{"report_id":"d0bc4104-1006-453f-99ea-ddd026c70844","version":6,"status":"done","tags":[],"date":"2025-10-26T19:26:54Z","url":{"schema":"http","addr":"capchashield.com/","fqdn":"capchashield.com","domain":"capchashield.com","tld":"com"},"ip":{"addr":"104.21.33.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"capchashield.com/","fqdn":"capchashield.com","domain":"capchashield.com","tld":"com"},"title":"News from India and Arabic Countries","dom":{"size":100842,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8939f133bde3b20a27c4492315232c3d","sha1":"9eaae5328641748e137ee014a84a248587370307","sha256":"a97fadb5581edba763db18ecb9679897aafa5517f087422714fcf0e5ad037477","sha512":"434d701ee34ec8b0e163c2299a1bd7ccf83ec57db256338b7c0449417e3f30cae82f4cf6cefce9f317d247f60c12f933440f78bc6ec3d12f3f2c339f6a24bcc2","ssdeep":"768:nrufuJOXgSuMuTuGuDKGZ0M2L4VjaR7VAaSv:mgiKGZ0M2L4VjaR7XI","tlshash":"a2a36b796ae202802137ca1883df4e795778e423151abdefb2c758cb8f86fd896d5107","dom_hash":"domhash0abf3c6f1bccaf7fb938cc4694c69f45","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"capchashield.com/","fqdn":"capchashield.com","domain":"capchashield.com","tld":"com"},"ip":{"addr":"104.21.33.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-30T19:26:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":30}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"capchashield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-26","alert":"Phishing Block","trigger":"pl25818938.effectiveratecpm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"uncannydaytime.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"uncannydaytime.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25825165.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25825165.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25825165.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25825165.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25825165.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-26","alert":"Phishing Block","trigger":"pl25825165.effectiveratecpm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"extendedcontaminaterigorous.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-10-13","domain_rank":0,"first_seen":"2025-10-26T09:30:11.198147Z","last_seen":"2025-10-26T09:30:11.198147Z","alert_count":22,"request_count":11,"received_data":223756,"sent_data":15749,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-10-20T04:47:08.492261Z","alert_count":20,"request_count":10,"received_data":349527,"sent_data":4636,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"torchfriendlypay.com","ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-09-01","domain_rank":191479,"first_seen":"2025-07-30T13:31:49.539518Z","last_seen":"2025-10-20T05:03:43.898332Z","alert_count":45,"request_count":15,"received_data":24539,"sent_data":15428,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pl25818938.effectiveratecpm.com","ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-02-07","domain_rank":0,"first_seen":"2025-05-09T11:45:36.632585Z","last_seen":"2025-10-15T11:24:48.08797Z","alert_count":12,"request_count":2,"received_data":88322,"sent_data":926,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-10-22T11:47:06.652719Z","alert_count":2,"request_count":1,"received_data":377,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"uncannydaytime.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-10-10","domain_rank":0,"first_seen":"2025-10-24T09:08:22.265214Z","last_seen":"2025-10-24T09:08:22.265214Z","alert_count":2,"request_count":1,"received_data":517,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":21970,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2025-10-19T22:36:20.087168Z","alert_count":0,"request_count":2,"received_data":222247,"sent_data":918,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"3.123.64.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-10-19T22:41:49.621416Z","alert_count":0,"request_count":2,"received_data":850,"sent_data":910,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-10-22T01:37:00.143791Z","alert_count":6,"request_count":3,"received_data":1590,"sent_data":2304,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-19T22:12:30.612025Z","alert_count":0,"request_count":6,"received_data":206338,"sent_data":3310,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-10-19T22:16:58.186948Z","alert_count":0,"request_count":1,"received_data":72971,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-19T22:16:36.069876Z","alert_count":0,"request_count":1,"received_data":19663,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-10-20T04:47:08.500749Z","alert_count":2,"request_count":2,"received_data":5134,"sent_data":996,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"pl25825165.effectiveratecpm.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-02-07","domain_rank":0,"first_seen":"2025-05-09T11:45:36.635476Z","last_seen":"2025-10-15T11:24:47.331374Z","alert_count":6,"request_count":1,"received_data":85838,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"capchashield.com","ip":{"addr":"104.21.33.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-14","domain_rank":6486074,"first_seen":"2025-06-07T23:42:51.530488Z","last_seen":"2025-06-07T23:42:51.530488Z","alert_count":2,"request_count":2,"received_data":68912,"sent_data":1397,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Bootstrap:4.5.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Popper:2.9.3","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"BootstrapCDN:4.5.2","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-10-22T06:30:03.608659Z","alert_count":9,"request_count":3,"received_data":257889,"sent_data":1242,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-10-19T22:41:48.814217Z","alert_count":0,"request_count":6,"received_data":278074,"sent_data":3016,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-19T22:12:35.4735Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pl25818938.effectiveratecpm.com/b4e3b87e4d0e5891d3bf81aac791b679/invoke.js","fqdn":"pl25818938.effectiveratecpm.com","domain":"effectiveratecpm.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b12289bdae5dc955ba8c7354306c85b","sha1":"a49c0a27c3e06c337333023f6f7354d0acc3e269","sha256":"0091eb7ff013158b292249adfdba90ec0fd650a883c9f5fe6acdbc1f07d9f98b","sha512":"c84bb55a810794dfad3ae1a3309c37778619dbf97376ca3ec5a021411c62d53188d79ebc5ab6e746554c85d7b5fee8d3f2770262db581ca3090c17e8fd4c5986","ssdeep":"768:MxMESLo4Q0ygG019lwTd+v8I6FtfYAJEOlhP4nIYStbTs:vLJATdlcIVHs","tlshash":"7513c9ec7f45b2ad028b6823213f660af1399b1275cdd59cf192f0e8279c758c93ae14","size":43295,"data":"","first_seen":"2025-10-26T19:26:59.098641Z","last_seen":"2025-10-26T19:26:59.098641Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extendedcontaminaterigorous.com/34/56/de/3456dedcdd790ee65f6691e5792d6cdf.js","fqdn":"extendedcontaminaterigorous.com","domain":"extendedcontaminaterigorous.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1a4563040a52884873e299b05170548","sha1":"69545f832d1d92b622932fcc1cbd92aaecfcc923","sha256":"9352f6b1a3e067a8264f0caea99eb22947e04ca956028bc8769a2893c23ed679","sha512":"86f5d7832e9a4310432d45a01238dee5016edf71f99c52868473219c9c1f841a6551737a8fe0c0c5ee2c2ca6b2c4fbca3bab431e039ddd210f4b2e082716a031","ssdeep":"1536:fqQg73s72DQsjQlZKEMO2N6BLFYQPNT416XgKkGCWUMZL:fzgxkN4O2N6BLFYQWEXgKsWUM9","tlshash":"ff83f8883f81b65812a2f133723f999ae1da5e451888d054d303a8dcbf7d71ce93af65","size":84989,"data":"","first_seen":"2025-10-26T19:26:59.078216Z","last_seen":"2025-10-26T19:26:59.078216Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"afc479722c5e6efc47ca0fc31a6b0967","sha1":"ad43e7d934738d8db3ee80f81061217757294746","sha256":"e9d00d1368b78ae1a6b22f9dee83c248df2e6e9984d2f5677d58f2b5a12dc625","sha512":"fe7132ea43ffcbdc285c5542b26c9e3a19bae9a4bbe21a16ab1f1ba4f4d9a00158c12aaadf7b5e6761788705de67b0c8796051c81a0175778cbfb686e0e19aa9","ssdeep":"","tlshash":"39213a37125453a12126f077ba5e21d9f9324399a45582133b0803c91ff266b12fe7bd","size":1289,"data":"","first_seen":"2025-06-19T07:29:47.79402Z","last_seen":"2025-10-28T09:49:22.376728Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb8409a092adc6e8be17e87d59e0595e","sha1":"cf8d9821552d51bb50ce572e696aba1309065800","sha256":"e3e5f35d586c0e6a9a9d7187687be087580c40a5f8d0e52f0c4053bbc25c98db","sha512":"fc35d35ebea742874c522abe2142580add8f3ce523ac727dc05aeaa49dd79203cd39955f32893b711c3a092c72090c579faa339444ac4a1d7fb0c093175acbfe","ssdeep":"1536:KDFXTRMYFbeDtyZxg6V4mMeexs1Lzu3JlQ5uCe/ZiEm4kWpfBogmzmPx3SgQ47Gl:AuIy3JlQ5cF7m+SgQ47GKA","tlshash":"7f6318dd72c6b07357ab70b9007f610bf13618996c4e4450f129e8e9bc78a4a827bf6d","size":72380,"data":"","first_seen":"2023-03-07T01:03:10Z","last_seen":"2026-04-06T09:59:53.510711Z","times_seen":7054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl25825165.effectiveratecpm.com/15/09/6c/15096cf1d35bf7379d2c1a7d11e6d0a2.js","fqdn":"pl25825165.effectiveratecpm.com","domain":"effectiveratecpm.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4aed918bcfa49bffc1d55919af2f301b","sha1":"52f898f5e0242ab9e2c51d91c509154ed441111d","sha256":"3ccc3d183278b62ba840a67c83a8e42c4ae1ed7e5b38212570fe1a722edd7f17","sha512":"2156e1a47ff3a1e46eeb42533ed044b85f50e85456216f350191708dff127b08d1bab3d74362ec9c30a7094bf1a634e2404214f8a3a336ba12e6fa5004aa4320","ssdeep":"1536:fhlo73s72DQsjQlZKEMO2N6BLFYQPcT416XgKkGCWUMZL:fnoxkN4O2N6BLFYQZEXgKsWUM9","tlshash":"4e83f8883f81b65812a2f133723f999ae1da5e451888d054d303a8dcbf7d71ce93af65","size":84981,"data":"","first_seen":"2025-10-26T19:26:59.115842Z","last_seen":"2025-10-28T09:49:22.368421Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl25818938.effectiveratecpm.com/b4e3b87e4d0e5891d3bf81aac791b679/invoke.js","fqdn":"pl25818938.effectiveratecpm.com","domain":"effectiveratecpm.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e3c9dbd9f50bbebf71b97c04cd02363","sha1":"98a60d158671f2b8d6b603a749e3cdb29c092350","sha256":"2860ba669536bca0fb44b047b05dabcb67f9c959de4a2c3bad94412fc2e2db79","sha512":"df3ae878605d6b8e33e3351c342cded668bdc51d51eaa55697840a1f35cab6550e1bae16c8b86792067d50e9afb0e18a3127979ccf84875ddf2404eb6aadcfad","ssdeep":"768:MxMESLo4Q0ygG019lwTd+v8I6FtfjAJEOlhP403YStbTJ:vLJATdlPQVHJ","tlshash":"0313c8ec7f45b2ad028b6823253f660af1399b1275cdd59cf192f0e8279c758c93ae14","size":43347,"data":"","first_seen":"2025-10-26T19:26:59.095814Z","last_seen":"2025-10-26T19:26:59.095814Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extendedcontaminaterigorous.com/9d/d4/f3/9dd4f33d4cf09d680b03f943721f04e8.js","fqdn":"extendedcontaminaterigorous.com","domain":"extendedcontaminaterigorous.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"21cd982ee10594925331c66c0f0704ea","sha1":"b0bbfb9f7425ed297c175d60783f46b67f333ff5","sha256":"06167f0baca8cbaf75767b31122fb51f56f5c31ee88563e5dbf7dac37967e3b4","sha512":"a9d8b121998056c588a40b02a5e951701a3ff3da57006e10d760898c836984d848b268b393d24aa7bef63f4ab581a13315f67fd40b9e1f60b566696bb868ec65","ssdeep":"1536:l0+mKD2HANk06WIqx61GpQU8/M5XTSvFu081y736V8xefnFARscKv6RQc27Yhqhs:O+skT5Iab8xe9ARzXRR2kh/","tlshash":"cab3b38dbf92f16d11675072223f9416f02e8d56658dc554e222f8bc2fa831be939f34","size":112043,"data":"","first_seen":"2025-10-26T19:26:59.120118Z","last_seen":"2025-10-26T19:26:59.120118Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-04-06T10:17:28.921052Z","times_seen":10477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02d223393e00c273efdcb1ade8f4f8b1","sha1":"0cc93b8421d89c24a889642428b363cb831de78a","sha256":"79c599dd760cec0c1621a1af49d9a2a49da5d45e1b37d4575bace0a5e0226582","sha512":"339296df3b6e2080a65488634aa5ded35a15d9ba5edb8f203b1aa695c62b13302fc2cecfc37cfa04ad2219baf0bddad4414862dde5e0b71a7923c3c3a3d61f8d","ssdeep":"768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz","tlshash":"0343a54a7254787206df747a817b060bb3366c99a50a816cb8699ced2f7cd483277f3c","size":60044,"data":"","first_seen":"2023-03-07T01:06:50Z","last_seen":"2026-04-06T09:38:27.838147Z","times_seen":12310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@popperjs/core@2.9.3/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1a71969a95592d2d3d32bb7c1296190","sha1":"f6e3039d5b647e7c9f79293dc7c46cb286003d6c","sha256":"ccc0ee783158d1ab3ae590ef8c982a827e38e8b82fd121551cdd4c20041fcd1b","sha512":"5cba3a6d07b4f22ac939b09cf3aac510a41d70561b18620755771f32cc696ef17ca26a6677548d263a956398668d0d354ecd149a649019faa9b777c68e6ea918","ssdeep":"384:P5tp5wmEyOQQ5+D0/BAyMAoflA0mxPjjLqWlV1NnuGixt0ZUL83H+H9h++Ee:gmE3UD0/myRoynOWD1Nnuft0ZUL83HAT","tlshash":"ca82b5cd3990f0a5167b52b6c07f550fb3339561228ea100b255d6dd2c78ebba26bc3e","size":18873,"data":"","first_seen":"2023-03-07T13:48:21Z","last_seen":"2026-04-06T03:17:54.983791Z","times_seen":554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-04-06T10:17:28.921052Z","times_seen":10477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5b43a4456f158ea16abe54aff25aca0","sha1":"9d66e3d31aad7dd599258aea1cfdc67ca2de85ee","sha256":"eae8c4cbe520b5b2f527db264b3d692b6001a86096efec9a8e326ef52925617b","sha512":"17ac2c13b0c72a1156c0085f0edbaa7243bfc78f200b3f54bf04f4e521fc5802a0b8388c089cf3d4f59558523c4d30b9212455677ac52a4f1c3bfdd130bb3624","ssdeep":"","tlshash":"88218b32e6ea43e1323af116920352efd7721049e64f771b715e08ca0fd0fe486b01a9","size":1289,"data":"","first_seen":"2025-06-20T06:50:43.515388Z","last_seen":"2025-10-28T09:49:22.377585Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"extendedcontaminaterigorous.com/34/56/de/3456dedcdd790ee65f6691e5792d6cdf.js","fqdn":"extendedcontaminaterigorous.com","domain":"extendedcontaminaterigorous.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:31.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"extendedcontaminaterigorous.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 08:07:01 GMT","end":"Sun, 11 Jan 2026 08:07:00 GMT"},"fingerprint":{"sha1":"D7:E2:5F:F2:E3:DA:A6:33:C6:7F:C7:8E:D1:14:9F:C4:60:AE:E4:92","sha256":"BD:BC:AA:E9:A0:1B:66:AB:7E:8C:1E:2D:DF:76:AD:5D:5C:10:30:79:DD:26:59:68:55:1D:AA:4F:C7:36:99:E4"}}},"request":{"raw":"GET /34/56/de/3456dedcdd790ee65f6691e5792d6cdf.js HTTP/1.1\r\nHost: extendedcontaminaterigorous.