{"report_id":"d29df3f3-0024-4235-964a-c5a094503cf0","version":0,"status":"done","tags":[],"date":"2026-10-10T23:23:06Z","url":{"schema":"http","addr":"aghpl.com/","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"aghpl.com/","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"title":"Altruist Global Holdings - Women-Led EPC Contracting Excellence","dom":{"size":55824,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (38681)","md5":"ec5cf1bc4e75e32d1549052c7ba0967f","sha1":"ecd3256bf62955429866a4ef80f2afcf8566ae71","sha256":"e6e62aa6fc3a21a5ac456a836756d56b1c0091a5af7e31031072acf0f2a7bcc4","sha512":"5cd918b4cbd0130180fdbb9eef875410cbed2b2937723c9a5cf5cb94f78c2d32deda1609548080a54fbb859f6e536ea768e7da5f6ba518dfb2a51a5a686de258","ssdeep":"1536:IUXx/c64Jysq7vSIZ6IY+K8usiAmWE327AGQVpbJSi4MNaHPRqATM:IUmPHMe","tlshash":"0a43c624210c163dab0f47a4e6e4733ce135d289d62b8859b26c01f797c3fe4ad776a8","dom_hash":"domhash3fa513b6bf61074d614ed95845715c19","first_seen":"2026-10-10T23:23:14.730888Z","last_seen":"2026-10-10T23:23:14.730888Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"aghpl.com/","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T23:23:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"aghpl.com","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":3929768,"first_seen":"No data","last_seen":"No data","alert_count":22,"request_count":11,"received_data":579560,"sent_data":7841,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aghpl.com/assets/index-DGxkKdZS.js","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c76618c134788c7903c7d433355e4d23","sha1":"afe5a538e0a24c0633bed58982ffe75ba5f3160f","sha256":"f2688fb48f340752461a962df28b70b1e2b098d46e2f588ef3797ea474424f0e","sha512":"ce8bc03706051006141c3e3086c671d267e9570b5a9c56e31c1a6e67c7ed546ac500ccc2442550d75724640b0e371aae9bba73ad484c6f1252f87f46c045c6aa","ssdeep":"6144:fFp1fjWijjAD/u24LzUvgimEj4Rr+LxnHDFg1OZ/GNx:gta24LzUvgicqLxZgO/y","tlshash":"fd748ed8305ab679abb701a1407f410ab33d2916a80d8460f13ced7a77b1546a1bbffd","size":355176,"data":"","first_seen":"2026-10-10T23:23:14.73887Z","last_seen":"2026-10-10T23:23:14.73887Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aghpl.com/~flock.js","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-11T04:42:14.991224Z","times_seen":18409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aghpl.com/__l5e/events.1718a1eacac7ff3a.js","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ff59b5a0c70987bcab9e10695666256","sha1":"2054e233555422ebb516b18797498a650b089b16","sha256":"c6aeda0a1a77a012ab8af4636ea7954ba93b485a1a675c9519c7d23a702ea1d1","sha512":"095459b6937b10438847bcf9b3a02fdd102269f1e78bf4e44d11d0fc9d1f3e4c49fc1c605f03312c4fb67e049cc96e803614480b8dfc160bbe68449c076f4682","ssdeep":"768:50COTDu1TyIxLpV0iDBb3EZItbqwCpeAoTqtbg21joTVmZgJhO7FI2MDFtsKeEX0:aWUUbldRJTe2mtFhU/9H3k","tlshash":"20b2099271c4b03397f28ae920554007b17c9ea7348d81f0e6ec8d2a49e7a56e0bbf5d","size":24997,"data":"","first_seen":"2026-10-09T12:50:36.960444Z","last_seen":"2026-10-11T04:42:14.998604Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"aghpl.com/","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T23:22:35.129Z","timestamp":1791674555129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aghpl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 21:30:21 GMT","end":"Mon, 30 Nov 2026 