,"send":0,"wait":22,"receive":2,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/assets/global.css","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /assets/global.css HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 11 Dec 2023 10:11:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6576e034-24f30\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 552624\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2IjGMegxIYPVta4hLUi6MIdV9ouEa5LSbPsez%2FyY8DKhGnokOFLQTa9cgI8G%2B42x3abZ2brmWsNqXgukF4GCu3Bo3X459WqQxZTWNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b404d8afac0b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151344,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52171)","md5":"205db9c1e3379c5978bc656cad9e2bd1","sha1":"7d396952f69508bea05100bf87c564b9d9d3570d","sha256":"354c969ead01c03200b8d5b8bf8b076541e22fbff3dc7d87650b32d95fd43305","sha512":"f00c689344f11b1cf7b7c86141c063b1c3d8190475dbf22fffcfc2c332322c510ed59a3b571e99e1b7171f1cc993e495844495557347af4eb1c434acf528239e","ssdeep":"1536:sKOSZGJVc8yaDp0kuFxAu1hQ8Yi2i8em3SY2qpFxFyDqeV9VJcBsym676bpmCTzi:VZGJVc8yaDp0kuLnQ8Ylmm3SY23Fotb","tlshash":"ece3783c4364e2fc684ec7b4df5da978910c74c6f6fea358a116422452d61cde8aa8fc","first_seen":"2025-12-26T11:40:49.928231Z","last_seen":"2025-12-26T11:40:49.928231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/ic-android.svg","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/ic-android.svg HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 30 Jul 2022 07:50:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"62e4e2dd-78e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUMQWVGIknoVDC1cs%2FxzJLa%2BTj5Df%2B1Cqa0c0R5d%2FC%2FLf6u%2F%2F69L%2FrEh6K5MBYxNp90PM1trRFjczpfur2dcUP94TuKKhyu7j2eEIg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b404d8afac3b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1934,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"97cd70c8faa770da0755ee4c4a50d3e9","sha1":"47167d1c725129bc677eca5866fdf6ca019fab21","sha256":"0bb6798e927d844b28166907264c36c89420d98c01edf0318153bc2c30f1beef","sha512":"2a58690269e53c4e0c98bd44dc05e9a653ae4fd84b32b8b9cc6467ee4a875df5765d0925e085d14fe41c837644c43aa31986ab0125c19bdb8cf8d8d7b6a84182","ssdeep":"","tlshash":"554146f657e4b7d080c6db41e635ed20ba91b9bf6ea4c6dbc095879195821900d8fe40","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.929609Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/i-keylogger.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/i-keylogger.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 768\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-300\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 26124\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hhyColuPpzAfC4LykapXAadmW%2FvbgySpWG4GcdIsNE0Vh8kZTv2j%2Fb6KMT0RNVQKRf%2BlknGPXFCkJ3GEGOX98tSIT%2BpYQt7Oaoi94w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b0accb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":768,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 64, 8-bit/color RGBA, non-interlaced","md5":"99facec284686604f41c64e213b63d1f","sha1":"3f66151392502b86c6c88669f59598218f84f929","sha256":"a7817355b8c76ff7636bb614b4132aa60f956e14c469fd665369d94c0166f0fb","sha512":"22f909f764871e03a6dab8c117319c04262a9a37dba946a065469662da6864bca72c289cc3dc381e665a94e80f8c1f0ac948480a79ecceb133daddc31145b806","ssdeep":"","tlshash":"2f0175de754cc5ee6c4e893962c98b3cf8fd4f1ac490ab414c941d618102a21001d311","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.930914Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/i-grid.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/i-grid.