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32799\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 9\r\nHost: extendedcontaminaterigorous.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6b3dc1fd3e077404ebc4c873e044abc3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e1a4563040a52884873e299b05170548","sha1":"69545f832d1d92b622932fcc1cbd92aaecfcc923","sha256":"9352f6b1a3e067a8264f0caea99eb22947e04ca956028bc8769a2893c23ed679","sha512":"86f5d7832e9a4310432d45a01238dee5016edf71f99c52868473219c9c1f841a6551737a8fe0c0c5ee2c2ca6b2c4fbca3bab431e039ddd210f4b2e082716a031","ssdeep":"1536:fqQg73s72DQsjQlZKEMO2N6BLFYQPNT416XgKkGCWUMZL:fzgxkN4O2N6BLFYQWEXgKsWUM9","tlshash":"ff83f8883f81b65812a2f133723f999ae1da5e451888d054d303a8dcbf7d71ce93af65","first_seen":"2025-10-26T19:26:59.078216Z","last_seen":"2025-10-26T19:26:59.078216Z","times_seen":1,"resource_available":true,"data":null}},"time_used":826,"timings":{"blocked":314,"dns":38,"connect":91,"send":0,"wait":102,"receive":92,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8501-13365\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uATtLz7Z7%2FhEFHs8DU4YS4YxyB6SYA%2FDf%2B%2FX21DGUczIBxUWt5YyWRq%2Fq%2FAz%2FDHByCqnNYVM6nKnSudiBx2jmkaTSsOoFUNntzZz7gauv60%3D\"}]}\r\ncf-ray: 994c589238a8a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5982c5377696d20476871062646b253f","sha1":"8bf2c93fa9ccc908f7df0fb7abb911bbac3e4242","sha256":"4e23a6449e6ef4614f0107cecf5c9eda75d2041c7c71f4a55d45f2a7e75450f4","sha512":"92592dac2a817293e8ec1d94bf99df639626a90d524420b01a12210398927c0650cc26fa8e730300096b29961563aa02efb707478c6d51ac8616bb1bde5a0cb2","ssdeep":"384:jvuAuF81dghu3uFlZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uhu7uNKwZiMUL6Vpaj7F","tlshash":"1d731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-02-12T20:28:38Z","last_seen":"2026-04-06T10:17:28.893529Z","times_seen":6278,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":33,"dns":1,"connect":1,"send":0,"wait":491,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/impr.gif?sid=H4sIAAAAAAAC_1RST2gkxRutzgZ-8PPgv-DBPzAHEQUz6Z7u6ZlxxWDczRKMSchGcvAg1VXVkzI9XW1V9_RkEAwGZI_jTW-dN8kG12XRvQvLxMNCQLAFIYcNgidPHoQ9isxkYPEdvu81rw_vva--PMwuiIuMnm98oPoyiuhCvWpXXt-WMVe5qaxtVRy7al-tbMvY965WeuOhu285rle136jcEGxXLdRsx7Yd26ksSy1C1VuYqJDJ3ZZTbdlVr1Z16h56-r_fJrNgqAXevSDPQfLy6T_CjyDZCHHn-2vC7KYqefN6J4toqjS6_OTDeDdWeYzOExpqC2F8Mv0bypSEfD0DFZ9ME0B1j8YJEMiSzLzwCEF8MrWJoHt86TSIIGIE_Cnk3RFENIKkIzB1AMl_IQDjWFtH3Lm9pnRO9y5VOlZLMvv4b8i8JLOP5hB37i1Fsle5qaIslSo26IUFZG8E2R4hyU6R9i3I_BQs_QKS_0wWHq8i7hytm0hB8vNXaRiEnuO68zXfpvOeEzbnKbXpvGgw1hR13-WsNalIhiNQM4PMWMikhSy0kCUWOvy84tlNjznU9cMWZw3bo57HRWC3mjXbpi3WQMbG3gdIkwFYNADT-0j0PnblADp7ALNTwHALJiXo8gK5IMgNQU4JckmQpwR5tzjmkamZ4jaPTBY4012bbrcYqrR9SI9V2hYxAdUDaF4cyeRTcwCWXhn2Q8OHajxokBZDGvDiMLkgz45rtb5553_YFecV16v7XHDGeaNlC-HXQ99vOaLeaNW4z3gIIwtIMwNqLPRlSW68fR-JLMlrn_2FgJ7CRKdg8mXQ7BXQvADdKdCP73Mqoz0u28KkO1lQZaoDrgok6SzSPeswuiDPDze3lh5Mbvzx9RiCnS3-TiYA0wUSXeAT-RNBO7o13FQ5OdpUuSE_rCep7Mg-Hd__ZkpTceXO-2IvV5qvXDODb99lY2FM724Jk67SmMu4bch3S5JzoZeVZoL8uGK2RbCRmZ2lTMdZsrrx3vJKJ9HCGKniEagsyf8ffg4mSzLnvjR52_4zL4Il-zDJ2eJv4QQwiiBILESyJO7cQ0TibPFeeScZZ6BBASPOyBQInvBDcwttbYGmB4g7Bbq6QDcqQKMBTHZlmCb6bPFXdwIEkTUMIm0dBZGOvrrsysjzSuiKGrPtZsN33GYoHNfjLKw3vRb3qe26Aqkpd_7J_vw3AAD__9h8cOeCBAAA","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RST2gkxRutzgZ-8PPgv-DBPzAHEQUz6Z7u6ZlxxWDczRKMSchGcvAg1VXVkzI9XW1V9_RkEAwGZI_jTW-dN8kG12XRvQvLxMNCQLAFIYcNgidPHoQ9isxkYPEdvu81rw_vva--PMwuiIuMnm98oPoyiuhCvWpXXt-WMVe5qaxtVRy7al-tbMvY965WeuOhu285rle136jcEGxXLdRsx7Yd26ksSy1C1VuYqJDJ3ZZTbdlVr1Z16h56-r_fJrNgqAXevSDPQfLy6T_CjyDZCHHn-2vC7KYqefN6J4toqjS6_OTDeDdWeYzOExpqC2F8Mv0bypSEfD0DFZ9ME0B1j8YJEMiSzLzwCEF8MrWJoHt86TSIIGIE_Cnk3RFENIKkIzB1AMl_IQDjWFtH3Lm9pnRO9y5VOlZLMvv4b8i8JLOP5hB37i1Fsle5qaIslSo26IUFZG8E2R4hyU6R9i3I_BQs_QKS_0wWHq8i7hytm0hB8vNXaRiEnuO68zXfpvOeEzbnKbXpvGgw1hR13-WsNalIhiNQM4PMWMikhSy0kCUWOvy84tlNjznU9cMWZw3bo57HRWC3mjXbpi3WQMbG3gdIkwFYNADT-0j0PnblADp7ALNTwHALJiXo8gK5IMgNQU4JckmQpwR5tzjmkamZ4jaPTBY4012bbrcYqrR9SI9V2hYxAdUDaF4cyeRTcwCWXhn2Q8OHajxokBZDGvDiMLkgz45rtb5553_YFecV16v7XHDGeaNlC-HXQ99vOaLeaNW4z3gIIwtIMwNqLPRlSW68fR-JLMlrn_2FgJ7CRKdg8mXQ7BXQvADdKdCP73Mqoz0u28KkO1lQZaoDrgok6SzSPeswuiDPDze3lh5Mbvzx9RiCnS3-TiYA0wUSXeAT-RNBO7o13FQ5OdpUuSE_rCep7Mg-Hd__ZkpTceXO-2IvV5qvXDODb99lY2FM724Jk67SmMu4bch3S5JzoZeVZoL8uGK2RbCRmZ2lTMdZsrrx3vJKJ9HCGKniEagsyf8ffg4mSzLnvjR52_4zL4Il-zDJ2eJv4QQwiiBILESyJO7cQ0TibPFeeScZZ6BBASPOyBQInvBDcwttbYGmB4g7Bbq6QDcqQKMBTHZlmCb6bPFXdwIEkTUMIm0dBZGOvrrsysjzSuiKGrPtZsN33GYoHNfjLKw3vRb3qe26Aqkpd_7J_vw3AAD__9h8cOeCBAAA HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25724666=1; slec15096cf1d35bf7379d2c1a7d11e6d0a2=[6243696]; u_pl26820103=1; slec3456dedcdd790ee65f6691e5792d6cdf=[6243694]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: iprc_l+32db4bcb58960f4e064fcd32811bbd09=6243694; expires=Mon, 27 Oct 2025 19:26:34 GMT; path=/; secure; SameSite=None\niprc_l:6243694=1; expires=Mon, 27 Oct 2025 19:26:34 GMT; path=/; secure; SameSite=None\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 120bd14a401900a9874c10ee44661026\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capchashield.com/","fqdn":"capchashield.com","domain":"capchashield.com","tld":"com"},"ip":{"addr":"104.21.33.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T19:26:31.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capchashield.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 19:35:17 GMT","end":"Tue, 06 Jan 2026 20:33:44 GMT"},"fingerprint":{"sha1":"EA:BF:44:14:2E:91:63:8C:02:B9:6A:D2:24:A1:A4:15:00:D4:41:6B","sha256":"A9:4E:E6:F5:83:E3:51:56:3C:75:15:5A:CE:F6:D7:60:12:85:47:95:19:69:BA:82:81:B5:A2:F5:54:1D:52:FB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: capchashield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvlnHoHdzOL54XW%2FG1co6rHFaO091fAIMwYkiCTn8cPryjrbmnjxHzORzM8ApFvUaUBoigmwJRBqq38%2BbkUhiIKc02drxV8ZFo3buUz04%2Fg%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 994c58846854c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Bootstrap:4.5.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Popper:2.9.3","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"BootstrapCDN:4.5.2","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]}],"data":{"size":29581,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (339)","md5":"cf4255a99dab52e1fbab0055a9b664c8","sha1":"515569fe173321d1aa830e7168b9ed5d2cae7bde","sha256":"8b3b5387c31137cf67d8b767cdf7a5c300c472f4fabe594230fcc0c998e73c86","sha512":"07953194fbe1ec1d9c63c99ab5b264b291ff34e537dd2ed349387d9a3dff7d84cc59941b8863da8ea36d8ccbb154ba48b9484aa1ebc09dce48c25e619e8b1d8e","ssdeep":"384:QHF/EnU8B8jfocvhhZC7Vit/rviGdi5dcEIjuH0z5gcX7pMJ3hjUoGHxcO2vMdaX:QHF/3vWBcfK3hJO33ong1vz4QPjvY1","tlshash":"46d2822159f470fb86c6e186657aa73afbb1c607cd164281b7ee0788df86d93c82705c","first_seen":"2025-10-26T19:26:59.084635Z","last_seen":"2025-10-26T19:26:59.084635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":43,"dns":21,"connect":1,"send":0,"wait":30,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"capchashield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:31.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:05:43 GMT","end":"Fri, 28 Nov 2025 23:05:42 GMT"},"fingerprint":{"sha1":"B9:51:95:1F:A8:75:17:3A:9B:B1:75:96:F4:7D:7A:CF:3D:52:C9:71","sha256":"36:D1:B1:18:05:03:10:B2:46:BC:6C:71:A5:E7:BE:07:32:66:88:16:04:1E:5F:96:0F:10:B6:4B:BF:01:D1:42"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:31 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c05016a5adf940fc5b1f01d899ce60b4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":58,"dns":1,"connect":17,"send":0,"wait":22,"receive":18,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"3.123.64.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:31.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://capchashield.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; expires=Wed, 24 Oct 2035 19:26:31 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"dc9255cffd8e154c0f6ec63a8219d9ab","sha1":"9c143a3bd0a8b971cf0daf6d15dd52362959952d","sha256":"77bc505f71df5376ea2555709a70c4c116ee191bede9e59762eca2cdcfdcb9ba","sha512":"eb23ffe4e77dac01db3b10a09772469d2b29f2aabf83c5334571087921b3da99f2f86a3e63ffa6917e1aea56737d920b7e78133c42d58d1cbe17235dca13b0f4","ssdeep":"","tlshash":"5a9004540543fc41cc077557407505c510d1c77cc14011010d745f0040175c41f3730c","first_seen":"2025-10-26T19:26:59.089455Z","last_seen":"2025-10-26T19:26:59.089455Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":106,"dns":1,"connect":21,"send":0,"wait":22,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\netag: W/\"65aa8501-10a1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hl%2F9PelAKdrfRh4cs6mPggtq6SOkRAq6Ut%2BS0kxre%2FN3nhXcLsKqtbIjDjGDHRWc0kSjSK3Zvv1hbqTB79tIespTNrQHkippeeQ84aLb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994c58934a5156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4257,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"48c6473a6f95c70089437b6e14dba5ff","sha1":"b5647ce85919828bbefc6e3beab3f022997c656e","sha256":"e50d9ec6f2bf5c91f7faa480f538e849774689ddada06f572919abe46d1e69eb","sha512":"99b8c7d13a01f6e600bd3d261292738833a07b08ebf637fd64c8a4fea7dfb3d3ec397ac5bf2a7ee7b83a851188a2b1d3c1fed4ae25ac1633463ca6abf249fa9d","ssdeep":"96:q4oLZBhjTMXPMXHbfy9inU8XHbfyRUuq4BPywWZ7LWHic1SH+r:MHRMX0XHTy9MXHTyvpyyYH+r","tlshash":"54918c6725631604b507d8192fe92b4363688113960ff5b63ec366088fcb98d96e739f","first_seen":"2024-08-02T20:34:42Z","last_seen":"2025-12-03T23:02:36.51757Z","times_seen":215,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pM%2FUdNGGeR2OyqQn0HtucItlGnQH9gSi%2Fg3MQmS1IvxGByrPwLvDn32G6TydyOFhfoAxk0nTHkELWKJD61mhEhzuWR7Bf%2B3yMsYA3txV\"}]}\r\netag: W/\"65aa8501-3cf\"\r\ncontent-encoding: br\r\ncf-ray: 994c58947c1956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":975,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"bfd47b5dfff6e6feac7624980fe9f680","sha1":"b437c81b3addc9d7154b96f495b2eb82148e5101","sha256":"b53d941e5ec9ce3482ce722008c8dfdae35f630aa4a7cb7c4bdd0e7342fc63fb","sha512":"edbc2509ebf5b53042d1219d29ae84b0c5c8556a9aa8b34d1f3f943dd6cf8e424287bfb29ca98fe7d4776cd3a5efeae11ca77833892030ab67a156a1393d6f8d","ssdeep":"","tlshash":"61115b37116982f46357f027a21725daea32029be81b9717721c05cd0fd47b913f96e7","first_seen":"2023-12-05T16:53:58Z","last_seen":"2026-02-03T01:05:39.247335Z","times_seen":1197,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=349","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=349 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25724666=1; slec15096cf1d35bf7379d2c1a7d11e6d0a2=[6243696]; u_pl26820103=1; slec3456dedcdd790ee65f6691e5792d6cdf=[6243694]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/impr.gif?sid=H4sIAAAAAAAC_1RSTWgkxR-tzu7p_z_4tXjxgzmIKJhJ93TPl3sIxuwuwZiEbCQHD1JdVT0pp6ert6o_JoNgMLDkON48dt4kG1yXRU-ehGXiYSEg2IKQwwbBizcPwh48iMxkYPEdfr_XvD689-p39zC9IC5Ser7xoRrIMKQL9apdeWtbRlzlprK2VXHsqn29si2jhne90p8Mnb3ruF7VfrtyS7CuWqjZjm07tlO5KbUIVH9hqkLGD9pOtW1XvVrVqXvo6_9-m9SCoRZ4dkFehOTlc78HH0OyMaLet8vCdBMVv3Ojl4Y0URoZP_ko6kYqj9B7RgNtIYhOZn9DmZKQr-agopNZAqjsaJIAvizJ3MtP4EcnM5vws-NLp34IEcHn_0eejSHCMSQdg6l9SP4zARjH2jqi3r01pXO6e6nSiVqSq0__gsxLcvXJNUS9h0uh7FduqzBNpIoM-kEB2R9DdsaI01MkAwsyPwVLvoDkP5GFp6uIekfrJlSQ_PwNGviB57jufK1h03nPCVrzlNp0XjQZa4l6w-WsPa1IBmNQM4fUWEilhTSwkMYWevy84tktjznUbQRtzpq2Rz2PC99ut2q2TdusiZRNvA-RxEOwcAim9xDrPXTlEDp9BLNTwHALJiHIeIFcEOSGIKcEuSTIE4I8K455aGqmuMdDk_rObNdm2y1GKukc0mOVdEREQPUQmhdHMr5j9sGSK6NBYPhITQb1k2JEfV4cxhfkhUmt1sHdv9EV5xWnbrcbLHC4W_eDptts8xpzaJM7jmhwm9ZgZAFp5kCNhYEsya3lZcSyJG9-9id8egoTnoLJV0HT10DzAnSnwCD6_k4qWTcTWga7RuhMMmGqTPXAVYE4uYpk1zoML8hLo82tpUfTh_7kRgzBzhZ_I1OA6QKxLvCp_JGgEx6MNlVOjjZVbsh363Eie3JAJ0dwO6GJuHL_A7GbK81Xls3w6_fYRJjQB1vCJKs04jLqGPLNkuRc6JtKM0F-WDHbwt9Izc5SqqM0Xt14_-ZKL9bCGKmiMagsyf8efw4mS3LNfWV64I3nXweL92Dis8VfgylgFIEfWwhlSdxrjxGKs8WH5f14koH6BYw4IzPAf8YPzQE62gJN9hH1CmS6QBYWoOEQJr0ySmJ9tviLOwX80Br5obaO_FCHX152ZeR5JXBFjdl2q9lw3FYgHNfjLKi3vDZvUNt1BRJT7vyT_vFvAAAA__9ZgxeDhwQAAA==","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:34.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSTWgkxR-tzu7p_z_4tXjxgzmIKJhJ93TPl3sIxuwuwZiEbCQHD1JdVT0pp6ert6o_JoNgMLDkON48dt4kG1yXRU-ehGXiYSEg2IKQwwbBizcPwh48iMxkYPEdfr_XvD689-p39zC9IC5Ser7xoRrIMKQL9apdeWtbRlzlprK2VXHsqn29si2jhne90p8Mnb3ruF7VfrtyS7CuWqjZjm07tlO5KbUIVH9hqkLGD9pOtW1XvVrVqXvo6_9-m9SCoRZ4dkFehOTlc78HH0OyMaLet8vCdBMVv3Ojl4Y0URoZP_ko6kYqj9B7RgNtIYhOZn9DmZKQr-agopNZAqjsaJIAvizJ3MtP4EcnM5vws-NLp34IEcHn_0eejSHCMSQdg6l9SP4zARjH2jqi3r01pXO6e6nSiVqSq0__gsxLcvXJNUS9h0uh7FduqzBNpIoM-kEB2R9DdsaI01MkAwsyPwVLvoDkP5GFp6uIekfrJlSQ_PwNGviB57jufK1h03nPCVrzlNp0XjQZa4l6w-WsPa1IBmNQM4fUWEilhTSwkMYWevy84tktjznUbQRtzpq2Rz2PC99ut2q2TdusiZRNvA-RxEOwcAim9xDrPXTlEDp9BLNTwHALJiHIeIFcEOSGIKcEuSTIE4I8K455aGqmuMdDk_rObNdm2y1GKukc0mOVdEREQPUQmhdHMr5j9sGSK6NBYPhITQb1k2JEfV4cxhfkhUmt1sHdv9EV5xWnbrcbLHC4W_eDptts8xpzaJM7jmhwm9ZgZAFp5kCNhYEsya3lZcSyJG9-9id8egoTnoLJV0HT10DzAnSnwCD6_k4qWTcTWga7RuhMMmGqTPXAVYE4uYpk1zoML8hLo82tpUfTh_7kRgzBzhZ_I1OA6QKxLvCp_JGgEx6MNlVOjjZVbsh363Eie3JAJ0dwO6GJuHL_A7GbK81Xls3w6_fYRJjQB1vCJKs04jLqGPLNkuRc6JtKM0F-WDHbwt9Izc5SqqM0Xt14_-ZKL9bCGKmiMagsyf8efw4mS3LNfWV64I3nXweL92Dis8VfgylgFIEfWwhlSdxrjxGKs8WH5f14koH6BYw4IzPAf8YPzQE62gJN9hH1CmS6QBYWoOEQJr0ySmJ9tviLOwX80Br5obaO_FCHX152ZeR5JXBFjdl2q9lw3FYgHNfjLKi3vDZvUNt1BRJT7vyT_vFvAAAA__9ZgxeDhwQAAA== HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25724666=1; slec15096cf1d35bf7379d2c1a7d11e6d0a2=[6243696]; u_pl26820103=1; slec3456dedcdd790ee65f6691e5792d6cdf=[6243694]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: iprc_l+0f760b476ce6f5292407257be3d08697=6243696; expires=Mon, 27 Oct 2025 19:26:34 GMT; path=/; secure; SameSite=None\niprc_l:6243696=1; expires=Mon, 27 Oct 2025 19:26:34 GMT; path=/; secure; SameSite=None\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1f288fbede7cc91457958476d3240b55\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pl25818938.effectiveratecpm.com/b4e3b87e4d0e5891d3bf81aac791b679/invoke.js","fqdn":"pl25818938.effectiveratecpm.com","domain":"effectiveratecpm.