22:30:17 GMT"},"fingerprint":{"sha1":"C3:F8:61:11:B6:69:B0:C5:A6:ED:7E:85:41:BC:23:19:FB:B7:0B:23","sha256":"AB:E3:63:63:AF:BF:B6:3B:D0:DE:5D:C0:B9:7D:61:69:E7:A9:C8:CF:0B:92:E7:FC:19:2E:4C:22:3B:1B:46:D1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aghpl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 23:22:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nset-cookie: __dpl=0c16dfe1-d54d-41c5-9cb9-637fa1d84236; Path=/; Max-Age=604800; SameSite=Lax; Secure\n__cf_bm=x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV; HttpOnly; SameSite=None; Secure; Path=/; Domain=aghpl.com; Expires=Sat, 10 Oct 2026 23:52:35 GMT\r\nx-deployment-id: 0c16dfe1-d54d-41c5-9cb9-637fa1d84236\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a4895e31ea554e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"0c16dfe1-d54d-41c5-9cb9-637fa1d84236","quoted":false,"path":"/","max_age":604800,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__dpl=0c16dfe1-d54d-41c5-9cb9-637fa1d84236; Path=/; Max-Age=604800; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV","quoted":false,"path":"/","domain":"aghpl.com","expires":"2026-10-10T23:52:35Z","raw_expires":"Sat, 10 Oct 2026 23:52:35 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV; HttpOnly; SameSite=None; Secure; Path=/; Domain=aghpl.com; Expires=Sat, 10 Oct 2026 23:52:35 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":2064,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (646)","md5":"4c73e07e479052ded69daf14f658cb30","sha1":"8fc4fbfe657a171c19f257bf9dbde4f9ec52df3a","sha256":"dcaeafae02a440e378611156094d8c453e6819c24508f58c772b166fb9eed4c9","sha512":"b55f4b20f69efd59c5101719d41c5a11f3a4704da464a1976af67fce069e6dfdc305004264e5fb2c883a9efbd14949ce7753edf1d681396b0c2d2f0787a0d63c","ssdeep":"","tlshash":"d151205339b5ed2a53e4a59009d7f046c6a0e387834d84d7b89810df0fc1bd1d6f7aaa","first_seen":"2026-10-10T23:23:14.73473Z","last_seen":"2026-10-10T23:23:14.73473Z","times_seen":1,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":42,"connect":1,"send":0,"wait":260,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aghpl.com/assets/index-DGxkKdZS.js","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aghpl.com/","date":"2026-10-10T23:22:35.695Z","timestamp":1791674555695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aghpl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 21:30:21 GMT","end":"Mon, 30 Nov 2026 22:30:17 GMT"},"fingerprint":{"sha1":"C3:F8:61:11:B6:69:B0:C5:A6:ED:7E:85:41:BC:23:19:FB:B7:0B:23","sha256":"AB:E3:63:63:AF:BF:B6:3B:D0:DE:5D:C0:B9:7D:61:69:E7:A9:C8:CF:0B:92:E7:FC:19:2E:4C:22:3B:1B:46:D1"}}},"request":{"raw":"GET /assets/index-DGxkKdZS.js HTTP/1.1\r\nHost: aghpl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aghpl.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=0c16dfe1-d54d-41c5-9cb9-637fa1d84236; __cf_bm=x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"0c16dfe1-d54d-41c5-9cb9-637fa1d84236"},{"name":"__cf_bm","value":"x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 23:22:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nx-deployment-id: 