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 706\r\nlast-modified: Sat, 30 Jul 2022 07:50:52 GMT\r\netag: \"62e4e2dc-2c2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 18693\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H62wl16epVFBA4tHGX4EgnutNxVLtpZyaa6bqgamEQuAr87vfEr8notDohfV2tdsnOkj0L6ynYzNR68qBbgqRT2J2tqOuWbaqxzR0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b0acdb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 64, 8-bit/color RGBA, non-interlaced","md5":"056c3228a0884fe3a40c09b6cc3bf88e","sha1":"d1eadd0923557767ee9175b9ca3d60c464a3eab9","sha256":"fe8bea23a8451988cdb52a58285e53f951df17ee4f0f9ad2cc4c3ee9a56a82b9","sha512":"b9d051c5b7a2560a1fe3e32b88c2865743531721238c43cbca2baeda546f5cf0e9d77e835c89dedaf9bf6f85af3594cb0e55a30e772c399e268a53c5253a722e","ssdeep":"","tlshash":"220194d4a3edbe8bf9cbc7327dca1a0025ef891a0e4201e8b0703601a55477aa3dc052","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.932256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/why22.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/why22.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1867\r\nlast-modified: Sat, 30 Jul 2022 07:50:53 GMT\r\netag: \"62e4e2dd-74b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 606851\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iZU8lR7gCnbimz8sT774giOCTPXf5K0P1Crt%2BApkqXtnh1PBprumgz6R%2FEcuD%2B3dAI5IUv2F4su%2F5ZCxbLtRJxyjl6mE%2BBh52QmIBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d8b1ad9b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1867,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 64, 8-bit/color RGBA, non-interlaced","md5":"881ad092092b3407ab46c8aa023cfad0","sha1":"a075af353c71cd201c81cf228a783a0a6e705a38","sha256":"f6391869a95c802e95731261d2950b0d703b8c7bae42c8e0ad6cfc4e9296573c","sha512":"292caee826e91756746dec3ff8b8a5b54de49c8edb0ec1aac3b18d426057005201c370b1ca77d8b897d8eb5084259f7235f7d2238610f1ed148d9194776787cf","ssdeep":"","tlshash":"1c3117f2cb58cdf106868faaa06c1684ec33ed43401fc461e6243ca13f464bd83ead65","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.933746Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/favicon.png","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:22.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 1930\r\nlast-modified: Sun, 31 Jul 2022 09:11:18 GMT\r\netag: \"62e64736-78a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 606875\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJEDGGkG%2Fkx%2FkJyVV0Zt2kEbWLtalX3EyqdlW%2BTSPgaQPdu2E8iVSjUER25QxR2RaiLRCmCxsERmrb%2FvjrR%2B5LxEUreYFAZ1EIp6dA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b404d902b43b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1930,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"a682d73a1b17e4a90a33d1dcb95c05ea","sha1":"d25e5cb1d5b8ecb8dcac64ffbf080c6743e77ef3","sha256":"1257cd5b7d7590f2aec7f1ccfc433be0b0cfe69f0637c2c18a9a412aa6ed3263","sha512":"f7476ae1ba88767bd45663b1f61ad252a3e26a8035887c6c63a090452731b362130aea29ddc6c730ac2d5c0528f68c66f7965c4acc7d06055591f006f567426d","ssdeep":"","tlshash":"be41c60ebe5114408500fac20cf66522ee534841e2d0e038699f9caf45a52b83dbcdcb","first_seen":"2023-09-12T18:28:41Z","last_seen":"2025-12-26T11:40:49.93515Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 26 Dec 2025 11:40:21 