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:31.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectiveratecpm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 21:07:59 GMT","end":"Sat, 03 Jan 2026 21:07:58 GMT"},"fingerprint":{"sha1":"D1:A4:29:C0:9D:DE:78:81:B5:C3:D0:60:72:A4:9A:9F:68:F8:76:4D","sha256":"07:93:2F:8B:78:7B:81:90:37:14:D7:58:BC:2B:24:A1:01:FF:8F:41:03:4C:40:6A:E7:20:50:C6:35:96:90:DE"}}},"request":{"raw":"GET /b4e3b87e4d0e5891d3bf81aac791b679/invoke.js HTTP/1.1\r\nHost: pl25818938.effectiveratecpm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Sun, 26 Oct 2025 19:26:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 15751\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: pl25818938.effectiveratecpm.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 378024cc5c7c0b9d461c26b70586686d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43347,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43345), with no line terminators","md5":"0e3c9dbd9f50bbebf71b97c04cd02363","sha1":"98a60d158671f2b8d6b603a749e3cdb29c092350","sha256":"2860ba669536bca0fb44b047b05dabcb67f9c959de4a2c3bad94412fc2e2db79","sha512":"df3ae878605d6b8e33e3351c342cded668bdc51d51eaa55697840a1f35cab6550e1bae16c8b86792067d50e9afb0e18a3127979ccf84875ddf2404eb6aadcfad","ssdeep":"768:MxMESLo4Q0ygG019lwTd+v8I6FtfjAJEOlhP403YStbTJ:vLJATdlPQVHJ","tlshash":"0313c8ec7f45b2ad028b6823253f660af1399b1275cdd59cf192f0e8279c758c93ae14","first_seen":"2025-10-26T19:26:59.095814Z","last_seen":"2025-10-26T19:26:59.095814Z","times_seen":1,"resource_available":true,"data":null}},"time_used":887,"timings":{"blocked":345,"dns":57,"connect":94,"send":0,"wait":98,"receive":92,"ssl":199},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-26","alert":"Phishing Block","trigger":"pl25818938.effectiveratecpm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pl25818938.effectiveratecpm.com/b4e3b87e4d0e5891d3bf81aac791b679/invoke.js","fqdn":"pl25818938.effectiveratecpm.com","domain":"effectiveratecpm.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:31.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectiveratecpm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 21:07:59 GMT","end":"Sat, 03 Jan 2026 21:07:58 GMT"},"fingerprint":{"sha1":"D1:A4:29:C0:9D:DE:78:81:B5:C3:D0:60:72:A4:9A:9F:68:F8:76:4D","sha256":"07:93:2F:8B:78:7B:81:90:37:14:D7:58:BC:2B:24:A1:01:FF:8F:41:03:4C:40:6A:E7:20:50:C6:35:96:90:DE"}}},"request":{"raw":"GET /b4e3b87e4d0e5891d3bf81aac791b679/invoke.js HTTP/1.1\r\nHost: pl25818938.effectiveratecpm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 15728\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: pl25818938.effectiveratecpm.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b17a130754bdfd69965825e37313ea4b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43295,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43293), with no line terminators","md5":"8b12289bdae5dc955ba8c7354306c85b","sha1":"a49c0a27c3e06c337333023f6f7354d0acc3e269","sha256":"0091eb7ff013158b292249adfdba90ec0fd650a883c9f5fe6acdbc1f07d9f98b","sha512":"c84bb55a810794dfad3ae1a3309c37778619dbf97376ca3ec5a021411c62d53188d79ebc5ab6e746554c85d7b5fee8d3f2770262db581ca3090c17e8fd4c5986","ssdeep":"768:MxMESLo4Q0ygG019lwTd+v8I6FtfYAJEOlhP4nIYStbTs:vLJATdlcIVHs","tlshash":"7513c9ec7f45b2ad028b6823213f660af1399b1275cdd59cf192f0e8279c758c93ae14","first_seen":"2025-10-26T19:26:59.098641Z","last_seen":"2025-10-26T19:26:59.098641Z","times_seen":1,"resource_available":true,"data":null}},"time_used":757,"timings":{"blocked":283,"dns":1,"connect":92,"send":0,"wait":98,"receive":92,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-26","alert":"Phishing Block","trigger":"pl25818938.effectiveratecpm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25818938.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/0d/c2/ec/0dc2ec7f88476bd2d9a800c02862fe7edfe654012e8914bdd3dc3a37227ce5e7.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /si/0d/c2/ec/0dc2ec7f88476bd2d9a800c02862fe7edfe654012e8914bdd3dc3a37227ce5e7.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 25402\r\nserver: nginx/1.21.6\r\nlast-modified: Sat, 25 Oct 2025 15:09:43 GMT\r\netag: \"68fce837-633a\"\r\nexpires: Tue, 28 Oct 2025 19:26:32 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25402,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"f944b6e42036b9d1ae260ec1632cc8c2","sha1":"10b26fb57a89f15dad6dc7d1f965d6d6c57542ca","sha256":"b939069e7746a3d54f58b04177fc0ec918ae7fc1f7a5472fb5761725d7e34b38","sha512":"951d0839bb61d0fa911681e49f97c8e188082acce76c9c7cbb6054d488185467d35f08419d7e2e91b96ed8eb9381ec0cfaf19f13af66c6d51329c5cf83613089","ssdeep":"768:CGXhmDqm2DXsrdbTZbf/0TkiIVI3m5wcqtBR:pXh9DXUbTZFrQtBR","tlshash":"0bb2f11082f19d18f87942718d69290beb893e01912bdfda398017e00f677c37a7d36e","first_seen":"2025-10-25T18:47:40.146595Z","last_seen":"2025-10-31T14:02:38.531481Z","times_seen":34,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":79,"dns":27,"connect":22,"send":0,"wait":60,"receive":4,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extendedcontaminaterigorous.com/impr.gif?sid=H4sIAAAAAAAC_1RSTWgkRRitzs5pPYjr4snDnERBJt3TncyMKwTjmhCMScxGAopIdVf1pExPV1tVPT0ZPQQDkuOAHtRT502y0XVZdM8KYeJFAoJ90QgbEC_ePAiLJ5GeHYh-UN9PvTq897766CC9IC5Ser72muyLKKLTMzW7-uymiJnMdHVlo-rYNftGdVPEs96Naq9MqvuC43o1-7nqIg-25XTddmzbsZ3qglA8lL3pMQqR3G05tZZd8-o1Z8ZDT_1_1qkFTS2w7gW5BsGKx38P34IIRog7X9_ketvI5PlXOmlEjVTosuM34u1YZjE6l22oLITx8eQ1pC4I-XQKMj6eKIDsHpYK4IuCTD31AH58PKEJv3v0iKkfgcfw2WPIuiPwaARBRwjkHgT7iQABw8oq4s7tFakyuvMIpSVakMrDvyCyglQeXEfcuTcfiV71loxSI2Ss0QtziN4Ioj1Ckp7C9C2I7BSB-RCC_UimHy4j7hyu6khCsHysXoQjUG0hLY-wkIYW0sRCh51XPbvpBQ51Z8MWCxq2Rz2Pcd9uNeu2TVtBA2lQ0hrAJAME0QCB2kWidrEtBlDpCfRWDs0saFMQ6_VddFmOjBNkmiCjBJkgyAxB1s2PWKTrOr_NIp36zqTWJ9XNh9K0D-iRNG0eE1A1gGL5oUje03sIzJVhP9RsKMtEfZMPqc_yg-SCPFG6Zu3Hx9jm51Xf467fbHCP2Xym2XKY64dNh9Kg0XL82UYLWuQQempsSF8UZPHF-0hEQZ754E_49BQ6OkUgngZNHdAsB93K0Y_vMyqiHSbaXJut1K8FsgMmcySmArNjHUQX5Mnh-sb8yXiFb34xBx6czZn-b4v3rr-PQOVIVI53xfcE7Wh_uC4zcrguM02-WU2M6Ig-Ldd7y1DDr9x5le9kUrGlm3rw5UtBCZTt3Q2uzTKNmYjbmnw1LxjjakGqgJPvlvQm99dSvTWfqjhNltdeXljqJIprLWQ8AhUFuXpyB4EoyLWf98Zf1138G0GyC52ckUlASwI_sRAJgohf3lM_h_7P7F_2B3ofbVUBNXuIOzm6Kkc3ykGjAXR6dWgSdTb3w2dlfA4_qgz9SFUO_UhFn4x9Ksg7H_9apvOCvP3Lt9DivBq6vB7YdrMx67jNkDuux4Jwpum12Cy1XZfD6GLrn_SPfwMAAP__S_BXhWwEAAA=","fqdn":"extendedcontaminaterigorous.com","domain":"extendedcontaminaterigorous.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"extendedcontaminaterigorous.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 08:07:01 GMT","end":"Sun, 11 Jan 2026 08:07:00 GMT"},"fingerprint":{"sha1":"D7:E2:5F:F2:E3:DA:A6:33:C6:7F:C7:8E:D1:14:9F:C4:60:AE:E4:92","sha256":"BD:BC:AA:E9:A0:1B:66:AB:7E:8C:1E:2D:DF:76:AD:5D:5C:10:30:79:DD:26:59:68:55:1D:AA:4F:C7:36:99:E4"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSTWgkRRitzs5pPYjr4snDnERBJt3TncyMKwTjmhCMScxGAopIdVf1pExPV1tVPT0ZPQQDkuOAHtRT502y0XVZdM8KYeJFAoJ90QgbEC_ePAiLJ5GeHYh-UN9PvTq897766CC9IC5Ser72muyLKKLTMzW7-uymiJnMdHVlo-rYNftGdVPEs96Naq9MqvuC43o1-7nqIg-25XTddmzbsZ3qglA8lL3pMQqR3G05tZZd8-o1Z8ZDT_1_1qkFTS2w7gW5BsGKx38P34IIRog7X9_ketvI5PlXOmlEjVTosuM34u1YZjE6l22oLITx8eQ1pC4I-XQKMj6eKIDsHpYK4IuCTD31AH58PKEJv3v0iKkfgcfw2WPIuiPwaARBRwjkHgT7iQABw8oq4s7tFakyuvMIpSVakMrDvyCyglQeXEfcuTcfiV71loxSI2Ss0QtziN4Ioj1Ckp7C9C2I7BSB-RCC_UimHy4j7hyu6khCsHysXoQjUG0hLY-wkIYW0sRCh51XPbvpBQ51Z8MWCxq2Rz2Pcd9uNeu2TVtBA2lQ0hrAJAME0QCB2kWidrEtBlDpCfRWDs0saFMQ6_VddFmOjBNkmiCjBJkgyAxB1s2PWKTrOr_NIp36zqTWJ9XNh9K0D-iRNG0eE1A1gGL5oUje03sIzJVhP9RsKMtEfZMPqc_yg-SCPFG6Zu3Hx9jm51Xf467fbHCP2Xym2XKY64dNh9Kg0XL82UYLWuQQempsSF8UZPHF-0hEQZ754E_49BQ6OkUgngZNHdAsB93K0Y_vMyqiHSbaXJut1K8FsgMmcySmArNjHUQX5Mnh-sb8yXiFb34xBx6czZn-b4v3rr-PQOVIVI53xfcE7Wh_uC4zcrguM02-WU2M6Ig-Ldd7y1DDr9x5le9kUrGlm3rw5UtBCZTt3Q2uzTKNmYjbmnw1LxjjakGqgJPvlvQm99dSvTWfqjhNltdeXljqJIprLWQ8AhUFuXpyB4EoyLWf98Zf1138G0GyC52ckUlASwI_sRAJgohf3lM_h_7P7F_2B3ofbVUBNXuIOzm6Kkc3ykGjAXR6dWgSdTb3w2dlfA4_qgz9SFUO_UhFn4x9Ksg7H_9apvOCvP3Lt9DivBq6vB7YdrMx67jNkDuux4Jwpum12Cy1XZfD6GLrn_SPfwMAAP__S_BXhWwEAAA= HTTP/1.1\r\nHost: extendedcontaminaterigorous.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25718439=1; nlecb4e3b87e4d0e5891d3bf81aac791b679=[5941311,6263770,6263769]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+233a6b5a660a208cbbef0003dbc03094=5941311; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\niprc_l:5941311=1; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: extendedcontaminaterigorous.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: bf02ec056a3d8c2db90d190e8ccc59e0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":1,"connect":93,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=afbf4133-260a-41f8-aa0a-e7cc8e563dc9\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=9dd4f33d4cf09d680b03f943721f04e8\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=19","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 21:53:17 GMT","end":"Fri, 28 Nov 2025 21:53:16 GMT"},"fingerprint":{"sha1":"AA:2A:FC:C2:EE:01:8F:55:3F:19:46:84:4A:C8:A0:95:62:50:5C:A3","sha256":"3D:8C:1A:2E:1F:32:30:D4:D8:4F:D2:FB:CC:99:F1:9C:05:E5:7B:D8:9D:7D:24:86:AD:C5:1E:62:55:44:A4:CA"}}},"request":{"raw":"GET /pxf.gif?uuid=afbf4133-260a-41f8-aa0a-e7cc8e563dc9\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=9dd4f33d4cf09d680b03f943721f04e8\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=19 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 0\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: eca929b4fa0edb325937b2bc925b3d76\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":281,"dns":0,"connect":93,"send":0,"wait":96,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2FQFsDFOBDyNt7rgyw6Qm6cHvX0xJVVm%2FFVuf8hIbRAtNUC%2FNy4Ij7Ofukg%2BVQiweND35U8udJdaLO%2BPBDoF%2BcOFryc5najqaXgbyzg1pGw%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"65aa8501-3cf\"\r\ncontent-encoding: br\r\ncf-ray: 994c58932ae3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":975,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"bfd47b5dfff6e6feac7624980fe9f680","sha1":"b437c81b3addc9d7154b96f495b2eb82148e5101","sha256":"b53d941e5ec9ce3482ce722008c8dfdae35f630aa4a7cb7c4bdd0e7342fc63fb","sha512":"edbc2509ebf5b53042d1219d29ae84b0c5c8556a9aa8b34d1f3f943dd6cf8e424287bfb29ca98fe7d4776cd3a5efeae11ca77833892030ab67a156a1393d6f8d","ssdeep":"","tlshash":"61115b37116982f46357f027a21725daea32029be81b9717721c05cd0fd47b913f96e7","first_seen":"2023-12-05T16:53:58Z","last_seen":"2026-02-03T01:05:39.247335Z","times_seen":1197,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:34.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:26:19 GMT\r\nexpires: Fri, 23 Oct 2026 17:26:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 266415\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-06T10:11:42.544918Z","times_seen":718473,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/18/a9/3a/18a93a23640bef9e9db0605254fda42d/1756661839.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /cti/18/a9/3a/18a93a23640bef9e9db0605254fda42d/1756661839.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72107\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 17:37:19 GMT\r\netag: \"68b4884f-119ab\"\r\nexpires: Tue, 28 Oct 2025 19:26:32 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72107,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 15:11:41], progressive, precision 8, 320x240, components 3","md5":"d93418e60c08a4971076f1eeb64310a2","sha1":"6bd2c394ee81cda9c8178ad29dcc625434de82e2","sha256":"a05bb96b04f8e69521e9a34c26f9e6e56303a5cfda91bb6af42d0c07dd8a0d65","sha512":"ef95fc1bf232f9c7471931ce073aa2749a8979d63d8a9d05c8685d135e7b1e9b12d4e29225b11ab1a302b4a2243ce5d8a745e45dd1a24f66b0c48bce6ab48bf1","ssdeep":"1536:QLZxtWoLZxtWzKw/QcYLEJMbqp3uZXCNnvoqFoTTiALH6Jm2cEG:QVBVpw/Xufbq1uZXCQTTRLHvbEG","tlshash":"9563f13e6b49af33f4c757b468f8dbd1e3014ed85a7310a5798c29923b31692cb4d582","first_seen":"2025-09-02T18:27:26.477089Z","last_seen":"2026-04-05T23:24:34.767286Z","times_seen":1288,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":75,"dns":31,"connect":19,"send":0,"wait":41,"receive":24,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8501-13365\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TqjBOuhoYNW4VcrU9bz3DfaNjyGgu%2BuscoBF9u3ce3GeHND0xIPi39Y2pXKwnfgIZ76ds251st5pHCVjU%2BhdjI477G92RCaBNnXcCjDttuo%3D\"}]}\r\ncf-ray: 994c58933b2da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5982c5377696d20476871062646b253f","sha1":"8bf2c93fa9ccc908f7df0fb7abb911bbac3e4242","sha256":"4e23a6449e6ef4614f0107cecf5c9eda75d2041c7c71f4a55d45f2a7e75450f4","sha512":"92592dac2a817293e8ec1d94bf99df639626a90d524420b01a12210398927c0650cc26fa8e730300096b29961563aa02efb707478c6d51ac8616bb1bde5a0cb2","ssdeep":"384:jvuAuF81dghu3uFlZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uhu7uNKwZiMUL6Vpaj7F","tlshash":"1d731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-02-12T20:28:38Z","last_seen":"2026-04-06T10:17:28.893529Z","times_seen":6278,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/6c/eb/24/6ceb2451484515036a0e73aa3dcbf9d2be06a543ac8b41190106ef73c3d85811.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /si/6c/eb/24/6ceb2451484515036a0e73aa3dcbf9d2be06a543ac8b41190106ef73c3d85811.