0c16dfe1-d54d-41c5-9cb9-637fa1d84236\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"c76618c134788c7903c7d433355e4d23\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a4895e351f894e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355176,"size_decoded":109848,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"c76618c134788c7903c7d433355e4d23","sha1":"afe5a538e0a24c0633bed58982ffe75ba5f3160f","sha256":"f2688fb48f340752461a962df28b70b1e2b098d46e2f588ef3797ea474424f0e","sha512":"ce8bc03706051006141c3e3086c671d267e9570b5a9c56e31c1a6e67c7ed546ac500ccc2442550d75724640b0e371aae9bba73ad484c6f1252f87f46c045c6aa","ssdeep":"6144:fFp1fjWijjAD/u24LzUvgimEj4Rr+LxnHDFg1OZ/GNx:gta24LzUvgicqLxZgO/y","tlshash":"fd748ed8305ab679abb701a1407f410ab33d2916a80d8460f13ced7a77b1546a1bbffd","first_seen":"2026-10-10T23:23:14.73887Z","last_seen":"2026-10-10T23:23:14.73887Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aghpl.com/assets/index-ZiRduUz5.css","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aghpl.com/","date":"2026-10-10T23:22:35.697Z","timestamp":1791674555697,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aghpl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 21:30:21 GMT","end":"Mon, 30 Nov 2026 22:30:17 GMT"},"fingerprint":{"sha1":"C3:F8:61:11:B6:69:B0:C5:A6:ED:7E:85:41:BC:23:19:FB:B7:0B:23","sha256":"AB:E3:63:63:AF:BF:B6:3B:D0:DE:5D:C0:B9:7D:61:69:E7:A9:C8:CF:0B:92:E7:FC:19:2E:4C:22:3B:1B:46:D1"}}},"request":{"raw":"GET /assets/index-ZiRduUz5.css HTTP/1.1\r\nHost: aghpl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aghpl.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=0c16dfe1-d54d-41c5-9cb9-637fa1d84236; __cf_bm=x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"0c16dfe1-d54d-41c5-9cb9-637fa1d84236"},{"name":"__cf_bm","value":"x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 23:22:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nx-deployment-id: 0c16dfe1-d54d-41c5-9cb9-637fa1d84236\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"b19c09c4bedd5a4930b581c1e81a78c9\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a4895e351f8e4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67109,"size_decoded":12211,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b19c09c4bedd5a4930b581c1e81a78c9","sha1":"adbccfe1d70404079f54c185a8dd0326a008ee7d","sha256":"a3031af18a5b9f91f83b43607f43fd08eeaf6e439c2f04fbd31c3c1418bc3140","sha512":"d899a38f003a50f58ea2c35f2e501ae83c20c46f931097eeee6ab14bd180b1f02addaadd9556f5f6c78f7f184e8b370c20efc1bcda1fae0085a85d44ac74aff5","ssdeep":"1536:rho6Y5klUXMAeuaGwCr378VQZkt5FNCoVx:rhonklUhaGwCr378VQZkt5FfVx","tlshash":"d3639519b919613e2c2791e883ccb9ec611ef0c0de3b06b97e9a41316ac37f619b7558","first_seen":"2026-10-10T23:23:14.740997Z","last_seen":"2026-10-10T23:23:14.740997Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aghpl.com/~flock.js","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aghpl.com/","date":"2026-10-10T23:22:35.699Z","timestamp":1791674555699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aghpl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 21:30:21 GMT","end":"Mon, 30 Nov 2026 22:30:17 GMT"},"fingerprint":{"sha1":"C3:F8:61:11:B6:69:B0:C5:A6:ED:7E:85:41:BC:23:19:FB:B7:0B:23","sha256":"AB:E3:63:63:AF:BF:B6:3B:D0:DE:5D:C0:B9:7D:61:69:E7:A9:C8:CF:0B:92:E7:FC:19:2E:4C:22:3B:1B:46:D1"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: aghpl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aghpl.