GMT\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10793,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"80df91dcfc8560910aca9bdd91a1e7d0","sha1":"2949de02fc38469258987e9b847a70a9cff1a21c","sha256":"0552ee50f635535685ba2713af81fa081791d7705baa9cdb3c5d1f463aa0a228","sha512":"65cbf1a5ff0d2e099211a39ed5128c8a95587b42dc854f30ffec1fc82e658911808709e5300319b495ec69bed73670e5c91404feb94fda4e7315b9b79ec62402","ssdeep":"192:+pspOlpXHaedhHdPgKQcXr3lVwa3RzJ/apsqiazk:+mkX","tlshash":"aa22add1087be114ab835cc123ce7d36ee1e9255b850e5786bfd0c98adabc254372b2d","first_seen":"2025-09-17T11:27:36.910597Z","last_seen":"2026-06-13T15:33:41.452012Z","times_seen":6598,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":211,"dns":1,"connect":20,"send":0,"wait":33,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/images/i-right-arrow-p.svg","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /images/i-right-arrow-p.svg HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 30 Jul 2022 07:50:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"62e4e2dd-207\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mb4KBPK%2BWsB%2FYdxDXOqABlWr%2BgfaWqqfMdfK0tNNtUYAE8ujYRlfCNxRooilR7v1BWzgfQtNQajacRD3LJsCczChGZchAIRqsERAtg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b404d8b1adeb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":519,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f1d96f449ac921e856a5a468302e143","sha1":"c2b2436aaf9fb4dde40104c6a53102d4cada8290","sha256":"3ced1b9bc3a4b3e13a9e96630a779e7b9db140cf97e4c78c91f818f77940e60b","sha512":"f157dce70d47050b6d67857ae6ea0e8171ec4728d6f4a07fc12832686dcda7051b11f4e78e138966df35dd59b596b2ab09e7a83939e900d1f18dfcf3c13e14bc","ssdeep":"","tlshash":"daf0c0ef8d4189d0fc0bc7e48e28c1126c5339b3673d46582271c900b30122e681c9d4","first_seen":"2025-12-26T11:40:49.937306Z","last_seen":"2025-12-26T11:40:49.937306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.spylix.com/assets/bootstrap.css","fqdn":"www.spylix.com","domain":"spylix.com","tld":"com"},"ip":{"addr":"172.67.196.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB","date":"2025-12-26T11:40:21.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spylix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 00:50:01 GMT","end":"Thu, 12 Feb 2026 01:48:17 GMT"},"fingerprint":{"sha1":"52:CA:A1:92:8E:C9:A9:A3:F4:3F:96:A7:11:D0:3F:E3:91:5D:A4:D5","sha256":"CE:3A:8C:4C:55:0B:AF:8B:10:5D:EB:C1:38:75:50:F9:8F:8B:31:E9:4D:99:AA:57:CC:C4:07:83:27:88:62:00"}}},"request":{"raw":"GET /assets/bootstrap.css HTTP/1.1\r\nHost: www.spylix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.spylix.com/android-spy.html?gad_source=1\u0026gad_campaignid=20225052932\u0026gclid=Cj0KCQiAgbnKBhDgARIsAGCDdldwNBy736U-_o7PbP81oIEVKRgfWQPL4qVsC16cDKU9H4f5E8Ms2UQaAnPLEALw_wcB\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Dec 2025 11:40:21 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Mon, 11 Dec 2023 10:10:53 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 2980674\r\ncf-cache-status: HIT\r\netag: W/\"6576e02d-32ddb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dt4ROmEe%2FMOf01P7rpjz9ZEVHH9Zwx%2BtITijTncLElBB0zLXTLrB1zowyey4uUbKZB4zdXiOYXk6RnfOBTlXl%2BukxfIhQmcsCaIDQg%3D%3D\"}]}\r\ncf-ray: 9b404d8afabfb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208347,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (560)","md5":"f0855a857310b759156b9ff11b0f724f","sha1":"45b460892c5f56a1b25229f64177739c527f15a0","sha256":"fddd5f685020db7fd7b8e20b92d7ed29c264255cd63510c794fbac2cbb6c50a0","sha512":"e8e1d7cf1b4d75473235f42b2850edd859169f4ed62b09a6b5d0dd7240f751ebf61f31146fecf8259633cf7d8b86836ca5b247f208c68da77358917ed944e9b5","ssdeep":"1536:2WwVPUPhcLkHIqRhipr6dHvXF7AC2LIQVUl+ybTpdvZKOl9IL5Fb8d/ALfLNL0:2ecLj8d/ALfLNL0","tlshash":"3914319dfdf118083457856864dbbbf97b7e4086d60ece7ab5e23264cf493c14c62a88","first_seen":"2025-12-26T11:40:49.93851Z","last_seen":"2025-12-26T11:40:49.93851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"www.spylix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}