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 50112\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 02 Jun 2025 17:21:13 GMT\r\netag: \"683ddd89-c3c0\"\r\nexpires: Tue, 28 Oct 2025 19:26:33 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b3a3706e80cfe44c216b222ab63beed0","sha1":"35257ba74c0fba1421e8640c703e0ba3f6ecaa6c","sha256":"ea864866dbb5b85fb1c99a722b0f392d65a0055d274af37a43f6efdc6d2f32bd","sha512":"0fbab5afcf280b019e48e016d110bf6701d97e522ad02007efe97b8823cb232c38b494ac78cf941a7174048d6a30524da05c8f05a905d389a94637763f45ddd9","ssdeep":"768:OUkLMzn5nUhDMFffhzucK2KpmOjAFIgHrYyS7Zs2FS+h0wLzAnwug:OU08kD4fZqcopx+2cm8E","tlshash":"c523029888c2587a5e8982d5f8bde5c1f0745b0bd3da06043ca1b1e5aadc3ea73d8479","first_seen":"2025-10-16T16:32:45.516653Z","last_seen":"2025-10-30T07:31:21.678515Z","times_seen":166,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extendedcontaminaterigorous.com/impr.gif?sid=H4sIAAAAAAAC_1RST2gkxRut3p3T_g4_1MWTyJxEQSbdM5354wqrcc2yuG6y2UhAEamuqp6Uqelqq7qnJ4OHYFByHNCDepDOm2Tjn0V0TwsqLBMvEhDskxE2IF4EDx6EPYr07ED0g_6-9_H68N776r3d9IQ0kNLj5Zf1UCpF5-ZrbvXJNRlxndnqtdWq59bcC9U1GTX9C9VB2Uz_Ga_h19ynqpcF29BzdddzXc_1qovSiFAP5qYsZHyr49U6bs2v17x5HwPz392mDix1wPsn5GFIXvz_t_A1SDZB1PvqkrAbiY6ffrGXKppogz4_eCXaiHQWoXcKQ-MgjA5mf0PbgpAPz0BHBzMH0P290gECWZAzj95DEB3MZCLo7z9QGiiICAH_H7L-BEJNIOkETG9D8p8IwDiuLSHq3bymTUY3H7C0ZAtSuf8XZFaQyr3ziHpfLig5qN7QKk2kjiwGYQ45mEB2J4jTQyRDBzI7BEvegeQ_krn7VxH19pas0pA8n7qX4QTUOkjLTzpIQwdp7KDHj6u-2_aZRxvNsMNZy_Wp73MRuJ123XVph7WQslLWCEk8AlMjMLOF2GxhQ45g0ruw6zksd2CTgjjXt9DnOTJBkFmCjBJkkiBLCLJ-vs-Vrdv8Jlc2DbzZrM9mIx_rpLtL93XSFREBNSMYnu_J-C27DZacHQ9Dy8e6bDRI8jENeL4bn5CHytScnegAG-K4GviiEbRbwueumG93PN4IwrZHKWt1vKDZ6sDKHNKemQYylAW5_OxtxLIgT7z9JwJ6CKsOweRjoKkHmuWg6zmG0W1Opdrksitssp4GNaZ74DpHnFSQbDq76oQ8Ml5ZXbg7PeEb7x9DsKOLn9y5_se7j98BMzlik-NN-T1BV-2MV3RG9lZ0ZsnXS3Eie3JIy_PeSGgizn7-ktjMtOFXLtnRZ8-zkijhrVVhk6s04jLqWvLFguRcmEVtmCDfXbFrIlhO7fpCaqI0vrr8wuKVXmyEtVJHE1BZkHP4BkwW5Pzir9On23yuBRZvwcanOq0mCOKzUJJAiSMyK9Agh_3XHpziXbuDrqmAJtuIejn6Jkdf5aBqBJueGyexObr4w0dlfYxAVcaBMpW9QBn1QUFe_fRiGdYv08QK8vrP38LK42rYEHXmuu1W02u0Q-E1fM7C-bbf4U3qNhoCiS3W_05__ycAAP__zXFDTGwEAAA=","fqdn":"extendedcontaminaterigorous.com","domain":"extendedcontaminaterigorous.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"extendedcontaminaterigorous.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 08:07:01 GMT","end":"Sun, 11 Jan 2026 08:07:00 GMT"},"fingerprint":{"sha1":"D7:E2:5F:F2:E3:DA:A6:33:C6:7F:C7:8E:D1:14:9F:C4:60:AE:E4:92","sha256":"BD:BC:AA:E9:A0:1B:66:AB:7E:8C:1E:2D:DF:76:AD:5D:5C:10:30:79:DD:26:59:68:55:1D:AA:4F:C7:36:99:E4"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RST2gkxRut3p3T_g4_1MWTyJxEQSbdM5354wqrcc2yuG6y2UhAEamuqp6Uqelqq7qnJ4OHYFByHNCDepDOm2Tjn0V0TwsqLBMvEhDskxE2IF4EDx6EPYr07ED0g_6-9_H68N776r3d9IQ0kNLj5Zf1UCpF5-ZrbvXJNRlxndnqtdWq59bcC9U1GTX9C9VB2Uz_Ga_h19ynqpcF29BzdddzXc_1qovSiFAP5qYsZHyr49U6bs2v17x5HwPz392mDix1wPsn5GFIXvz_t_A1SDZB1PvqkrAbiY6ffrGXKppogz4_eCXaiHQWoXcKQ-MgjA5mf0PbgpAPz0BHBzMH0P290gECWZAzj95DEB3MZCLo7z9QGiiICAH_H7L-BEJNIOkETG9D8p8IwDiuLSHq3bymTUY3H7C0ZAtSuf8XZFaQyr3ziHpfLig5qN7QKk2kjiwGYQ45mEB2J4jTQyRDBzI7BEvegeQ_krn7VxH19pas0pA8n7qX4QTUOkjLTzpIQwdp7KDHj6u-2_aZRxvNsMNZy_Wp73MRuJ123XVph7WQslLWCEk8AlMjMLOF2GxhQ45g0ruw6zksd2CTgjjXt9DnOTJBkFmCjBJkkiBLCLJ-vs-Vrdv8Jlc2DbzZrM9mIx_rpLtL93XSFREBNSMYnu_J-C27DZacHQ9Dy8e6bDRI8jENeL4bn5CHytScnegAG-K4GviiEbRbwueumG93PN4IwrZHKWt1vKDZ6sDKHNKemQYylAW5_OxtxLIgT7z9JwJ6CKsOweRjoKkHmuWg6zmG0W1Opdrksitssp4GNaZ74DpHnFSQbDq76oQ8Ml5ZXbg7PeEb7x9DsKOLn9y5_se7j98BMzlik-NN-T1BV-2MV3RG9lZ0ZsnXS3Eie3JIy_PeSGgizn7-ktjMtOFXLtnRZ8-zkijhrVVhk6s04jLqWvLFguRcmEVtmCDfXbFrIlhO7fpCaqI0vrr8wuKVXmyEtVJHE1BZkHP4BkwW5Pzir9On23yuBRZvwcanOq0mCOKzUJJAiSMyK9Agh_3XHpziXbuDrqmAJtuIejn6Jkdf5aBqBJueGyexObr4w0dlfYxAVcaBMpW9QBn1QUFe_fRiGdYv08QK8vrP38LK42rYEHXmuu1W02u0Q-E1fM7C-bbf4U3qNhoCiS3W_05__ycAAP__zXFDTGwEAAA= HTTP/1.1\r\nHost: extendedcontaminaterigorous.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25718439=1; nlecb4e3b87e4d0e5891d3bf81aac791b679=[5941311,6263770,6263769]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+fcdeee89a754a9395b437cd4e817f63e=6263769; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\niprc_l:6263769=1; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: extendedcontaminaterigorous.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 630316aa6e1e40aa6d73192b26ae730f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":642,"timings":{"blocked":255,"dns":1,"connect":95,"send":0,"wait":99,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extendedcontaminaterigorous.com/impr.gif?sid=H4sIAAAAAAAC_1RST2gkxRut3t_wO6wH0RVPHuYkKjLpnulkZlxhMa67BGMSs5GAIlJdVT0pU93VVnVPTwYPwYAETwN6UC923iQb_yyie1ZZJl5kQbBPRtxcvHgTEfYo0slA9IP6_tSrw3vvq3f3shPSQkaPV17SQ6kUnZltuPUn1mXMdW7rS2t1z224l-vrMp7zL9cHVTL9Z7yW33CfrF8XbFPPNF3PdT3Xq1-TRoR6MHOKQia3ul6j6zb8ZsOb9TEw_51t5sBSB7x_Qh6G5OWDv4WvQbIJ4uirq8Jupjp5-oUoUzTVBn1--Eq8Ges8RnTehsZBGB9OX0PbkpAPL0DHh1MF0P39SgECWZILj95DEB9OaSLoH5wxDRREjIA_gLw_gVATSDoB0zuQ_CcCMI6lZcTRzSVtcrp1htIKLUnt_l-QeUlq9x5BHH05r-SgfkOrLJU6thiEBeRgAtmbIMmOkA4dyPwILH0Hkv9IZu4vIo72l63SkLw4VS_DCah1kFVHOshCB1niIOLHdd_t-Myjrbmwy1nb9anvcxG43U7TdWmXtZGxitYIaTICUyMws43EbGNTjmCyO7AbBSx3YNOSOC9vo88L5IIgtwQ5JcglQZ4S5P3igCvbtMVNrmwWeNPanNZWMdZpb48e6LQnYgJqRjC82JfJW3YHLP3feBhaPtZVokFajGnAi73khDxUuebsxofYFMf1wBetoNMWPnfFbKfr8VYQdjxKWbvrBXPtLqwsIO2FU0OGsiTXn72NRJbk8bf_QECPYNURmHwMNPNA8wJ0o8Awvs2pVFtc9oRNN7KgwXQErgskaQ3plrOnTsil8era_J3TFb7-8zcQ7C6ZBpgpkJgCb8rvCXpqd7yqc7K_qnNLvl5OUhnJIa3WeyOlqfj_5y-KrVwbvnDVjj57jlVA1d5aEzZdpDGXcc-SL-Yl58Jc04YJ8u2CXRfBSmY35jMTZ8niyvPXFqLECGuljiegsiQX_3wPTJbk0nefnH7d2ad-BUu2YZNznlYTBEkNShIocX5PgwL2X3Nw3u_ZXfRMDTTdQRwV6JsCfVWAqhFsdnGcJubulR8-quJjBKo2DpSp7QfKqA9K8uqnV0ryxvu_VOn4zDYrj-thSzSZ63bac16rEwqv5XMWznb8Lp-jbqslkNpy4-_s938CAAD__48zJ4ZsBAAA","fqdn":"extendedcontaminaterigorous.com","domain":"extendedcontaminaterigorous.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"extendedcontaminaterigorous.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 08:07:01 GMT","end":"Sun, 11 Jan 2026 08:07:00 GMT"},"fingerprint":{"sha1":"D7:E2:5F:F2:E3:DA:A6:33:C6:7F:C7:8E:D1:14:9F:C4:60:AE:E4:92","sha256":"BD:BC:AA:E9:A0:1B:66:AB:7E:8C:1E:2D:DF:76:AD:5D:5C:10:30:79:DD:26:59:68:55:1D:AA:4F:C7:36:99:E4"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RST2gkxRut3t_wO6wH0RVPHuYkKjLpnulkZlxhMa67BGMSs5GAIlJdVT0pU93VVnVPTwYPwYAETwN6UC923iQb_yyie1ZZJl5kQbBPRtxcvHgTEfYo0slA9IP6_tSrw3vvq3f3shPSQkaPV17SQ6kUnZltuPUn1mXMdW7rS2t1z224l-vrMp7zL9cHVTL9Z7yW33CfrF8XbFPPNF3PdT3Xq1-TRoR6MHOKQia3ul6j6zb8ZsOb9TEw_51t5sBSB7x_Qh6G5OWDv4WvQbIJ4uirq8Jupjp5-oUoUzTVBn1--Eq8Ges8RnTehsZBGB9OX0PbkpAPL0DHh1MF0P39SgECWZILj95DEB9OaSLoH5wxDRREjIA_gLw_gVATSDoB0zuQ_CcCMI6lZcTRzSVtcrp1htIKLUnt_l-QeUlq9x5BHH05r-SgfkOrLJU6thiEBeRgAtmbIMmOkA4dyPwILH0Hkv9IZu4vIo72l63SkLw4VS_DCah1kFVHOshCB1niIOLHdd_t-Myjrbmwy1nb9anvcxG43U7TdWmXtZGxitYIaTICUyMws43EbGNTjmCyO7AbBSx3YNOSOC9vo88L5IIgtwQ5JcglQZ4S5P3igCvbtMVNrmwWeNPanNZWMdZpb48e6LQnYgJqRjC82JfJW3YHLP3feBhaPtZVokFajGnAi73khDxUuebsxofYFMf1wBetoNMWPnfFbKfr8VYQdjxKWbvrBXPtLqwsIO2FU0OGsiTXn72NRJbk8bf_QECPYNURmHwMNPNA8wJ0o8Awvs2pVFtc9oRNN7KgwXQErgskaQ3plrOnTsil8era_J3TFb7-8zcQ7C6ZBpgpkJgCb8rvCXpqd7yqc7K_qnNLvl5OUhnJIa3WeyOlqfj_5y-KrVwbvnDVjj57jlVA1d5aEzZdpDGXcc-SL-Yl58Jc04YJ8u2CXRfBSmY35jMTZ8niyvPXFqLECGuljiegsiQX_3wPTJbk0nefnH7d2ad-BUu2YZNznlYTBEkNShIocX5PgwL2X3Nw3u_ZXfRMDTTdQRwV6JsCfVWAqhFsdnGcJubulR8-quJjBKo2DpSp7QfKqA9K8uqnV0ryxvu_VOn4zDYrj-thSzSZ63bac16rEwqv5XMWznb8Lp-jbqslkNpy4-_s938CAAD__48zJ4ZsBAAA HTTP/1.1\r\nHost: extendedcontaminaterigorous.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25718439=1; nlecb4e3b87e4d0e5891d3bf81aac791b679=[5941311,6263770,6263769]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: extendedcontaminaterigorous.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 80783c93c40bec7d6c4c96696f4c917b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":263,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8501-10a1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Fizr4N%2FV1qWtJaVT43XpFNPtGMrqf%2BG%2FQ7RIn1fNNOw1LeC4ITwUDec%2B4Wiya1Cw9EiZKcPSmaX6HY1tgHzjjv%2FRoQgrg03pefY4txe840%3D\"}]}\r\ncf-ray: 994c589248aea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4257,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"48c6473a6f95c70089437b6e14dba5ff","sha1":"b5647ce85919828bbefc6e3beab3f022997c656e","sha256":"e50d9ec6f2bf5c91f7faa480f538e849774689ddada06f572919abe46d1e69eb","sha512":"99b8c7d13a01f6e600bd3d261292738833a07b08ebf637fd64c8a4fea7dfb3d3ec397ac5bf2a7ee7b83a851188a2b1d3c1fed4ae25ac1633463ca6abf249fa9d","ssdeep":"96:q4oLZBhjTMXPMXHbfy9inU8XHbfyRUuq4BPywWZ7LWHic1SH+r:MHRMX0XHTy9MXHTyvpyyYH+r","tlshash":"54918c6725631604b507d8192fe92b4363688113960ff5b63ec366088fcb98d96e739f","first_seen":"2024-08-02T20:34:42Z","last_seen":"2025-12-03T23:02:36.51757Z","times_seen":215,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":33,"dns":1,"connect":1,"send":0,"wait":488,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/81/79/8e/81798e42dbdf5b40d74fb93e1530c3b7/1698745431.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 15:30:46 GMT","end":"Tue, 06 Jan 2026 16:29:13 GMT"},"fingerprint":{"sha1":"CE:BB:4F:68:2C:89:90:90:9F:0D:E4:DC:37:55:B5:DC:41:49:D6:F9","sha256":"52:3F:5E:43:C5:77:DF:EF:E5:AE:11:CA:C1:74:9E:6B:A8:63:B6:7A:C9:7F:8F:58:EF:05:C6:35:2F:C7:D2:9B"}}},"request":{"raw":"GET /sb/au/81/79/8e/81798e42dbdf5b40d74fb93e1530c3b7/1698745431.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Oct 2023 09:43:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mHa0a6NTS%2FGMVSHchQPS%2B1k8xUO1nmKoQy%2FL5V0eh91iWW%2FxmrIRKiJ127eBJ5G0IiMniJGB2aRM%2BvmX0nlvlNdIkhc7bAl2ygDhP7m%2F0w%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 994c58924aa40883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1812,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"de976c8d71dbcc86f67097cd40d8bb99","sha1":"121b4ee47e41a48329d5a2d9ef846910965a513a","sha256":"e664e9faab3c92b18fdee9c88ab94f056bfdee47414bac190a1d7b5e17378634","sha512":"d192196b5b063c6aed0c0b8509055f4a5cae987c5ae7e3bd9883fa9bf5e0cb3fb61120b9baf9ebe4425d56d27dbe3d295691e53dcd3a230a6bfd72fa65351d52","ssdeep":"","tlshash":"00317c7518f8d93312d290947b312f2bae81d643894b491173bc46548f97ed9cc67007","first_seen":"2024-08-04T23:42:22Z","last_seen":"2025-12-03T23:02:36.5671Z","times_seen":263,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:34.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:26:19 GMT\r\nexpires: Fri, 23 Oct 2026 17:26:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 266415\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-06T10:11:42.544918Z","times_seen":718473,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":106,"dns":0,"connect":20,"send":0,"wait":8,"receive":5,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:34.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:26:19 GMT\r\nexpires: Fri, 23 Oct 2026 17:26:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 266415\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-06T10:11:42.544918Z","times_seen":718473,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/sbar.json?key=15096cf1d35bf7379d2c1a7d11e6d0a2\u0026uuid=afbf4133-260a-41f8-aa0a-e7cc8e563dc9%3A2%3A1","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /sbar.json?key=15096cf1d35bf7379d2c1a7d11e6d0a2\u0026uuid=afbf4133-260a-41f8-aa0a-e7cc8e563dc9%3A2%3A1 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4174\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://capchashield.com\r\nAccess-Control-Allow-Credentials: true\r\nVary: Accept-Encoding\r\nSet-Cookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; expires=Sun, 02 Nov 2025 19:26:32 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\nu_pl25724666=1; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\nslec15096cf1d35bf7379d2c1a7d11e6d0a2=[6243696]; expires=Sun, 26 Oct 2025 19:26:37 GMT; path=/; secure; SameSite=None\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e89876025fa06e7a4e76c2c98c542f29\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6520,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"7e112a6ca695493ab5cb33360fd7df3b","sha1":"4962ab3ac97985b82ce838e2ae6a9b716ff97b27","sha256":"0b2a9aefa2e3ab15a636422fe540df0af9468ed0671422018336b32e11c44fd7","sha512":"cc096a95eb41cc2b4c2a5d914651a8b47a90c3ee8f0685c05d5b0a8f26753820bea7dbfa4587d959b1da1e3d44b690c9b23601ff767c9a5ed90c7fbe62822660","ssdeep":"192:9zDmoKEeaGVoKEeaG1uaRh8mikyMcSI8T:9zyLT9+SI8T","tlshash":"83d15c7f220f6c5285830d0567e83e75dc226c77c9586b494cbffd7f4062a452fa2251","first_seen":"2025-10-26T19:26:59.107176Z","last_seen":"2025-10-26T19:26:59.107176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":856,"timings":{"blocked":269,"dns":1,"connect":92,"send":0,"wait":304,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extendedcontaminaterigorous.com/impr.gif?sid=H4sIAAAAAAAC_1RSTWgkRRitzs5pPYgaPInMSRRk0j3TmR9XiMY1IRiTbDYSUESqu6onZXq62qrq6cnoIRiUHAf0oB6k8ybZ-LMsuqcFFZaJFwkI9skIG1i8CB48CHsU6dmB1Q_6-97H68N776sPD5JzUkNCz9ZelX0RhnRmtmKXn94UEZOpLq9slB27Yl8qb4qo7l4q94qmus85NbdiP1Ne5P62nKnajm07tlNeEIoHsjczZiHi6y2n0rIrbrXizLroqf_vOrGgqQXWPSePQrD84d-DNyD8EaLON5e53jYyfvblThJSIxW67Pi1aDuSaYTOAxgoC0F0PPkbUueEfDIFGR1PHEB2DwsH8EROph6_Ay86nsiE1z26r9QLwSN47CGk3RF4OIKgI_hyD4L9QgCfYWUVUefailQp3bnP0oLNSene3xBpTkp3phF1bsyHole-KsPECBlp9IIMojeCaI8QJycwfQsiPYFv3odgP5OZe8uIOoerOpQQLBu7F8EIVFtIik9YSAILSWyhw87Krt10fYfW6kGL-Q3bpa7LuGe3mlXbpi2_gcQvZA1g4gH8cABf7SJWu9gWA6jkNvRWBs0saJMT68ouuixDyglSTZBSglQQpIYg7WZHLNRVnV1joU48ZzKrk1nLhtK0D-iRNG0eEVA1gGLZoYjf0XvwzYVhP9BsKItGPZMNqceyg_icPFKkZu1Hx9jmZ2XP5TWv2eAus_lss-Wwmhc0HUr9Rsvx6o0WtMgg9NQ4kL7IyeLzNxGLnDz13l_w6Al0eAJfPAGaOKBpBrqVoR_dZFSEO0y0uTZbiVfxZQdMZohNCWbHOgjPyWPD9Y352-MTvvXRb-D-6dznt678-cGTt-CrDLHK8Lb4kaAd7g_XZUoO12WqybersREd0afFea8aaviFr17hO6lUbOmyHnz5ol8QBby-wbVZphETUVuTr-cFY1wtSOVz8sOS3uTeWqK35hMVJfHy2ksLS51Yca2FjEagIicX8R18kZPphbvjp1t_oQk_3oWOT-dM_-7ijel3oSWBF08hFAQhPyWTAvUy6P_s3gN8oPfRViVQs4eok6GrMnTDDDQcQCcXhyZWp3M_fVrUZ_DC0tALVenQC1X4cU5e_2JuHFbRznLy5q_fQ4uzclDjVd-2m426U2sG3Km5zA9mm26L1aldq3EYnW_9k_zxbwAAAP__4iJURWwEAAA=","fqdn":"extendedcontaminaterigorous.com","domain":"extendedcontaminaterigorous.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"extendedcontaminaterigorous.