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=0c16dfe1-d54d-41c5-9cb9-637fa1d84236; __cf_bm=x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"0c16dfe1-d54d-41c5-9cb9-637fa1d84236"},{"name":"__cf_bm","value":"x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 23:22:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a4895e351f944e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-11T04:42:14.991224Z","times_seen":18409,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aghpl.com/logo.svg","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aghpl.com/","date":"2026-10-10T23:22:36.011Z","timestamp":1791674556011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aghpl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 21:30:21 GMT","end":"Mon, 30 Nov 2026 22:30:17 GMT"},"fingerprint":{"sha1":"C3:F8:61:11:B6:69:B0:C5:A6:ED:7E:85:41:BC:23:19:FB:B7:0B:23","sha256":"AB:E3:63:63:AF:BF:B6:3B:D0:DE:5D:C0:B9:7D:61:69:E7:A9:C8:CF:0B:92:E7:FC:19:2E:4C:22:3B:1B:46:D1"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: aghpl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aghpl.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=0c16dfe1-d54d-41c5-9cb9-637fa1d84236; __cf_bm=x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"0c16dfe1-d54d-41c5-9cb9-637fa1d84236"},{"name":"__cf_bm","value":"x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 23:22:36 GMT\r\ncontent-type: image/svg+xml\r\nx-deployment-id: 0c16dfe1-d54d-41c5-9cb9-637fa1d84236\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"de28f1d66b8c897e7ad1a6e6b29b4866\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a4895e370b604e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8159,"size_decoded":3507,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de28f1d66b8c897e7ad1a6e6b29b4866","sha1":"e0435efcfecec0bb4e2708c50acd8ea3d6271f7b","sha256":"d3e6095e2b08d7626273aedb012bf236c3161ec99792241d1dafbb6dc5644a62","sha512":"638818551ad0b907c75a2debff2e363bdd001740be002ad40122a341a2663883d4c44d9f960272d1cf58ff7a0dde2975163306f47abab882ecbef0ef4ff3a770","ssdeep":"192:wnSnw6Z+215OWYlviFmg18hIv/c6T0i3Xjgso6:mN6lcJUmg18gE6rH","tlshash":"a6f1decd17202cd98ed4d3da3f18a03aa06b51b3aa75494cc259df6d2989cbfcc15ec6","first_seen":"2026-10-10T23:23:14.746484Z","last_seen":"2026-10-10T23:23:14.746484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aghpl.com/~api/analytics","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aghpl.com/","date":"2026-10-10T23:22:36.181Z","timestamp":1791674556181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aghpl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 21:30:21 GMT","end":"Mon, 30 Nov 2026 22:30:17 GMT"},"fingerprint":{"sha1":"C3:F8:61:11:B6:69:B0:C5:A6:ED:7E:85:41:BC:23:19:FB:B7:0B:23","sha256":"AB:E3:63:63:AF:BF:B6:3B:D0:DE:5D:C0:B9:7D:61:69:E7:A9:C8:CF:0B:92:E7:FC:19:2E:4C:22:3B:1B:46:D1"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: aghpl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aghpl.com/\r\nContent-Type: application/json\r\nContent-Length: 330\r\nOrigin: https://aghpl.