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 08:07:01 GMT","end":"Sun, 11 Jan 2026 08:07:00 GMT"},"fingerprint":{"sha1":"D7:E2:5F:F2:E3:DA:A6:33:C6:7F:C7:8E:D1:14:9F:C4:60:AE:E4:92","sha256":"BD:BC:AA:E9:A0:1B:66:AB:7E:8C:1E:2D:DF:76:AD:5D:5C:10:30:79:DD:26:59:68:55:1D:AA:4F:C7:36:99:E4"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSTWgkRRitzs5pPYgaPInMSRRk0j3TmR9XiMY1IRiTbDYSUESqu6onZXq62qrq6cnoIRiUHAf0oB6k8ybZ-LMsuqcFFZaJFwkI9skIG1i8CB48CHsU6dmB1Q_6-97H68N776sPD5JzUkNCz9ZelX0RhnRmtmKXn94UEZOpLq9slB27Yl8qb4qo7l4q94qmus85NbdiP1Ne5P62nKnajm07tlNeEIoHsjczZiHi6y2n0rIrbrXizLroqf_vOrGgqQXWPSePQrD84d-DNyD8EaLON5e53jYyfvblThJSIxW67Pi1aDuSaYTOAxgoC0F0PPkbUueEfDIFGR1PHEB2DwsH8EROph6_Ay86nsiE1z26r9QLwSN47CGk3RF4OIKgI_hyD4L9QgCfYWUVUefailQp3bnP0oLNSene3xBpTkp3phF1bsyHole-KsPECBlp9IIMojeCaI8QJycwfQsiPYFv3odgP5OZe8uIOoerOpQQLBu7F8EIVFtIik9YSAILSWyhw87Krt10fYfW6kGL-Q3bpa7LuGe3mlXbpi2_gcQvZA1g4gH8cABf7SJWu9gWA6jkNvRWBs0saJMT68ouuixDyglSTZBSglQQpIYg7WZHLNRVnV1joU48ZzKrk1nLhtK0D-iRNG0eEVA1gGLZoYjf0XvwzYVhP9BsKItGPZMNqceyg_icPFKkZu1Hx9jmZ2XP5TWv2eAus_lss-Wwmhc0HUr9Rsvx6o0WtMgg9NQ4kL7IyeLzNxGLnDz13l_w6Al0eAJfPAGaOKBpBrqVoR_dZFSEO0y0uTZbiVfxZQdMZohNCWbHOgjPyWPD9Y352-MTvvXRb-D-6dznt678-cGTt-CrDLHK8Lb4kaAd7g_XZUoO12WqybersREd0afFea8aaviFr17hO6lUbOmyHnz5ol8QBby-wbVZphETUVuTr-cFY1wtSOVz8sOS3uTeWqK35hMVJfHy2ksLS51Yca2FjEagIicX8R18kZPphbvjp1t_oQk_3oWOT-dM_-7ijel3oSWBF08hFAQhPyWTAvUy6P_s3gN8oPfRViVQs4eok6GrMnTDDDQcQCcXhyZWp3M_fVrUZ_DC0tALVenQC1X4cU5e_2JuHFbRznLy5q_fQ4uzclDjVd-2m426U2sG3Km5zA9mm26L1aldq3EYnW_9k_zxbwAAAP__4iJURWwEAAA= HTTP/1.1\r\nHost: extendedcontaminaterigorous.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25718439=1; nlecb4e3b87e4d0e5891d3bf81aac791b679=[5941311,6263770,6263769]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+ae5c303d7817444b0585d3429861436e=6263770; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\niprc_l:6263770=1; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 5\r\nHost: extendedcontaminaterigorous.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 53efb7948ff9559640495b93b3160296\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":1,"connect":94,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/ren.gif?sid=H4sIAAAAAAAC_1RST2gkxRutzi784OfBf4sH_8AcRBTMpHu6pzPtisG4myUYk5CN5OBBqquqJ2V6utqq7unJIBgMyB7Hm946b5INrsuiexeWiYeFgGALQg4bBE-ePAh7FJnJwOI7fN9rXh_ee199eZCfExc5PVv_QPVlHNO5Zt2uvb4lE64KU1vdrDl23b5a25KJ712t9cZDd99yXK9uv1G7IdiOmmvYjm07tlNbklpEqjc3USHTu4FTD-y616g7TQ89_d9vk1sw1ALvnpPnIHn19B_RR5BshKTz_TVhdjKVvnm9k8c0UxpdfvxhspOoIkHnCY20hSg5nv4NZSpCvp6BSo6nCaC6h-MECGVFZl54hDA5ntpE2D26cBrGEAlC_hSK7ggiHkHSEZjah-S_EIBxrK4h6dxeVbqguxcqHasVufz4b8iiIpcfXUHSubcYy17tporzTKrEoBeVkL0RZHuEND9B1rcgixOw7AtI_jOZe7yCpHO4ZmIFyc9epVEYeY7rzjZ8m856TtSapdSms2KesZZo-i5nwaQiGY1AzQxyYyGXFvLIQp5a6PCzmme3POZQ148CzuZtj3oeF6EdtBq2TQM2j5yNvQ-QpQOweACm95DqPezIAXT-AGa7hOEWTEbQ5SUKQVAYgoISFJKgyAiKbnnEY9Mw5W0emzx0prsx3W45VFn7gB6prC0SAqoH0Lw8lOmnZh8suzTsR4YP1XjQMCuHNOTlQXpOnh3Xan3zzv-wI85qrtf0ueCM8_nAFsJvRr4fOKI5HzS4z3gEI0tIMwNqLPRlRW68fR-prMhrn_2FkJ7AxCdg8mXQ_BXQogTdLtFP7nMq410u28Jk23lYZ6oDrkqk2WVku9ZBfE6eH25sLj6Y3Pjj6wkEO134nUwApkukusQn8ieCdnxruKEKcrihCkN-WEsz2ZF9Or7_zYxm4tKd98VuoTRfvmYG377LxsKY3t0UJluhCZdJ25DvFiXnQi8pzQT5cdlsiXA9N9uLuU7ydGX9vaXlTqqFMVIlI1BZkf8__BxMVuSK-9LkbfvPvAiW7sGkpwu_RRPAKIIwtRDLirhXHiIWpwv3qjvpOAMNSxhxSqZA-IQfmFtoaws020fSKdHVJbpxCRoPYPJLwyzVpwu_uhMgjK1hGGvrMIx1_NVFV0ae1ZqN0PVbLV9EPo9c7jZcHjRtEXg08L3AayIz1fY_-Z__BgAA__8kFOA5ggQAAA==","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RST2gkxRutzi784OfBf4sH_8AcRBTMpHu6pzPtisG4myUYk5CN5OBBqquqJ2V6utqq7unJIBgMyB7Hm946b5INrsuiexeWiYeFgGALQg4bBE-ePAh7FJnJwOI7fN9rXh_ee199eZCfExc5PVv_QPVlHNO5Zt2uvb4lE64KU1vdrDl23b5a25KJ712t9cZDd99yXK9uv1G7IdiOmmvYjm07tlNbklpEqjc3USHTu4FTD-y616g7TQ89_d9vk1sw1ALvnpPnIHn19B_RR5BshKTz_TVhdjKVvnm9k8c0UxpdfvxhspOoIkHnCY20hSg5nv4NZSpCvp6BSo6nCaC6h-MECGVFZl54hDA5ntpE2D26cBrGEAlC_hSK7ggiHkHSEZjah-S_EIBxrK4h6dxeVbqguxcqHasVufz4b8iiIpcfXUHSubcYy17tporzTKrEoBeVkL0RZHuEND9B1rcgixOw7AtI_jOZe7yCpHO4ZmIFyc9epVEYeY7rzjZ8m856TtSapdSms2KesZZo-i5nwaQiGY1AzQxyYyGXFvLIQp5a6PCzmme3POZQ148CzuZtj3oeF6EdtBq2TQM2j5yNvQ-QpQOweACm95DqPezIAXT-AGa7hOEWTEbQ5SUKQVAYgoISFJKgyAiKbnnEY9Mw5W0emzx0prsx3W45VFn7gB6prC0SAqoH0Lw8lOmnZh8suzTsR4YP1XjQMCuHNOTlQXpOnh3Xan3zzv-wI85qrtf0ueCM8_nAFsJvRr4fOKI5HzS4z3gEI0tIMwNqLPRlRW68fR-prMhrn_2FkJ7AxCdg8mXQ_BXQogTdLtFP7nMq410u28Jk23lYZ6oDrkqk2WVku9ZBfE6eH25sLj6Y3Pjj6wkEO134nUwApkukusQn8ieCdnxruKEKcrihCkN-WEsz2ZF9Or7_zYxm4tKd98VuoTRfvmYG377LxsKY3t0UJluhCZdJ25DvFiXnQi8pzQT5cdlsiXA9N9uLuU7ydGX9vaXlTqqFMVIlI1BZkf8__BxMVuSK-9LkbfvPvAiW7sGkpwu_RRPAKIIwtRDLirhXHiIWpwv3qjvpOAMNSxhxSqZA-IQfmFtoaws020fSKdHVJbpxCRoPYPJLwyzVpwu_uhMgjK1hGGvrMIx1_NVFV0ae1ZqN0PVbLV9EPo9c7jZcHjRtEXg08L3AayIz1fY_-Z__BgAA__8kFOA5ggQAAA== HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25724666=1; slec15096cf1d35bf7379d2c1a7d11e6d0a2=[6243696]; u_pl26820103=1; slec3456dedcdd790ee65f6691e5792d6cdf=[6243694]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 05e24b481380d347bdc976b5f9d24b15\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:34.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 12:57:40 GMT\r\nexpires: Fri, 23 Oct 2026 12:57:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 282534\r\nlast-modified: Mon, 08 Sep 2025 18:08:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-04-06T09:05:30.313317Z","times_seen":56223,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extendedcontaminaterigorous.com/ren.gif?sid=H4sIAAAAAAAC_1RST2gkxRut3t_wO6wH0RVPHuYkKjLpnumZTLvCYlx3WVyTmI0EFJGqrupJmZqutqp7ejJ4CAYkeBrQg3qx8ybZ-GcR3bPKMvEiC4J9MuLm4sWbiLBHkU4Goh_U96deHd57X727mx2TFjJ6tPySHkml6Fy74dafWJMx17mtL67WPbfhXqyvybjjX6wPq2QGz3gtv-E-Wb8qwg0913Q91_Vcr35FGhHp4dwJCpncCrxG4Db8ZsNr-xia_842c2CpAz44Jg9D8vLB36LXIMMp4v5Xl4XdSHXy9Av9TNFUGwz4wSvxRqzzGP2zNjIOovhg9hraloR8eA46PpgpgB7sVQrAZEnOPXoPLD6Y0QQb7J8yZQoiBuMPIB9MIdQUkk4R6m1I_hMBQo7FJcT9m4va5HTzFKUVWpLa_b8g85LU7j2CuP_lgpLD-g2tslTq2GIYFZDDKWRviiQ7RDpyIPNDhOk7kPxHMnf_OuL-3pJVGpIXJ-plNAW1DrLqSAdZ5CBLHPT5Ud13u37o0VYnCng47_rU97lgbtBtui4NwnlkYUVrjDQZI1RjhGYLidnChhzDZHdg1wtY7sCmJXFe3sKAF8gFQW4JckqQS4I8JcgHxT5XtmmLm1zZjHmz2pzVVjHRaW-X7uu0J2ICasYwvNiTyVt2G2H6v8kosnyiq0RZWkwo48VuckweqlxzduIDbIijOvNFi3Xnhc9d0e4GHm-xqOtRGs4HHuvMB7CygLTnTgwZyZJcffY2ElmSx9_-A4wewqpDhPIx0MwDzQvQ9QKj-DanUm1y2RM2Xc9YI9R9cF0gSWtIN51ddUwuTFZWF-6crPD1n7-BCO-SWSA0BRJT4E35PUFP7UxWdE72VnRuyddLSSr7ckSr9d5IaSr-__mLYjPXhl-7bMefPRdWQNXeWhU2vU5jLuOeJV8sSM6FuaJNKMi31-yaYMuZXV_ITJwl15efv3KtnxhhrdTxFFSW5Pyf7yGUJbnw3ScnX7f91K8Iky3Y5Iyn1QQsqUFJAiXO7ikrYP81s7N-1-6gZ2qg6TbifoGBKTBQBagaw2bnJ2li7l764aMqPgZTtQlTprbHlFEflOTVTy-V5I33f6nS0altVh7V203W6nS7HRF1eNTirWaLB21XBD4NOn7gt5Hacv3v7Pd_AgAA__9zW7dYbAQAAA==","fqdn":"extendedcontaminaterigorous.com","domain":"extendedcontaminaterigorous.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"extendedcontaminaterigorous.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 08:07:01 GMT","end":"Sun, 11 Jan 2026 08:07:00 GMT"},"fingerprint":{"sha1":"D7:E2:5F:F2:E3:DA:A6:33:C6:7F:C7:8E:D1:14:9F:C4:60:AE:E4:92","sha256":"BD:BC:AA:E9:A0:1B:66:AB:7E:8C:1E:2D:DF:76:AD:5D:5C:10:30:79:DD:26:59:68:55:1D:AA:4F:C7:36:99:E4"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RST2gkxRut3t_wO6wH0RVPHuYkKjLpnumZTLvCYlx3WVyTmI0EFJGqrupJmZqutqp7ejJ4CAYkeBrQg3qx8ybZ-GcR3bPKMvEiC4J9MuLm4sWbiLBHkU4Goh_U96deHd57X727mx2TFjJ6tPySHkml6Fy74dafWJMx17mtL67WPbfhXqyvybjjX6wPq2QGz3gtv-E-Wb8qwg0913Q91_Vcr35FGhHp4dwJCpncCrxG4Db8ZsNr-xia_842c2CpAz44Jg9D8vLB36LXIMMp4v5Xl4XdSHXy9Av9TNFUGwz4wSvxRqzzGP2zNjIOovhg9hraloR8eA46PpgpgB7sVQrAZEnOPXoPLD6Y0QQb7J8yZQoiBuMPIB9MIdQUkk4R6m1I_hMBQo7FJcT9m4va5HTzFKUVWpLa_b8g85LU7j2CuP_lgpLD-g2tslTq2GIYFZDDKWRviiQ7RDpyIPNDhOk7kPxHMnf_OuL-3pJVGpIXJ-plNAW1DrLqSAdZ5CBLHPT5Ud13u37o0VYnCng47_rU97lgbtBtui4NwnlkYUVrjDQZI1RjhGYLidnChhzDZHdg1wtY7sCmJXFe3sKAF8gFQW4JckqQS4I8JcgHxT5XtmmLm1zZjHmz2pzVVjHRaW-X7uu0J2ICasYwvNiTyVt2G2H6v8kosnyiq0RZWkwo48VuckweqlxzduIDbIijOvNFi3Xnhc9d0e4GHm-xqOtRGs4HHuvMB7CygLTnTgwZyZJcffY2ElmSx9_-A4wewqpDhPIx0MwDzQvQ9QKj-DanUm1y2RM2Xc9YI9R9cF0gSWtIN51ddUwuTFZWF-6crPD1n7-BCO-SWSA0BRJT4E35PUFP7UxWdE72VnRuyddLSSr7ckSr9d5IaSr-__mLYjPXhl-7bMefPRdWQNXeWhU2vU5jLuOeJV8sSM6FuaJNKMi31-yaYMuZXV_ITJwl15efv3KtnxhhrdTxFFSW5Pyf7yGUJbnw3ScnX7f91K8Iky3Y5Iyn1QQsqUFJAiXO7ikrYP81s7N-1-6gZ2qg6TbifoGBKTBQBagaw2bnJ2li7l764aMqPgZTtQlTprbHlFEflOTVTy-V5I33f6nS0altVh7V203W6nS7HRF1eNTirWaLB21XBD4NOn7gt5Hacv3v7Pd_AgAA__9zW7dYbAQAAA== HTTP/1.1\r\nHost: extendedcontaminaterigorous.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25718439=1; nlecb4e3b87e4d0e5891d3bf81aac791b679=[5941311,6263770,6263769]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: extendedcontaminaterigorous.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 78ee3c00523ed51b248052899390c577\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/d8/b1/09/d8b109165fc0ec08002c14fd9e81f6ece67b955e786b918b73abb33e5be5188f.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /si/d8/b1/09/d8b109165fc0ec08002c14fd9e81f6ece67b955e786b918b73abb33e5be5188f.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 57237\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 11 May 2025 14:02:30 GMT\r\netag: \"6820adf6-df95\"\r\nexpires: Tue, 28 Oct 2025 19:26:32 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced","md5":"423a240fbfb182d7805dad3bb9e822bb","sha1":"6a853689b2cc95a6c36b98e6938e598bf2a28d52","sha256":"da19475c70c6669a83473eb52dec1feb61e629e374fdd426dd02024080d0b1a6","sha512":"98e063f429420821aa55688891aa4426d16d9e7ffa44f92f8d9d7f3e3870007872a66a718185428f197db14d070b7254e92a2cc7734cc54c39034c808daa7c8f","ssdeep":"1536:BP5oFAaPeX990yL036TelNvY6lEFLXmLw2JR:FWqaPeXz0yLDe7luXyH","tlshash":"ab430224ff03e61784be24af91eae88f1f6421bfb5b092807770221445b7c6b4282463","first_seen":"2025-05-16T16:44:08.672031Z","last_seen":"2026-04-06T10:34:26.998812Z","times_seen":3555,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":87,"dns":28,"connect":22,"send":0,"wait":58,"receive":13,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 Aug 2025 00:07:02 GMT","end":"Sat, 29 Nov 2025 00:07:01 GMT"},"fingerprint":{"sha1":"AD:4F:15:9E:60:62:A7:16:BA:4B:37:64:C6:01:6B:2B:99:47:89:BE","sha256":"44:74:EA:98:35:48:9C:28:63:20:61:17:18:F6:2B:0A:57:68:36:F4:EF:B0:67:1E:C0:7C:41:30:13:2C:02:F1"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 234dffe43586e8c7f5a5a881a1d01d6c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":17,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/ren.gif?sid=H4sIAAAAAAAC_1RSPWgcxx-dlV39_0W-TJp8cEUICUSn3du9j40LEUW2MXFsISuoSBFmZ2ZPk9vbWc_sx-kIRERgVF66lKt3kkUcY5IqVcCcUhgEgWwgoMIikCZdioCLFCHc6cDkFb_fW94W77353d3PzoiLjJ6ufaiGMoroUrNu197alDFXhand3Kg5dt2-XNuUccu7XBtMh87fdVyvbr9duyZYTy01bMe2HdupXZVahGqwNFMhkwe-U_ftuteoO00PA_3fb5NZMNQCz8_Ii5C8eu738GNINkHc_3ZVmF6qkneu9LOIpkoj50cfxb1YFTH6z2ioLYTx0fxvKFMR8tUCVHw0TwCVH0wTIJAVWXj5CYL4aG4TQX547jSIIGIE_P8o8glENIGkEzC1C8l_JgDjuHkLcf_eTaULun2u0qlakYtP_4IsKnLxySXE_YcrkRzUbqsoS6WKDQZhCTmYQHYnSLJjpEMLsjgGS7-A5D-Rpac3EPcPbplIQfLTN2gYhJ7juouNlk0XPSfsLFJq00XRZqwjmi2XM39WkQwnoGYBmbGQSQtZaCFLLPT5ac2zOx5zqNsKfc7atkc9j4vA9jsN26Y-ayNjU-8jpMkILBqB6R0kegc9OYLOHsFslTDcgkkJcl6iEASFISgoQSEJipSgyMtDHpmGKe_xyGSBM9-N-XbLsUq7-_RQpV0RE1A9gublgUzumF2w9MJ4GBo-VtNBg7Qc04CX-8kZeWFaq7V392_0xGnNadp-i4UOd5tB2HbbPm8wh7a544gWt2kDRpaQZgHUWBjKilxbXUUiK_LmZ38ioMcw0TGYfBU0ew20KEG3Sgzj7-9kkvVyoWW4bYTOJROmzlQfXJVI0otIt6396Iy8NF7fWHk0e-hPriQQ7GT5NzIDmC6R6BKfyh8JutHeeF0V5GBdFYZ8dytJZV8O6fQIbqc0FRfufyC2C6X59VUz-vo9NhWm9MGGMOkNGnMZdw35ZkVyLvRVpZkgP1w3myJYy8zWSqbjLLmx9v7V6_1EC2OkiiegsiL_e_w5mKzIJfeV2YG3nn8dLNmBSU6Wfw1ngFEEQWIhkhVxLz1GJE6WH1b3k2kGGpQw4oTMgeAZ3zd76GoLNN1F3C-R6xJ5VIJGI5jswjhN9MnyL-4MCCJrHETaOggiHX153pWRp7VmI3BbnU5LhC0eutxtuNxv2sL3qN_yfK-J1FRb_2R__BsAAP__peuHXYcEAAA=","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSPWgcxx-dlV39_0W-TJp8cEUICUSn3du9j40LEUW2MXFsISuoSBFmZ2ZPk9vbWc_sx-kIRERgVF66lKt3kkUcY5IqVcCcUhgEgWwgoMIikCZdioCLFCHc6cDkFb_fW94W77353d3PzoiLjJ6ufaiGMoroUrNu197alDFXhand3Kg5dt2-XNuUccu7XBtMh87fdVyvbr9duyZYTy01bMe2HdupXZVahGqwNFMhkwe-U_ftuteoO00PA_3fb5NZMNQCz8_Ii5C8eu738GNINkHc_3ZVmF6qkneu9LOIpkoj50cfxb1YFTH6z2ioLYTx0fxvKFMR8tUCVHw0TwCVH0wTIJAVWXj5CYL4aG4TQX547jSIIGIE_P8o8glENIGkEzC1C8l_JgDjuHkLcf_eTaULun2u0qlakYtP_4IsKnLxySXE_YcrkRzUbqsoS6WKDQZhCTmYQHYnSLJjpEMLsjgGS7-A5D-Rpac3EPcPbplIQfLTN2gYhJ7juouNlk0XPSfsLFJq00XRZqwjmi2XM39WkQwnoGYBmbGQSQtZaCFLLPT5ac2zOx5zqNsKfc7atkc9j4vA9jsN26Y-ayNjU-8jpMkILBqB6R0kegc9OYLOHsFslTDcgkkJcl6iEASFISgoQSEJipSgyMtDHpmGKe_xyGSBM9-N-XbLsUq7-_RQpV0RE1A9gublgUzumF2w9MJ4GBo-VtNBg7Qc04CX-8kZeWFaq7V392_0xGnNadp-i4UOd5tB2HbbPm8wh7a544gWt2kDRpaQZgHUWBjKilxbXUUiK_LmZ38ioMcw0TGYfBU0ew20KEG3Sgzj7-9kkvVyoWW4bYTOJROmzlQfXJVI0otIt6396Iy8NF7fWHk0e-hPriQQ7GT5NzIDmC6R6BKfyh8JutHeeF0V5GBdFYZ8dytJZV8O6fQIbqc0FRfufyC2C6X59VUz-vo9NhWm9MGGMOkNGnMZdw35ZkVyLvRVpZkgP1w3myJYy8zWSqbjLLmx9v7V6_1EC2OkiiegsiL_e_w5mKzIJfeV2YG3nn8dLNmBSU6Wfw1ngFEEQWIhkhVxLz1GJE6WH1b3k2kGGpQw4oTMgeAZ3zd76GoLNN1F3C-R6xJ5VIJGI5jswjhN9MnyL-4MCCJrHETaOggiHX153pWRp7VmI3BbnU5LhC0eutxtuNxv2sL3qN_yfK-J1FRb_2R__BsAAP__peuHXYcEAAA= HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25724666=1; slec15096cf1d35bf7379d2c1a7d11e6d0a2=[6243696]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2f498044fc6c3848172d4d855f02b0fa\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=afbf4133-260a-41f8-aa0a-e7cc8e563dc9\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=15096cf1d35bf7379d2c1a7d11e6d0a2\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=19","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 21:53:17 GMT","end":"Fri, 28 Nov 2025 21:53:16 GMT"},"fingerprint":{"sha1":"AA:2A:FC:C2:EE:01:8F:55:3F:19:46:84:4A:C8:A0:95:62:50:5C:A3","sha256":"3D:8C:1A:2E:1F:32:30:D4:D8:4F:D2:FB:CC:99:F1:9C:05:E5:7B:D8:9D:7D:24:86:AD:C5:1E:62:55:44:A4:CA"}}},"request":{"raw":"GET /pxf.gif?uuid=afbf4133-260a-41f8-aa0a-e7cc8e563dc9\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=15096cf1d35bf7379d2c1a7d11e6d0a2\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=19 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 74bc89c1e2650f02b375b819412a83e9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":289,"dns":1,"connect":98,"send":0,"wait":95,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxtPmdq9j%2Bia%2BymfBl0Rf%2FppNX1Cmod4U4tNm2gQTqZAaTYbaKpAY9jaT0EP9fdfX7BQm2Zf4bKgZvMHLOmXlZtWCsurs3S4F8xUD9Fjl0E%3D\"}]}\r\nage: 144134\r\ncf-cache-status: HIT\r\netag: W/\"65aa8501-149a0\"\r\ncontent-encoding: br\r\ncf-ray: 994c5892a9baa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-04-06T10:17:28.921052Z","times_seen":10477,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:31.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.5.1.slim.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-11abc\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 26 Oct 2025 19:26:31 GMT\r\nage: 4095338\r\nx-served-by: cache-lga21954-LGA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 22, 49760\r\nx-timer: S1761506791.372047,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 24606\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":72380,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65245)","md5":"fb8409a092adc6e8be17e87d59e0595e","sha1":"cf8d9821552d51bb50ce572e696aba1309065800","sha256":"e3e5f35d586c0e6a9a9d7187687be087580c40a5f8d0e52f0c4053bbc25c98db","sha512":"fc35d35ebea742874c522abe2142580add8f3ce523ac727dc05aeaa49dd79203cd39955f32893b711c3a092c72090c579faa339444ac4a1d7fb0c093175acbfe","ssdeep":"1536:KDFXTRMYFbeDtyZxg6V4mMeexs1Lzu3JlQ5uCe/ZiEm4kWpfBogmzmPx3SgQ47Gl:AuIy3JlQ5cF7m+SgQ47GKA","tlshash":"7f6318dd72c6b07357ab70b9007f610bf13618996c4e4450f129e8e9bc78a4a827bf6d","first_seen":"2023-03-07T01:03:10Z","last_seen":"2026-04-06T09:59:53.510711Z","times_seen":7054,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":60,"dns":19,"connect":14,"send":0,"wait":14,"receive":4,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uncannydaytime.com/pixel/nvwbdp?key=b4e3b87e4d0e5891d3bf81aac791b679","fqdn":"uncannydaytime.com","domain":"uncannydaytime.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uncannydaytime.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 05:45:03 GMT","end":"Thu, 08 Jan 2026 05:45:02 GMT"},"fingerprint":{"sha1":"01:A9:31:E5:04:18:A7:78:82:B6:3D:C5:0A:FA:99:E9:0C:9D:BA:CA","sha256":"FA:33:00:16:53:27:4A:B6:24:94:93:AD:E3:F5:5C:2A:B9:04:D0:13:C9:0A:C5:ED:49:AC:F8:B7:BA:BA:2C:43"}}},"request":{"raw":"GET /pixel/nvwbdp?key=b4e3b87e4d0e5891d3bf81aac791b679 HTTP/1.1\r\nHost: uncannydaytime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: uncannydaytime.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":290,"dns":13,"connect":91,"send":0,"wait":98,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"uncannydaytime.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"uncannydaytime.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F81%2F79%2F8e%2F81798e42dbdf5b40d74fb93e1530c3b7%2F1698745431.html\u0026l=1812\u0026fd=158","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F81%2F79%2F8e%2F81798e42dbdf5b40d74fb93e1530c3b7%2F1698745431.html\u0026l=1812\u0026fd=158 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25724666=1; slec15096cf1d35bf7379d2c1a7d11e6d0a2=[6243696]; u_pl26820103=1; slec3456dedcdd790ee65f6691e5792d6cdf=[6243694]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:34.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 12:57:40 GMT\r\nexpires: Fri, 23 Oct 2026 12:57:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 282534\r\nlast-modified: Mon, 08 Sep 2025 18:08:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-04-06T09:05:30.313317Z","times_seen":56223,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":77,"dns":0,"connect":7,"send":0,"wait":8,"receive":3,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F81%2F79%2F8e%2F81798e42dbdf5b40d74fb93e1530c3b7%2F1698745431.html\u0026l=1812\u0026fd=158","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F81%2F79%2F8e%2F81798e42dbdf5b40d74fb93e1530c3b7%2F1698745431.html\u0026l=1812\u0026fd=158 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25724666=1; slec15096cf1d35bf7379d2c1a7d11e6d0a2=[6243696]; u_pl26820103=1; slec3456dedcdd790ee65f6691e5792d6cdf=[6243694]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/pixel/sbs?c=1","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25724666=1; slec15096cf1d35bf7379d2c1a7d11e6d0a2=[6243696]; u_pl26820103=1; slec3456dedcdd790ee65f6691e5792d6cdf=[6243694]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":566,"timings":{"blocked":281,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:31.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 03:23:24 GMT","end":"Mon, 08 Dec 2025 04:23:14 GMT"},"fingerprint":{"sha1":"2D:94:96:D6:08:54:E8:A2:4A:A9:D7:90:E4:75:91:6B:AC:CB:AA:24","sha256":"24:50:0C:86:73:A4:E6:6C:AD:20:57:80:86:4E:19:B1:E9:76:7F:2A:BE:CC:E9:75:B2:07:67:62:FA:9B:E7:8D"}}},"request":{"raw":"GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 994c5885df6fb50b-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"816af0eddd3b4822c2756227c7e7b7ee\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:11 GMT\r\ncdn-cachedat: 05/24/2025 18:37:33\r\ncdn-proxyver: 1.28\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 865\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 8c9ee707fb48fa822a55a2f5adf3f7c8\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 316173\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160302,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65326)","md5":"816af0eddd3b4822c2756227c7e7b7ee","sha1":"c470239d4c7db36d56dc3a74a080c62218c6edc4","sha256":"5b0fbe5b7ad705f6a937c4998ad02f73d8f0d976fe231b74aef0ec996990c93a","sha512":"32844d968c5b4ad05c0fccf733fd819a74feae0e08b0cc4f917686876cc3e8b18d34513cd16de89ec02145c30032b4a8c962fdc43ec4aedd267a7eef47c2d466","ssdeep":"1536:V47CIJ0T2r+ryEIA1pDEBi8yNcuSEcA1/uypq3SYiLENM6HN26b:S7VSGGq3SYiLENM6HN26b","tlshash":"0bf353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf827376487892c70a73e4c","first_seen":"2023-04-05T03:15:58Z","last_seen":"2026-04-06T09:33:15.627337Z","times_seen":12384,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":34,"dns":20,"connect":1,"send":0,"wait":21,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 26 Oct 2025 19:26:33 GMT\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a90fc2bf15e304ef3fa4e7f75b6a8608","sha1":"0f8c2853b49a7c206d75af99117482d80a60f869","sha256":"6e10be4b6befecf6f3d1ae34b727939e6da334a1f2d815fd325ba9c455520772","sha512":"0d1a14e11c436dadf51cc489592867eaff3cae2c4a95748d2a25614c984560ad3588fb95e2aaafd4060d4954594951d09e71ab36e9859fb8590198811f156fc4","ssdeep":"384:pwf5wgwPwrwyUw/qY4+w4wYwpwfMw1wWw6wyhw/qY4XwNwtw4wfdwkwDw3wyQw/P:pc70afUQRptmJKBLfhQE8YTYHw+fQQVl","tlshash":"b472ed91041700009b835ce223cebf35fe5f92117141d0b9abfd9b6badcbc6652693ad","first_seen":"2025-09-08T23:24:40.129975Z","last_seen":"2025-11-18T23:33:55.863403Z","times_seen":3582,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":149,"dns":1,"connect":7,"send":0,"wait":18,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capchashield.com/favicon.ico","fqdn":"capchashield.com","domain":"capchashield.com","tld":"com"},"ip":{"addr":"104.21.33.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:34.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capchashield.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 19:35:17 GMT","end":"Tue, 06 Jan 2026 20:33:44 GMT"},"fingerprint":{"sha1":"EA:BF:44:14:2E:91:63:8C:02:B9:6A:D2:24:A1:A4:15:00:D4:41:6B","sha256":"A9:4E:E6:F5:83:E3:51:56:3C:75:15:5A:CE:F6:D7:60:12:85:47:95:19:69:BA:82:81:B5:A2:F5:54:1D:52:FB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: capchashield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=afbf4133-260a-41f8-aa0a-e7cc8e563dc9%3A2%3A1; sb_main_15096cf1d35bf7379d2c1a7d11e6d0a2=1; sb_count_15096cf1d35bf7379d2c1a7d11e6d0a2=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=extendedcontaminaterigorous.com; sb_main_3456dedcdd790ee65f6691e5792d6cdf=1; sb_count_3456dedcdd790ee65f6691e5792d6cdf=1; pp_main_9dd4f33d4cf09d680b03f943721f04e8=1; pp_idelay_9dd4f33d4cf09d680b03f943721f04e8=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=torchfriendlypay.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:34 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 20 Aug 2025 13:07:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rrNIs0rV1rvW0RjTe4h3kmgyZxV40GCmuM55Spd96xW0Fx6NOd0CiX2Lb1ko9N3grVfhQfJSobPljgiTYq0qv4bbzuYfQ6LCucWYvUQo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\netag: W/\"94be-63ccba6ff5b4f\"\r\ncontent-type: image/vnd.microsoft.icon\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\ncf-ray: 994c5898ed137131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38078,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 96x96, 32 bits/pixel","md5":"ee16a37d28890b9d4aa080001ae5c920","sha1":"77a208195637a5007ec396857219c1517763361c","sha256":"4dcfa1db2fdba1327e789dd09f95bd8da40d4d230240bf582d2b71f343ac92ec","sha512":"cec3d15684f62cbc60b704a6863e8a02e28fd5a216e8c0920f0fc25ab5745db270942592bbd472133de5babd9a4a5b8286c956058a534f23276490840918e102","ssdeep":"48:XOFEkkkkkkaKhwccccUUUUUUccccccMMMMMMUUUUhFIEkkkkkkkk+xIkkkkxIzUH:XKsGFAKsuZ","tlshash":"ee03d9a1bc1d70ecda1b473fb0a1c20a9d52de6c8ad4775394d533b1a9b34224d82adb","first_seen":"2025-03-09T19:44:34.781541Z","last_seen":"2026-02-22T06:34:00.267824Z","times_seen":35,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"capchashield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extendedcontaminaterigorous.com/ren.gif?sid=H4sIAAAAAAAC_1RST2gkxRut3p3T_g4_1MWTyJxEQSbdMz1_2hVW45plMSbZbCSgiFR3VU_K1HS1Vd3Tk8FDMCg5DuhBPUjnTbLxzyK6pwUVlokXCQj2yQgbEC-CBw_CHkV6diD6QX_f-3h9eO999d5eekoaSOnJystqKKSkc82aXX1yXURMZaa6tFZ17Jp9qbouopZ7qToom-4_4zTcmv1U9SoPNtVc3XZs27Gd6oLQPFSDuSkLEd_ynJpn19x6zWm6GOj_7ia1YKgF1j8lD0Ow4v-_ha9BBBNEva-ucLOZqPjpF3uppInS6LPDV6LNSGURemcw1BbC6HD2N5QpCPnwHFR0OHMA1d8vHcAXBTn36D340eFMJvz-wQOlvgSP4LP_IetPwOUEgk4QqB0I9hMBAoalZUS9m0tKZ3TrAUtLtiCV-39BZAWp3LuIqPflvBSD6g0l00SoyGAQ5hCDCUR3gjg9QjK0ILIjBMk7EOxHMnd_EVFvf9lIBcHyqXsRTkCNhbT8hIU0tJDGFnrspOraHTdwaKMVeixo2y51XcZ92-vUbZt6QRtpUMoaIYlHCOQIgd5GrLexKUbQ6V2YjRyGWTBJQazr2-izHBknyAxBRgkyQZAlBFk_P2DS1E1-k0mT-s5s1mezkY9V0t2jByrp8oiA6hE0y_dF_JbZQZCcHw9Dw8aqbNRP8jH1Wb4Xn5KHytSs3egQm_yk6ru84Xfa3GU2b3Y8hzX8sONQGrQ9x2-1PRiRQ5hz00CGoiBXn72NWBTkibf_hE-PYOQRAvEYaOqAZjnoRo5hdJtRIbeY6HKTbKR-LVA9MJUjTipItqw9eUoeGa-uzd-dnvCN90_Ag-PLn9y5_se7j99BoHPEOseb4nuCrtwdr6qM7K-qzJCvl-NE9MSQlue9kdCEn__8Jb6VKc2uXTGjz54PSqKEt9a4SRZpxETUNeSLecEY1wtKB5x8d82sc38lNRvzqY7SeHHlhYVrvVhzY4SKJqCiIBfwDQJRkIsLv06fbuu5NoJ4GyY-02kUgR-fhxQEkh-TWYH6Ocy_dv8M75lddHUFNNlB1MvR1zn6MgeVI5j0wjiJ9fHlHz4q62P4sjL2pa7s-1LLDwry6qeXy7B-mSZWkNd__hZGnFSbdb_R6nRaPGyxsMEa9Qbzmjb3XOq1XM9tIjHFxt_p7_8EAAD__zEZ05JsBAAA","fqdn":"extendedcontaminaterigorous.com","domain":"extendedcontaminaterigorous.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"extendedcontaminaterigorous.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 08:07:01 GMT","end":"Sun, 11 Jan 2026 08:07:00 GMT"},"fingerprint":{"sha1":"D7:E2:5F:F2:E3:DA:A6:33:C6:7F:C7:8E:D1:14:9F:C4:60:AE:E4:92","sha256":"BD:BC:AA:E9:A0:1B:66:AB:7E:8C:1E:2D:DF:76:AD:5D:5C:10:30:79:DD:26:59:68:55:1D:AA:4F:C7:36:99:E4"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RST2gkxRut3p3T_g4_1MWTyJxEQSbdMz1_2hVW45plMSbZbCSgiFR3VU_K1HS1Vd3Tk8FDMCg5DuhBPUjnTbLxzyK6pwUVlokXCQj2yQgbEC-CBw_CHkV6diD6QX_f-3h9eO999d5eekoaSOnJystqKKSkc82aXX1yXURMZaa6tFZ17Jp9qbouopZ7qToom-4_4zTcmv1U9SoPNtVc3XZs27Gd6oLQPFSDuSkLEd_ynJpn19x6zWm6GOj_7ia1YKgF1j8lD0Ow4v-_ha9BBBNEva-ucLOZqPjpF3uppInS6LPDV6LNSGURemcw1BbC6HD2N5QpCPnwHFR0OHMA1d8vHcAXBTn36D340eFMJvz-wQOlvgSP4LP_IetPwOUEgk4QqB0I9hMBAoalZUS9m0tKZ3TrAUtLtiCV-39BZAWp3LuIqPflvBSD6g0l00SoyGAQ5hCDCUR3gjg9QjK0ILIjBMk7EOxHMnd_EVFvf9lIBcHyqXsRTkCNhbT8hIU0tJDGFnrspOraHTdwaKMVeixo2y51XcZ92-vUbZt6QRtpUMoaIYlHCOQIgd5GrLexKUbQ6V2YjRyGWTBJQazr2-izHBknyAxBRgkyQZAlBFk_P2DS1E1-k0mT-s5s1mezkY9V0t2jByrp8oiA6hE0y_dF_JbZQZCcHw9Dw8aqbNRP8jH1Wb4Xn5KHytSs3egQm_yk6ru84Xfa3GU2b3Y8hzX8sONQGrQ9x2-1PRiRQ5hz00CGoiBXn72NWBTkibf_hE-PYOQRAvEYaOqAZjnoRo5hdJtRIbeY6HKTbKR-LVA9MJUjTipItqw9eUoeGa-uzd-dnvCN90_Ag-PLn9y5_se7j99BoHPEOseb4nuCrtwdr6qM7K-qzJCvl-NE9MSQlue9kdCEn__8Jb6VKc2uXTGjz54PSqKEt9a4SRZpxETUNeSLecEY1wtKB5x8d82sc38lNRvzqY7SeHHlhYVrvVhzY4SKJqCiIBfwDQJRkIsLv06fbuu5NoJ4GyY-02kUgR-fhxQEkh-TWYH6Ocy_dv8M75lddHUFNNlB1MvR1zn6MgeVI5j0wjiJ9fHlHz4q62P4sjL2pa7s-1LLDwry6qeXy7B-mSZWkNd__hZGnFSbdb_R6nRaPGyxsMEa9Qbzmjb3XOq1XM9tIjHFxt_p7_8EAAD__zEZ05JsBAAA HTTP/1.1\r\nHost: extendedcontaminaterigorous.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25718439=1; nlecb4e3b87e4d0e5891d3bf81aac791b679=[5941311,6263770,6263769]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: extendedcontaminaterigorous.