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=0c16dfe1-d54d-41c5-9cb9-637fa1d84236; __cf_bm=x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV; session-id=2b3d75ea-48fe-4fb6-aba4-49237f3c1340\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"0c16dfe1-d54d-41c5-9cb9-637fa1d84236"},{"name":"__cf_bm","value":"x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV"},{"name":"session-id","value":"2b3d75ea-48fe-4fb6-aba4-49237f3c1340"}],"method":"POST","post_data":{"size":330,"data":"{\"timestamp\":\"2026-10-10T23:22:36.179Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"2b3d75ea-48fe-4fb6-aba4-49237f3c1340\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://aghpl.com/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Sat, 10 Oct 2026 23:22:36 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a4895e381de34e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-10-11T04:42:14.982609Z","times_seen":8220,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aghpl.com/__l5e/trackevents","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aghpl.com/","date":"2026-10-10T23:22:46.316Z","timestamp":1791674566316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aghpl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 21:30:21 GMT","end":"Mon, 30 Nov 2026 22:30:17 GMT"},"fingerprint":{"sha1":"C3:F8:61:11:B6:69:B0:C5:A6:ED:7E:85:41:BC:23:19:FB:B7:0B:23","sha256":"AB:E3:63:63:AF:BF:B6:3B:D0:DE:5D:C0:B9:7D:61:69:E7:A9:C8:CF:0B:92:E7:FC:19:2E:4C:22:3B:1B:46:D1"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: aghpl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nReferer: https://aghpl.com/\r\nContent-Length: 1139\r\nOrigin: https://aghpl.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=0c16dfe1-d54d-41c5-9cb9-637fa1d84236; __cf_bm=x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV; session-id=2b3d75ea-48fe-4fb6-aba4-49237f3c1340\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"0c16dfe1-d54d-41c5-9cb9-637fa1d84236"},{"name":"__cf_bm","value":"x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV"},{"name":"session-id","value":"2b3d75ea-48fe-4fb6-aba4-49237f3c1340"}],"method":"POST","post_data":{"size":1139,"data":"{\"envelope_schema_version\":1,\"batch_id\":\"8f5d77d7-0ef4-4218-827c-4893a5fea902\",\"sent_at\":\"2026-10-10T23:22:46.308Z\",\"sdk\":{\"name\":\"lovable-user-app-events\",\"version\":\"0.3.0-automated-flag\"},\"automated\":false,\"artifact\":{\"kind\":\"cf_deployment_id\",\"id\":\"0c16dfe1-d54d-41c5-9cb9-637fa1d84236\",\"commit_sha\":\"fb4850e9dcc02c1b386d21faa12ac89b2c070368\",\"context_token\":\"v1.eyJwcm9qZWN0X2lkIjoibG92cF8zdDRyd2VleXhiOTc4OWo5MW0wcjhhbmpkMiIsImFydGlmYWN0X2tpbmQiOiJjZl9kZXBsb3ltZW50X2lkIiwiYXJ0aWZhY3RfaWQiOiIwYzE2ZGZlMS1kNTRkLTQxYzUtOWNiOS02MzdmYTFkODQyMzYiLCJjb21taXRfc2hhIjoiZmI0ODUwZTlkY2MwMmMxYjM4NmQyMWZhYTEyYWM4OWIyYzA3MDM2OCIsImV4cCI6MTc5NDI2NjU1NX0.ImxDCmCFLlaR18zJxgZXTF5VTpd7c8f3irb724mji3Q\"},\"events\":[{\"event_id\":\"ce7ba63a-3ed3-42b5-9050-b394ff2b923b\",\"event_name\":\"lovable.page_engagement\",\"event_schema_version\":1,\"event_time\":\"2026-10-10T23:22:46.057Z\",\"session_id\":\"52bc35f8-771d-4358-a4a3-c8463589a5c6\",\"page_view_id\":\"5ccca52b-9402-4be1-9dec-030d6ea709d0\",\"trace_id\":\"0e3d13bee9274950f40ab59e56f2a0f7\",\"span_id\":\"ea2e0ae137a1b065\",\"parent_span_id\":\"e3544bbc715b5d58\",\"properties\":{\"reason\":\"threshold\",\"engagement_time_ms\":10181}}]}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Sat, 10 Oct 2026 23:22:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a4895e777d684e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-10-11T04:42:14.960023Z","times_seen":4115,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aghpl.com/__l5e/events.1718a1eacac7ff3a.js","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aghpl.com/","date":"2026-10-10T23:22:35.701Z","timestamp":1791674555701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aghpl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 