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f12afa4c1239a3d3d903741160777068\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/sbar.json?key=3456dedcdd790ee65f6691e5792d6cdf\u0026uuid=afbf4133-260a-41f8-aa0a-e7cc8e563dc9%3A2%3A1","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /sbar.json?key=3456dedcdd790ee65f6691e5792d6cdf\u0026uuid=afbf4133-260a-41f8-aa0a-e7cc8e563dc9%3A2%3A1 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:33 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4143\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://capchashield.com\r\nAccess-Control-Allow-Credentials: true\r\nVary: Accept-Encoding\r\nSet-Cookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; expires=Sun, 02 Nov 2025 19:26:32 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 27 Oct 2025 19:26:33 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 27 Oct 2025 19:26:33 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Mon, 27 Oct 2025 19:26:33 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Mon, 27 Oct 2025 19:26:33 GMT; path=/; secure; SameSite=None\nu_pl26820103=1; expires=Mon, 27 Oct 2025 19:26:33 GMT; path=/; secure; SameSite=None\nslec3456dedcdd790ee65f6691e5792d6cdf=[6243694]; expires=Sun, 26 Oct 2025 19:26:38 GMT; path=/; secure; SameSite=None\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 786d23e6d9392e8d2e325f3b70291103\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6500,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"96e5308f8fa019d15583b39cc43e0929","sha1":"a562171a1f52e40e8300de65aaf1811369996998","sha256":"e90373b9935e603581ee23a86b15c6549046d511e0a8695ddf8dbb7e01fa1131","sha512":"de5edaf00a3cf5ae590908d6ca722ff87ee99a4c2a6400c97d94c607d08fa84835b8acdd67dd20bb89931b378f3dea0188a9dc1be2ac1947fbc9297a7dd5aa8a","ssdeep":"96:9zDrGdh3wwyejiwItdh3wwyejiwjDkJoI4muXKz72pWvig6e1Li665yM1xLX/sH:9zDiLw3e6Lw3enkBYK/2C62L65yMvXkH","tlshash":"16d16d2f0ce794d016918f439e4a4feebcd953739819968da49ffcae48f8d150e46134","first_seen":"2025-10-26T19:26:59.113088Z","last_seen":"2025-10-26T19:26:59.113088Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=afbf4133-260a-41f8-aa0a-e7cc8e563dc9\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=3456dedcdd790ee65f6691e5792d6cdf\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=19","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 21:53:17 GMT","end":"Fri, 28 Nov 2025 21:53:16 GMT"},"fingerprint":{"sha1":"AA:2A:FC:C2:EE:01:8F:55:3F:19:46:84:4A:C8:A0:95:62:50:5C:A3","sha256":"3D:8C:1A:2E:1F:32:30:D4:D8:4F:D2:FB:CC:99:F1:9C:05:E5:7B:D8:9D:7D:24:86:AD:C5:1E:62:55:44:A4:CA"}}},"request":{"raw":"GET /pxf.gif?uuid=afbf4133-260a-41f8-aa0a-e7cc8e563dc9\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=3456dedcdd790ee65f6691e5792d6cdf\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=19 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9b9849acaf0645a4c68173bd8d3e0a96\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":287,"dns":0,"connect":95,"send":0,"wait":95,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fcss%2Fstyle.css\u0026l=4257\u0026fd=552","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fcss%2Fstyle.css\u0026l=4257\u0026fd=552 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25724666=1; slec15096cf1d35bf7379d2c1a7d11e6d0a2=[6243696]; u_pl26820103=1; slec3456dedcdd790ee65f6691e5792d6cdf=[6243694]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/a8/9d/90/a89d90f9e38e0e9cafe30d2ace8cfb7fb78b3addf7156aec37d1205e49817b27.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /si/a8/9d/90/a89d90f9e38e0e9cafe30d2ace8cfb7fb78b3addf7156aec37d1205e49817b27.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 21008\r\nserver: nginx/1.21.6\r\nlast-modified: Sat, 25 Oct 2025 15:11:59 GMT\r\netag: \"68fce8bf-5210\"\r\nexpires: Tue, 28 Oct 2025 19:26:32 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21008,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"fa488c56f7c4f8df5369bc1f96e82c4e","sha1":"77c0a193156b039392206f1310fb02b816073995","sha256":"70a646858b65c72c7ec8df194abe72ce222b5b04da9bc9dcd6e6c00acc374065","sha512":"8c475ab3f4cb43768e21e614f2189f1e4ac7a1c1c8d997f143aa00748439552deee40c3bf83c409510bd41e84333dbf702c6eb581b5460d62d72d272b517e94f","ssdeep":"384:9w9OxzHynFyC6gTDw8fdlfuQPpb3L9IO+o7NLoIaJqr9EdrnaAb/:C9O9Sn4HbcduQP9OO5OIaJqridDFz","tlshash":"5b92d15c1bbae0dac4968af50171f5b497f60010f835fa5829db09c61e47d0ddca9337","first_seen":"2025-10-25T18:47:40.220522Z","last_seen":"2025-10-31T14:02:38.523097Z","times_seen":33,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":75,"dns":32,"connect":19,"send":0,"wait":19,"receive":17,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=553","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=553 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25724666=1; slec15096cf1d35bf7379d2c1a7d11e6d0a2=[6243696]; u_pl26820103=1; slec3456dedcdd790ee65f6691e5792d6cdf=[6243694]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fjs%2Fscript.js\u0026l=975\u0026fd=291","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fjs%2Fscript.js\u0026l=975\u0026fd=291 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25724666=1; slec15096cf1d35bf7379d2c1a7d11e6d0a2=[6243696]; u_pl26820103=1; slec3456dedcdd790ee65f6691e5792d6cdf=[6243694]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@popperjs/core@2.9.3/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:31.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@popperjs/core@2.9.3/dist/umd/popper.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.9.3\r\nx-jsd-version-type: version\r\netag: W/\"49b9-9uMDnVtkfnyfeSk9x8RssoYAPWw\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 26 Oct 2025 19:26:31 GMT\r\nage: 1088956\r\nx-served-by: cache-fra-eddf8230155-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18873,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18785)","md5":"e1a71969a95592d2d3d32bb7c1296190","sha1":"f6e3039d5b647e7c9f79293dc7c46cb286003d6c","sha256":"ccc0ee783158d1ab3ae590ef8c982a827e38e8b82fd121551cdd4c20041fcd1b","sha512":"5cba3a6d07b4f22ac939b09cf3aac510a41d70561b18620755771f32cc696ef17ca26a6677548d263a956398668d0d354ecd149a649019faa9b777c68e6ea918","ssdeep":"384:P5tp5wmEyOQQ5+D0/BAyMAoflA0mxPjjLqWlV1NnuGixt0ZUL83H+H9h++Ee:gmE3UD0/myRoynOWD1Nnuft0ZUL83HAT","tlshash":"ca82b5cd3990f0a5167b52b6c07f550fb3339561228ea100b255d6dd2c78ebba26bc3e","first_seen":"2023-03-07T13:48:21Z","last_seen":"2026-04-06T03:17:54.983791Z","times_seen":554,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":66,"dns":32,"connect":15,"send":0,"wait":14,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl25825165.effectiveratecpm.com/15/09/6c/15096cf1d35bf7379d2c1a7d11e6d0a2.js","fqdn":"pl25825165.effectiveratecpm.com","domain":"effectiveratecpm.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:31.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectiveratecpm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 21:07:59 GMT","end":"Sat, 03 Jan 2026 21:07:58 GMT"},"fingerprint":{"sha1":"D1:A4:29:C0:9D:DE:78:81:B5:C3:D0:60:72:A4:9A:9F:68:F8:76:4D","sha256":"07:93:2F:8B:78:7B:81:90:37:14:D7:58:BC:2B:24:A1:01:FF:8F:41:03:4C:40:6A:E7:20:50:C6:35:96:90:DE"}}},"request":{"raw":"GET /15/09/6c/15096cf1d35bf7379d2c1a7d11e6d0a2.js HTTP/1.1\r\nHost: pl25825165.effectiveratecpm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32794\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: pl25825165.effectiveratecpm.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 631132ebdfe150c922ebfde764a0686a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84981,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4aed918bcfa49bffc1d55919af2f301b","sha1":"52f898f5e0242ab9e2c51d91c509154ed441111d","sha256":"3ccc3d183278b62ba840a67c83a8e42c4ae1ed7e5b38212570fe1a722edd7f17","sha512":"2156e1a47ff3a1e46eeb42533ed044b85f50e85456216f350191708dff127b08d1bab3d74362ec9c30a7094bf1a634e2404214f8a3a336ba12e6fa5004aa4320","ssdeep":"1536:fhlo73s72DQsjQlZKEMO2N6BLFYQPcT416XgKkGCWUMZL:fnoxkN4O2N6BLFYQZEXgKsWUM9","tlshash":"4e83f8883f81b65812a2f133723f999ae1da5e451888d054d303a8dcbf7d71ce93af65","first_seen":"2025-10-26T19:26:59.115842Z","last_seen":"2025-10-28T09:49:22.368421Z","times_seen":2,"resource_available":true,"data":null}},"time_used":855,"timings":{"blocked":326,"dns":48,"connect":92,"send":0,"wait":103,"receive":93,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25825165.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25825165.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25825165.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25825165.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"pl25825165.effectiveratecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-26","alert":"Phishing Block","trigger":"pl25825165.effectiveratecpm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"3.123.64.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:31.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://capchashield.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=71266239-482c-4927-a8b2-fea53158d2ec:2:1; expires=Wed, 24 Oct 2035 19:26:31 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"66ba7139f2355699aff1b48f18c43ee0","sha1":"9098370a38863dcc54751b952428b0b4d24b52e2","sha256":"255256635025d088677586086d7ab5af2952d9a3843e28819a25facd9b7a0068","sha512":"539f1675e8e3d05084c39b712e46868a262cd28b2433e0c410ad7dddfaa1de97c77228d9883ca7db212c368101bae4257f6218844b0ca7fc057cea74a41d7582","ssdeep":"","tlshash":"f990000cb0a0322803820330ea0acba0ab03803e0082e30c0a22e332c0bf02f03c8808","first_seen":"2025-10-26T19:26:59.117124Z","last_seen":"2025-10-26T19:26:59.117124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":124,"dns":19,"connect":23,"send":0,"wait":22,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extendedcontaminaterigorous.com/ntv.json?key=b4e3b87e4d0e5891d3bf81aac791b679\u0026vstc=4\u0026rb=","fqdn":"extendedcontaminaterigorous.com","domain":"extendedcontaminaterigorous.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:31.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"extendedcontaminaterigorous.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 08:07:01 GMT","end":"Sun, 11 Jan 2026 08:07:00 GMT"},"fingerprint":{"sha1":"D7:E2:5F:F2:E3:DA:A6:33:C6:7F:C7:8E:D1:14:9F:C4:60:AE:E4:92","sha256":"BD:BC:AA:E9:A0:1B:66:AB:7E:8C:1E:2D:DF:76:AD:5D:5C:10:30:79:DD:26:59:68:55:1D:AA:4F:C7:36:99:E4"}}},"request":{"raw":"GET /ntv.json?key=b4e3b87e4d0e5891d3bf81aac791b679\u0026vstc=4\u0026rb= HTTP/1.1\r\nHost: extendedcontaminaterigorous.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: application/json\r\nContent-Length: 12169\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://capchashield.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: pdhtkv=true; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\npdhtkv49=true; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\nuncs49=1; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\nu_pl25718439=1; expires=Mon, 27 Oct 2025 19:26:32 GMT; path=/; secure; SameSite=None\nnlecb4e3b87e4d0e5891d3bf81aac791b679=[5941311,6263770,6263769]; expires=Sun, 26 Oct 2025 19:26:37 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 22\r\nHost: extendedcontaminaterigorous.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d2252c6c104d393a623bb16e10dae781\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15905,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"566d69f8e0e353a0ea23df0e77c9060d","sha1":"895fc76c1d02e9b6b8e57d8fd1a8016b0dfad7cd","sha256":"4822511c276a11d7f42143724efdd6dc8a36e35ac468bee5eaea65964f28a650","sha512":"a566adbe2bcd40c1fbc7fe760b25877c8dfb3dc39f43cacb473a10b3ed75420a1adb4e415e8b6539bc7aca130ae9c4ecc096dcb0d0c7e5d96bedcc616f1a0806","ssdeep":"384:tah1T2PRIRqNcN3cIFPGYb9mPCVmClaiI:tahV2J+qyVFPxbwImYA","tlshash":"ce62bef340d965f763e4c19c35071e6b4de1b52bc5da8ec587acc1a24da8607afb061c","first_seen":"2025-10-26T19:26:59.118319Z","last_seen":"2025-10-26T19:26:59.118319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":326,"dns":42,"connect":95,"send":0,"wait":123,"receive":1,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:05:43 GMT","end":"Fri, 28 Nov 2025 23:05:42 GMT"},"fingerprint":{"sha1":"B9:51:95:1F:A8:75:17:3A:9B:B1:75:96:F4:7D:7A:CF:3D:52:C9:71","sha256":"36:D1:B1:18:05:03:10:B2:46:BC:6C:71:A5:E7:BE:07:32:66:88:16:04:1E:5F:96:0F:10:B6:4B:BF:01:D1:42"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 00321e8c8e96467c41529e469ad2a700\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQBtddeEZ9YXEozJVaelB91vAASP%2FMtgRVUCf%2Borp8%2BeyfJk2UdBoxQtfhbi8RL7AhGShroRT%2FZKXgS%2FJFgFyLktAHqoP1ho4WRKcM2Dh7g%3D\"}]}\r\nage: 5603087\r\ncf-cache-status: HIT\r\netag: W/\"65aa8501-9c7\"\r\ncontent-encoding: br\r\ncf-ray: 994c5892a9b5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2503,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b6231336753101ab916ff3bc2644225","sha1":"9e0ebaf400b0cdc45a1d40523ea5479205fdd2b2","sha256":"4d6367626004a96e47e82fddaf52a5ee39c7ec20e34d493d6e01c275bb9e3772","sha512":"6ec24bc79813a6de3e5d6f65d9d34960d3ab64f2befdcb0475ebc2f81a5ed32d9430abf4c464db1bf31e9d90e3a2b9f857890138fb5a41ac8a58e0099311d42d","ssdeep":"","tlshash":"4951e93482f6185c9ccd8eace6d418191c60a46b824dc1def5cc7951ef4a502bc7a298","first_seen":"2023-12-05T16:53:58Z","last_seen":"2026-02-03T01:05:39.198036Z","times_seen":1301,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/7c/f6/b5/7cf6b5a66fec441ee947690bd1d27d6beaa48e247e2521cafdd1a219efe124d6.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /si/7c/f6/b5/7cf6b5a66fec441ee947690bd1d27d6beaa48e247e2521cafdd1a219efe124d6.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 50112\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 02 Jun 2025 17:21:38 GMT\r\netag: \"683ddda2-c3c0\"\r\nexpires: Tue, 28 Oct 2025 19:26:33 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b3a3706e80cfe44c216b222ab63beed0","sha1":"35257ba74c0fba1421e8640c703e0ba3f6ecaa6c","sha256":"ea864866dbb5b85fb1c99a722b0f392d65a0055d274af37a43f6efdc6d2f32bd","sha512":"0fbab5afcf280b019e48e016d110bf6701d97e522ad02007efe97b8823cb232c38b494ac78cf941a7174048d6a30524da05c8f05a905d389a94637763f45ddd9","ssdeep":"768:OUkLMzn5nUhDMFffhzucK2KpmOjAFIgHrYyS7Zs2FS+h0wLzAnwug:OU08kD4fZqcopx+2cm8E","tlshash":"c523029888c2587a5e8982d5f8bde5c1f0745b0bd3da06043ca1b1e5aadc3ea73d8479","first_seen":"2025-10-16T16:32:45.516653Z","last_seen":"2025-10-30T07:31:21.678515Z","times_seen":166,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extendedcontaminaterigorous.com/9d/d4/f3/9dd4f33d4cf09d680b03f943721f04e8.js","fqdn":"extendedcontaminaterigorous.com","domain":"extendedcontaminaterigorous.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:31.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"extendedcontaminaterigorous.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 08:07:01 GMT","end":"Sun, 11 Jan 2026 08:07:00 GMT"},"fingerprint":{"sha1":"D7:E2:5F:F2:E3:DA:A6:33:C6:7F:C7:8E:D1:14:9F:C4:60:AE:E4:92","sha256":"BD:BC:AA:E9:A0:1B:66:AB:7E:8C:1E:2D:DF:76:AD:5D:5C:10:30:79:DD:26:59:68:55:1D:AA:4F:C7:36:99:E4"}}},"request":{"raw":"GET /9d/d4/f3/9dd4f33d4cf09d680b03f943721f04e8.js HTTP/1.1\r\nHost: extendedcontaminaterigorous.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 39780\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: extendedcontaminaterigorous.