21:30:21 GMT","end":"Mon, 30 Nov 2026 22:30:17 GMT"},"fingerprint":{"sha1":"C3:F8:61:11:B6:69:B0:C5:A6:ED:7E:85:41:BC:23:19:FB:B7:0B:23","sha256":"AB:E3:63:63:AF:BF:B6:3B:D0:DE:5D:C0:B9:7D:61:69:E7:A9:C8:CF:0B:92:E7:FC:19:2E:4C:22:3B:1B:46:D1"}}},"request":{"raw":"GET /__l5e/events.1718a1eacac7ff3a.js HTTP/1.1\r\nHost: aghpl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aghpl.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=0c16dfe1-d54d-41c5-9cb9-637fa1d84236; __cf_bm=x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"0c16dfe1-d54d-41c5-9cb9-637fa1d84236"},{"name":"__cf_bm","value":"x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 23:22:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a4895e351f984e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24997,"size_decoded":10542,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24997), with no line terminators","md5":"1ff59b5a0c70987bcab9e10695666256","sha1":"2054e233555422ebb516b18797498a650b089b16","sha256":"c6aeda0a1a77a012ab8af4636ea7954ba93b485a1a675c9519c7d23a702ea1d1","sha512":"095459b6937b10438847bcf9b3a02fdd102269f1e78bf4e44d11d0fc9d1f3e4c49fc1c605f03312c4fb67e049cc96e803614480b8dfc160bbe68449c076f4682","ssdeep":"768:50COTDu1TyIxLpV0iDBb3EZItbqwCpeAoTqtbg21joTVmZgJhO7FI2MDFtsKeEX0:aWUUbldRJTe2mtFhU/9H3k","tlshash":"20b2099271c4b03397f28ae920554007b17c9ea7348d81f0e6ec8d2a49e7a56e0bbf5d","first_seen":"2026-10-09T12:50:36.960444Z","last_seen":"2026-10-11T04:42:14.998604Z","times_seen":171,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aghpl.com/logo.svg","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aghpl.com/","date":"2026-10-10T23:22:35.907Z","timestamp":1791674555907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aghpl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 21:30:21 GMT","end":"Mon, 30 Nov 2026 22:30:17 GMT"},"fingerprint":{"sha1":"C3:F8:61:11:B6:69:B0:C5:A6:ED:7E:85:41:BC:23:19:FB:B7:0B:23","sha256":"AB:E3:63:63:AF:BF:B6:3B:D0:DE:5D:C0:B9:7D:61:69:E7:A9:C8:CF:0B:92:E7:FC:19:2E:4C:22:3B:1B:46:D1"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: aghpl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aghpl.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=0c16dfe1-d54d-41c5-9cb9-637fa1d84236; __cf_bm=x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"0c16dfe1-d54d-41c5-9cb9-637fa1d84236"},{"name":"__cf_bm","value":"x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 23:22:35 GMT\r\ncontent-type: image/svg+xml\r\nx-deployment-id: 0c16dfe1-d54d-41c5-9cb9-637fa1d84236\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"de28f1d66b8c897e7ad1a6e6b29b4866\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a4895e3669ae4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8159,"size_decoded":3507,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de28f1d66b8c897e7ad1a6e6b29b4866","sha1":"e0435efcfecec0bb4e2708c50acd8ea3d6271f7b","sha256":"d3e6095e2b08d7626273aedb012bf236c3161ec99792241d1dafbb6dc5644a62","sha512":"638818551ad0b907c75a2debff2e363bdd001740be002ad40122a341a2663883d4c44d9f960272d1cf58ff7a0dde2975163306f47abab882ecbef0ef4ff3a770","ssdeep":"192:wnSnw6Z+215OWYlviFmg18hIv/c6T0i3Xjgso6:mN6lcJUmg18gE6rH","tlshash":"a6f1decd17202cd98ed4d3da3f18a03aa06b51b3aa75494cc259df6d2989cbfcc15ec6","first_seen":"2026-10-10T23:23:14.746484Z","last_seen":"2026-10-10T23:23:14.746484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aghpl.com/assets/hero-background-Bcra6x6O.jpg","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aghpl.com/","date":"2026-10-10T23:22:35.920Z","timestamp":1791674555920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aghpl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 21:30:21 GMT","end":"Mon, 30 Nov 2026 22:30:17 GMT"},"fingerprint":{"sha1":"C3:F8:61:11:B6:69:B0:C5:A6:ED:7E:85:41:BC:23:19:FB:B7:0B:23","sha256":"AB:E3:63:63:AF:BF:B6:3B:D0:DE:5D:C0:B9:7D:61:69:E7:A9:C8:CF:0B:92:E7:FC:19:2E:4C:22:3B:1B:46:D1"}}},"request":{"raw":"GET /assets/hero-background-Bcra6x6O.jpg HTTP/1.1\r\nHost: aghpl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aghpl.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=0c16dfe1-d54d-41c5-9cb9-637fa1d84236; __cf_bm=x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"0c16dfe1-d54d-41c5-9cb9-637fa1d84236"},{"name":"__cf_bm","value":"x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 23:22:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 87225\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"b95a996a63bf0af617d128aac1e3f9dd\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 0c16dfe1-d54d-41c5-9cb9-637fa1d84236\r\nserver: cloudflare\r\ncf-ray: a4895e3679e14e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87225,"size_decoded":87692,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"b95a996a63bf0af617d128aac1e3f9dd","sha1":"92512d6682ced3dfe1c07ae4b070ac246ca8c3d8","sha256":"b44b08be7005cf02b9a11664ea8bdbd2ce93cc1eb45984fbb2aae790f5e7037f","sha512":"4a5e9d3a432f3abbdca973ad2d7ca1162e12a9261b6930a1ebf931af08d95b28bb1956b6ae8fc686a7806efb12bea09f46bd75becab4b211deda41c412447dbf","ssdeep":"1536:3DREzZnjCCCo99JpSjUIC+LykdP7Igb3pP3gdzKE2+RtRFV:TRAdZNppnQP7Igb9AmE2KtRFV","tlshash":"e8836c039c16ab83952487f8bf034dedab597b1cbd823a9b1423cfe779646025c5d43a","first_seen":"2026-10-10T23:23:14.75345Z","last_seen":"2026-10-10T23:23:14.75345Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aghpl.com/__l5e/trackevents","fqdn":"aghpl.com","domain":"aghpl.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aghpl.com/","date":"2026-10-10T23:22:36.149Z","timestamp":1791674556149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aghpl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 21:30:21 GMT","end":"Mon, 30 Nov 2026 22:30:17 GMT"},"fingerprint":{"sha1":"C3:F8:61:11:B6:69:B0:C5:A6:ED:7E:85:41:BC:23:19:FB:B7:0B:23","sha256":"AB:E3:63:63:AF:BF:B6:3B:D0:DE:5D:C0:B9:7D:61:69:E7:A9:C8:CF:0B:92:E7:FC:19:2E:4C:22:3B:1B:46:D1"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: aghpl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nReferer: https://aghpl.com/\r\nContent-Length: 2611\r\nOrigin: https://aghpl.