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ade0a622f204738c26c87205de07bdb1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112043,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"21cd982ee10594925331c66c0f0704ea","sha1":"b0bbfb9f7425ed297c175d60783f46b67f333ff5","sha256":"06167f0baca8cbaf75767b31122fb51f56f5c31ee88563e5dbf7dac37967e3b4","sha512":"a9d8b121998056c588a40b02a5e951701a3ff3da57006e10d760898c836984d848b268b393d24aa7bef63f4ab581a13315f67fd40b9e1f60b566696bb868ec65","ssdeep":"1536:l0+mKD2HANk06WIqx61GpQU8/M5XTSvFu081y736V8xefnFARscKv6RQc27Yhqhs:O+skT5Iab8xe9ARzXRR2kh/","tlshash":"cab3b38dbf92f16d11675072223f9416f02e8d56658dc554e222f8bc2fa831be939f34","first_seen":"2025-10-26T19:26:59.120118Z","last_seen":"2025-10-26T19:26:59.120118Z","times_seen":1,"resource_available":true,"data":null}},"time_used":846,"timings":{"blocked":326,"dns":38,"connect":95,"send":0,"wait":100,"receive":93,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extendedcontaminaterigorous.com/ren.gif?sid=H4sIAAAAAAAC_1RSTWgkRRit3p3TehDXxZOHOYmCTLpneibTrrAY14RgTGI2ElBEqruqJ2V6utqq6unJ6CEYkBwH9KCeOm-Sja7LontWCBMvEhDsi0bYgHjx5kFYPIn07ED0g_p-6tXhvffVR_vpOWkgpWerr8mBiCI606zZ1Wc3RMxkpqvL61XHrtnXqxsibrnXq_0yqd4LTsOt2c9VF3iwJWfqtmPbju1U54XioezPTFCI5K7n1Dy75tZrTtNFX_1_1qkFTS2w3jm5CsGKx38P34IIxoi7X9_kesvI5PlXumlEjVTosaM34q1YZjG6F22oLITx0fQ1pC4I-fQSZHw0VQDZOygVwBcFufTUA_jx0ZQm_N7hI6Z-BB7DZ48h643BozEEHSOQuxDsJwIEDMsriLu3l6XK6PYjlJZoQSoP_4LIClJ5cA1x995cJPrVWzJKjZCxRj_MIfpjiM4YSXoCM7AgshME5kMI9iOZebiEuHuwoiMJwfKJehGOQbWFtDzCQhpaSBMLXXZWde22Gzi00Qo9FszaLnVdxn3ba9dtm3rBLNKgpDWESYYIoiECtYNE7WBLDKHSY-jNHJpZ0KYg1us76LEcGSfINEFGCTJBkBmCrJcfskjXdX6bRTr1nWmtT2sjH0nT2aeH0nR4TEDVEIrlByJ5T-8iMJdHg1CzkSwT9U0-oj7L95Nz8kTpmrUXH2GLn1V9lzf89ix3mc2bbc9hDT9sO5QGs57jt2Y9aJFD6EsTQwaiIAsv3kciCvLMB3_CpyfQ0QkC8TRo6oBmOehmjkF8n1ERbTPR4dpspn4tkF0wmSMxFZhtaz86J0-O1tbnjicrfPOLG-DB6Q0z-G3h3rX3EagcicrxrvieoBPtjdZkRg7WZKbJNyuJEV0xoOV6bxlq-OU7r_LtTCq2eFMPv3wpKIGyvbvOtVmiMRNxR5Ov5gRjXM1LFXDy3aLe4P5qqjfnUhWnydLqy_OL3URxrYWMx6CiIFeO7yAQBbn68-7k6zYW_kaQ7EAnp2Qa0JLATyxEgiDiF_fUz6H_M_sX_b7eQ0dVQM0u4m6OnsrRi3LQaAidXhmZRJ3e-OGzMj6HH1VGfqQqB36kok8mPhXknY9_LdNZQd7-5VtocVZt1v1Gq91u8bDFwgZr1BvMa9rcc6nXcj23CaOLzX_SP_4NAAD__7eYx1tsBAAA","fqdn":"extendedcontaminaterigorous.com","domain":"extendedcontaminaterigorous.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"extendedcontaminaterigorous.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 08:07:01 GMT","end":"Sun, 11 Jan 2026 08:07:00 GMT"},"fingerprint":{"sha1":"D7:E2:5F:F2:E3:DA:A6:33:C6:7F:C7:8E:D1:14:9F:C4:60:AE:E4:92","sha256":"BD:BC:AA:E9:A0:1B:66:AB:7E:8C:1E:2D:DF:76:AD:5D:5C:10:30:79:DD:26:59:68:55:1D:AA:4F:C7:36:99:E4"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSTWgkRRit3p3TehDXxZOHOYmCTLpneibTrrAY14RgTGI2ElBEqruqJ2V6utqq6unJ6CEYkBwH9KCeOm-Sja7LontWCBMvEhDsi0bYgHjx5kFYPIn07ED0g_p-6tXhvffVR_vpOWkgpWerr8mBiCI606zZ1Wc3RMxkpqvL61XHrtnXqxsibrnXq_0yqd4LTsOt2c9VF3iwJWfqtmPbju1U54XioezPTFCI5K7n1Dy75tZrTtNFX_1_1qkFTS2w3jm5CsGKx38P34IIxoi7X9_kesvI5PlXumlEjVTosaM34q1YZjG6F22oLITx0fQ1pC4I-fQSZHw0VQDZOygVwBcFufTUA_jx0ZQm_N7hI6Z-BB7DZ48h643BozEEHSOQuxDsJwIEDMsriLu3l6XK6PYjlJZoQSoP_4LIClJ5cA1x995cJPrVWzJKjZCxRj_MIfpjiM4YSXoCM7AgshME5kMI9iOZebiEuHuwoiMJwfKJehGOQbWFtDzCQhpaSBMLXXZWde22Gzi00Qo9FszaLnVdxn3ba9dtm3rBLNKgpDWESYYIoiECtYNE7WBLDKHSY-jNHJpZ0KYg1us76LEcGSfINEFGCTJBkBmCrJcfskjXdX6bRTr1nWmtT2sjH0nT2aeH0nR4TEDVEIrlByJ5T-8iMJdHg1CzkSwT9U0-oj7L95Nz8kTpmrUXH2GLn1V9lzf89ix3mc2bbc9hDT9sO5QGs57jt2Y9aJFD6EsTQwaiIAsv3kciCvLMB3_CpyfQ0QkC8TRo6oBmOehmjkF8n1ERbTPR4dpspn4tkF0wmSMxFZhtaz86J0-O1tbnjicrfPOLG-DB6Q0z-G3h3rX3EagcicrxrvieoBPtjdZkRg7WZKbJNyuJEV0xoOV6bxlq-OU7r_LtTCq2eFMPv3wpKIGyvbvOtVmiMRNxR5Ov5gRjXM1LFXDy3aLe4P5qqjfnUhWnydLqy_OL3URxrYWMx6CiIFeO7yAQBbn68-7k6zYW_kaQ7EAnp2Qa0JLATyxEgiDiF_fUz6H_M_sX_b7eQ0dVQM0u4m6OnsrRi3LQaAidXhmZRJ3e-OGzMj6HH1VGfqQqB36kok8mPhXknY9_LdNZQd7-5VtocVZt1v1Gq91u8bDFwgZr1BvMa9rcc6nXcj23CaOLzX_SP_4NAAD__7eYx1tsBAAA HTTP/1.1\r\nHost: extendedcontaminaterigorous.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25718439=1; nlecb4e3b87e4d0e5891d3bf81aac791b679=[5941311,6263770,6263769]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: extendedcontaminaterigorous.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a5bcce920726e396e5b8714b2d25cd3e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:34.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:26:19 GMT\r\nexpires: Fri, 23 Oct 2026 17:26:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 266415\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-06T10:11:42.544918Z","times_seen":718473,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":89,"dns":0,"connect":7,"send":0,"wait":8,"receive":7,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extendedcontaminaterigorous.com/ren.gif?sid=H4sIAAAAAAAC_1RSTWgkRRitzs5pPYi6eBKZkyjIpHumZzLtCtG4Zllck2w2ElBEqruqJ2V6utqq6unJ6CEYlBwH9KAepPMm2fizLLqnBRWWiRcJCPbJCBtYvAgePAh7FOnZgdUP-vvex-vDe--rD_fSU9JASk9WXpUDEUV0tlmzq0-vi5jJTFeX1qqOXbPPV9dF3HLPV_tlU73nnIZbs5-pXuTBppyt245tO7ZTXRSKh7I_O2EhkuueU_PsmluvOU0XffX_XacWNLXAeqfkUQhWPPx7-AZEMEbc_eYC15tGJs--3E0jaqRCjx2-Fm_GMovRfQBDZSGMD6d_Q-qCkE9mIOPDqQPI3n7pAL4oyMzjd-DHh1OZ8HsH95X6EXgMnz2ErDcGj8YQdIxA7kCwXwgQMCwtI-5eW5Iqo1v3WVqyBanc-xsiK0jlzjnE3RsLkehXr8ooNULGGv0wh-iPITpjJOkRzMCCyI4QmPch2M9k9t5lxN39ZR1JCJZP3ItwDKotpOUnLKShhTSx0GUnVdduu4FDG63QY8Gc7VLXZdy3vXbdtqkXzCENSllDmGSIIBoiUNtI1DY2xRAqvQ29kUMzC9oUxLqyjR7LkXGCTBNklCATBJkhyHr5AYt0XefXWKRT35nO-nQ28pE0nT16IE2HxwRUDaFYvi-Sd_QOAnNmNAg1G8myUd_kI-qzfC85JY-UqVm78SE2-UnVd3nDb89xl9m82fYc1vDDtkNpMOc5fmvOgxY5hJ6ZBDIQBbn4_E0koiBPvfcXfHoEHR0hEE-Apg5oloNu5BjENxkV0RYTHa7NRurXAtkFkzkSU4HZsvaiU_LYaHVt4fbkhG999Bt4cDz_-a0rf37w5C0EKkeicrwtfiToRLujVZmR_VWZafLtcmJEVwxoed6rhhp-5qtX-FYmFbt0QQ-_fDEoiRJeX-PaXKYxE3FHk68XBGNcLUoVcPLDJb3O_ZVUbyykKk6TyysvLV7qJoprLWQ8BhUFOYvvEIiCnFu8O3m6rRfaCJJt6OR43gzuXrxx7l1oSeAnM4gEQcSPybRA_Rz6P7v_AO_pXXRUBdTsIO7m6KkcvSgHjYbQ6dmRSdTx_E-flvUZ_Kgy8iNV2fcjFX1ckNe_mJ-EVbaTgrz56_fQ4qTarPuNVrvd4mGLhQ3WqDeY17S551Kv5XpuE0YXG_-kf_wbAAD__x5KxJtsBAAA","fqdn":"extendedcontaminaterigorous.com","domain":"extendedcontaminaterigorous.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"extendedcontaminaterigorous.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 08:07:01 GMT","end":"Sun, 11 Jan 2026 08:07:00 GMT"},"fingerprint":{"sha1":"D7:E2:5F:F2:E3:DA:A6:33:C6:7F:C7:8E:D1:14:9F:C4:60:AE:E4:92","sha256":"BD:BC:AA:E9:A0:1B:66:AB:7E:8C:1E:2D:DF:76:AD:5D:5C:10:30:79:DD:26:59:68:55:1D:AA:4F:C7:36:99:E4"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSTWgkRRitzs5pPYi6eBKZkyjIpHumZzLtCtG4Zllck2w2ElBEqruqJ2V6utqq6unJ6CEYlBwH9KAepPMm2fizLLqnBRWWiRcJCPbJCBtYvAgePAh7FOnZgdUP-vvex-vDe--rD_fSU9JASk9WXpUDEUV0tlmzq0-vi5jJTFeX1qqOXbPPV9dF3HLPV_tlU73nnIZbs5-pXuTBppyt245tO7ZTXRSKh7I_O2EhkuueU_PsmluvOU0XffX_XacWNLXAeqfkUQhWPPx7-AZEMEbc_eYC15tGJs--3E0jaqRCjx2-Fm_GMovRfQBDZSGMD6d_Q-qCkE9mIOPDqQPI3n7pAL4oyMzjd-DHh1OZ8HsH95X6EXgMnz2ErDcGj8YQdIxA7kCwXwgQMCwtI-5eW5Iqo1v3WVqyBanc-xsiK0jlzjnE3RsLkehXr8ooNULGGv0wh-iPITpjJOkRzMCCyI4QmPch2M9k9t5lxN39ZR1JCJZP3ItwDKotpOUnLKShhTSx0GUnVdduu4FDG63QY8Gc7VLXZdy3vXbdtqkXzCENSllDmGSIIBoiUNtI1DY2xRAqvQ29kUMzC9oUxLqyjR7LkXGCTBNklCATBJkhyHr5AYt0XefXWKRT35nO-nQ28pE0nT16IE2HxwRUDaFYvi-Sd_QOAnNmNAg1G8myUd_kI-qzfC85JY-UqVm78SE2-UnVd3nDb89xl9m82fYc1vDDtkNpMOc5fmvOgxY5hJ6ZBDIQBbn4_E0koiBPvfcXfHoEHR0hEE-Apg5oloNu5BjENxkV0RYTHa7NRurXAtkFkzkSU4HZsvaiU_LYaHVt4fbkhG999Bt4cDz_-a0rf37w5C0EKkeicrwtfiToRLujVZmR_VWZafLtcmJEVwxoed6rhhp-5qtX-FYmFbt0QQ-_fDEoiRJeX-PaXKYxE3FHk68XBGNcLUoVcPLDJb3O_ZVUbyykKk6TyysvLV7qJoprLWQ8BhUFOYvvEIiCnFu8O3m6rRfaCJJt6OR43gzuXrxx7l1oSeAnM4gEQcSPybRA_Rz6P7v_AO_pXXRUBdTsIO7m6KkcvSgHjYbQ6dmRSdTx_E-flvUZ_Kgy8iNV2fcjFX1ckNe_mJ-EVbaTgrz56_fQ4qTarPuNVrvd4mGLhQ3WqDeY17S551Kv5XpuE0YXG_-kf_wbAAD__x5KxJtsBAAA HTTP/1.1\r\nHost: extendedcontaminaterigorous.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25718439=1; nlecb4e3b87e4d0e5891d3bf81aac791b679=[5941311,6263770,6263769]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: extendedcontaminaterigorous.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 875f9f3a222466d76434834bf75cfef1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"extendedcontaminaterigorous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1356\u0026rd=1356\u0026fd=530\u0026bv=25.10.3610\u0026tmpl=136","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1356\u0026rd=1356\u0026fd=530\u0026bv=25.10.3610\u0026tmpl=136 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":1,"connect":91,"send":0,"wait":91,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 5603087\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrMhADPXQe8R5295uIyrVHQ89rMDNq6nbPvU23ZbcF96B8MCCF3le%2BCEwJieciIsiOZO9%2BZK7xDbcwpeIBD4cwGPLGxZOQfL4XJDe3wR\"}]}\r\netag: W/\"65aa8501-9c7\"\r\ncontent-encoding: br\r\ncf-ray: 994c5894093f0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2503,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b6231336753101ab916ff3bc2644225","sha1":"9e0ebaf400b0cdc45a1d40523ea5479205fdd2b2","sha256":"4d6367626004a96e47e82fddaf52a5ee39c7ec20e34d493d6e01c275bb9e3772","sha512":"6ec24bc79813a6de3e5d6f65d9d34960d3ab64f2befdcb0475ebc2f81a5ed32d9430abf4c464db1bf31e9d90e3a2b9f857890138fb5a41ac8a58e0099311d42d","ssdeep":"","tlshash":"4951e93482f6185c9ccd8eace6d418191c60a46b824dc1def5cc7951ef4a502bc7a298","first_seen":"2023-12-05T16:53:58Z","last_seen":"2026-02-03T01:05:39.198036Z","times_seen":1301,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fjs%2Fscript.js\u0026l=975\u0026fd=505","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fjs%2Fscript.js\u0026l=975\u0026fd=505 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nCookie: uid_id2=afbf4133-260a-41f8-aa0a-e7cc8e563dc9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25724666=1; slec15096cf1d35bf7379d2c1a7d11e6d0a2=[6243696]; u_pl26820103=1; slec3456dedcdd790ee65f6691e5792d6cdf=[6243694]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:31.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 03:23:24 GMT","end":"Mon, 08 Dec 2025 04:23:14 GMT"},"fingerprint":{"sha1":"2D:94:96:D6:08:54:E8:A2:4A:A9:D7:90:E4:75:91:6B:AC:CB:AA:24","sha256":"24:50:0C:86:73:A4:E6:6C:AD:20:57:80:86:4E:19:B1:E9:76:7F:2A:BE:CC:E9:75:B2:07:67:62:FA:9B:E7:8D"}}},"request":{"raw":"GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncf-ray: 994c5885ef7ab50b-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: W/\"02d223393e00c273efdcb1ade8f4f8b1\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:11 GMT\r\ncdn-cachedat: 03/25/2024 22:48:44\r\ncdn-proxyver: 1.04\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1053\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 61cf8f05ee37c2f53ea86221d76b9d00\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 229871\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60044,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (59765)","md5":"02d223393e00c273efdcb1ade8f4f8b1","sha1":"0cc93b8421d89c24a889642428b363cb831de78a","sha256":"79c599dd760cec0c1621a1af49d9a2a49da5d45e1b37d4575bace0a5e0226582","sha512":"339296df3b6e2080a65488634aa5ded35a15d9ba5edb8f203b1aa695c62b13302fc2cecfc37cfa04ad2219baf0bddad4414862dde5e0b71a7923c3c3a3d61f8d","ssdeep":"768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz","tlshash":"0343a54a7254787206df747a817b060bb3366c99a50a816cb8699ced2f7cd483277f3c","first_seen":"2023-03-07T01:06:50Z","last_seen":"2026-04-06T09:38:27.838147Z","times_seen":12310,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":32,"dns":16,"connect":3,"send":0,"wait":15,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:32.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:05:43 GMT","end":"Fri, 28 Nov 2025 23:05:42 GMT"},"fingerprint":{"sha1":"B9:51:95:1F:A8:75:17:3A:9B:B1:75:96:F4:7D:7A:CF:3D:52:C9:71","sha256":"36:D1:B1:18:05:03:10:B2:46:BC:6C:71:A5:E7:BE:07:32:66:88:16:04:1E:5F:96:0F:10:B6:4B:BF:01:D1:42"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 26 Oct 2025 19:26:32 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0195a0536cdd0ba50a8213b25fa48847\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":1,"connect":19,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/81/79/8e/81798e42dbdf5b40d74fb93e1530c3b7/1698745431.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 15:30:46 GMT","end":"Tue, 06 Jan 2026 16:29:13 GMT"},"fingerprint":{"sha1":"CE:BB:4F:68:2C:89:90:90:9F:0D:E4:DC:37:55:B5:DC:41:49:D6:F9","sha256":"52:3F:5E:43:C5:77:DF:EF:E5:AE:11:CA:C1:74:9E:6B:A8:63:B6:7A:C9:7F:8F:58:EF:05:C6:35:2F:C7:D2:9B"}}},"request":{"raw":"GET /sb/au/81/79/8e/81798e42dbdf5b40d74fb93e1530c3b7/1698745431.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capchashield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capchashield.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Oct 2023 09:43:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uvu%2B6b4%2BaJBmBUNe6u1ZatrRJHR7Dgo9jswaBg5Exc1G%2FUd%2FlNThkde39J7OXbBNVT%2FJYHE%2F6c8T%2Bwspo1RjPNuTZkRicyqYsusB9HGrBQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 994c5890cda20883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1812,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"de976c8d71dbcc86f67097cd40d8bb99","sha1":"121b4ee47e41a48329d5a2d9ef846910965a513a","sha256":"e664e9faab3c92b18fdee9c88ab94f056bfdee47414bac190a1d7b5e17378634","sha512":"d192196b5b063c6aed0c0b8509055f4a5cae987c5ae7e3bd9883fa9bf5e0cb3fb61120b9baf9ebe4425d56d27dbe3d295691e53dcd3a230a6bfd72fa65351d52","ssdeep":"","tlshash":"00317c7518f8d93312d290947b312f2bae81d643894b491173bc46548f97ed9cc67007","first_seen":"2024-08-04T23:42:22Z","last_seen":"2025-12-03T23:02:36.5671Z","times_seen":263,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":124,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capchashield.com/","date":"2025-10-26T19:26:33.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 19:26:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 144134\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ty4bAXOLi7tRfWiCJPykubx6R6Utxg5qduGCjZtJshHdwzgCmKoEZamF3uBP4hXY3VTUwucGRKyG0Uqk8hb0UNM1QmQdKYdTBMed7MZA\"}]}\r\netag: W/\"65aa8501-149a0\"\r\ncontent-encoding: br\r\ncf-ray: 994c589409400b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-04-06T10:17:28.921052Z","times_seen":10477,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}