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=0c16dfe1-d54d-41c5-9cb9-637fa1d84236; __cf_bm=x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"0c16dfe1-d54d-41c5-9cb9-637fa1d84236"},{"name":"__cf_bm","value":"x_31sgP_Xo5RpO_StW9XuiILSoE1EYGDb0vLXwbPf9w-1791674555.190896-1.0.1.1-tkGcf_uVUR8IIzzSq_6ooLsYTlTWoB8ATXoU6l4hy1axjUJ3yBsyp2xGOslXzIaN7i9_oBU1CcAvPUuPKSORRQJT0s.FIQXkmWC1G4ueVaaKkvYel7RdF8bqIqLffDeV"}],"method":"POST","post_data":{"size":2611,"data":"{\"envelope_schema_version\":1,\"batch_id\":\"4caeec64-694f-48d1-907a-0dca09ebdb57\",\"sent_at\":\"2026-10-10T23:22:36.147Z\",\"sdk\":{\"name\":\"lovable-user-app-events\",\"version\":\"0.3.0-automated-flag\"},\"automated\":false,\"artifact\":{\"kind\":\"cf_deployment_id\",\"id\":\"0c16dfe1-d54d-41c5-9cb9-637fa1d84236\",\"commit_sha\":\"fb4850e9dcc02c1b386d21faa12ac89b2c070368\",\"context_token\":\"v1.eyJwcm9qZWN0X2lkIjoibG92cF8zdDRyd2VleXhiOTc4OWo5MW0wcjhhbmpkMiIsImFydGlmYWN0X2tpbmQiOiJjZl9kZXBsb3ltZW50X2lkIiwiYXJ0aWZhY3RfaWQiOiIwYzE2ZGZlMS1kNTRkLTQxYzUtOWNiOS02MzdmYTFkODQyMzYiLCJjb21taXRfc2hhIjoiZmI0ODUwZTlkY2MwMmMxYjM4NmQyMWZhYTEyYWM4OWIyYzA3MDM2OCIsImV4cCI6MTc5NDI2NjU1NX0.ImxDCmCFLlaR18zJxgZXTF5VTpd7c8f3irb724mji3Q\"},\"events\":[{\"event_id\":\"e1b51128-721c-4280-891b-470dae210b2c\",\"event_name\":\"lovable.web_vital\",\"event_schema_version\":1,\"event_time\":\"2026-10-10T23:22:35.876Z\",\"session_id\":\"52bc35f8-771d-4358-a4a3-c8463589a5c6\",\"page_view_id\":\"5ccca52b-9402-4be1-9dec-030d6ea709d0\",\"trace_id\":\"0e3d13bee9274950f40ab59e56f2a0f7\",\"span_id\":\"07f08629454ca553\",\"parent_span_id\":\"e3544bbc715b5d58\",\"properties\":{\"url_path\":\"/\",\"metric\":\"TTFB\",\"value\":260,\"unit\":\"millisecond\",\"delta\":260,\"rating\":\"good\",\"id\":\"d25a6a58-9ffa-4958-8f14-8aeb0245ca64\",\"navigation_type\":\"initial_load\"}},{\"event_id\":\"64f245f2-f0ac-4a19-833f-3d41e2b19683\",\"event_name\":\"lovable.session_started\",\"event_schema_version\":1,\"event_time\":\"2026-10-10T23:22:35.876Z\",\"session_id\":\"52bc35f8-771d-4358-a4a3-c8463589a5c6\",\"page_view_id\":\"5ccca52b-9402-4be1-9dec-030d6ea709d0\",\"trace_id\":\"0e3d13bee9274950f40ab59e56f2a0f7\",\"span_id\":\"6356c1488877b1c3\",\"parent_span_id\":\"e3544bbc715b5d58\",\"properties\":{\"reason\":\"new_session\"}},{\"event_id\":\"fad6e5eb-9663-4be0-b3c1-873254f7a175\",\"event_name\":\"lovable.page_viewed\",\"event_schema_version\":1,\"event_time\":\"2026-10-10T23:22:35.876Z\",\"session_id\":\"52bc35f8-771d-4358-a4a3-c8463589a5c6\",\"page_view_id\":\"5ccca52b-9402-4be1-9dec-030d6ea709d0\",\"trace_id\":\"0e3d13bee9274950f40ab59e56f2a0f7\",\"span_id\":\"e3544bbc715b5d58\",\"properties\":{\"url_path\":\"/\",\"navigation_type\":\"initial_load\"}},{\"event_id\":\"22546215-0c58-4f5a-a5f7-ae50c35d79b6\",\"event_name\":\"lovable.web_vital\",\"event_schema_version\":1,\"event_time\":\"2026-10-10T23:22:35.965Z\",\"session_id\":\"52bc35f8-771d-4358-a4a3-c8463589a5c6\",\"page_view_id\":\"5ccca52b-9402-4be1-9dec-030d6ea709d0\",\"trace_id\":\"0e3d13bee9274950f40ab59e56f2a0f7\",\"span_id\":\"1f1149973849c8c5\",\"parent_span_id\":\"e3544bbc715b5d58\",\"properties\":{\"url_path\":\"/\",\"metric\":\"FCP\",\"value\":849,\"unit\":\"millisecond\",\"delta\":849,\"rating\":\"good\",\"id\":\"293c830f-f254-464c-b3d6-9dee6f48faac\",\"navigation_type\":\"initial_load\"}}]}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Sat, 10 Oct 2026 23:22:36 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a4895e37ed6b4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-10-11T04:42:14.960023Z","times_seen":4115,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"aghpl.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}