{"report_id":"d66b4177-78bc-4c64-88ba-925ff0ecaf25","version":6,"status":"done","tags":[],"date":"2025-06-19T17:26:05Z","url":{"schema":"http","addr":"pb.noetickavass.top/","fqdn":"pb.noetickavass.top","domain":"noetickavass.top","tld":"top"},"ip":{"addr":"23.109.170.189","port":0,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"http","addr":"pb.noetickavass.top/","fqdn":"pb.noetickavass.top","domain":"noetickavass.top","tld":"top"},"title":"pb.noetickavass.top/"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-28T17:26:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"pb.noetickavass.top","ip":{"addr":"188.42.108.108","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-05-15","domain_rank":0,"first_seen":"2025-06-19T16:32:02.939347Z","last_seen":"2025-06-19T16:32:02.939347Z","alert_count":5,"request_count":3,"received_data":2512,"sent_data":1255,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-06-19T17:25:44Z","timestamp":1750353944,"ip_dst":{"addr":"172.18.0.4","port":46826,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"188.42.108.108","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"severity":"medium","alert":"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.top)","source":"{\"timestamp\":\"2025-06-19T17:25:44.792519+0000\",\"flow_id\":422217969579716,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"188.42.108.108\",\"src_port\":443,\"dest_ip\":\"172.18.0.4\",\"dest_port\":46826,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031230,\"rev\":1,\"signature\":\"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.top)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_11_23\"]}},\"tls\":{\"subject\":\"CN=pb.noetickavass.top\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA\",\"serial\":\"00:FD:9A:AF:CC:57:A7:51:6F:01:19:67:99:F8:F8:30:B2\",\"fingerprint\":\"bb:99:18:51:58:9e:70:a3:39:40:c4:52:61:d0:30:29:9b:58:03:25\",\"sni\":\"pb.noetickavass.top\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-05-15T00:00:00\",\"notafter\":\"2025-08-13T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"76fd782f81a37e6b32ec21bbc9fb4c00\",\"string\":\"771,47,0-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1461,\"bytes_toclient\":4021,\"start\":\"2025-06-19T17:25:44.734916+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-19T17:25:44Z","timestamp":1750353944,"ip_dst":{"addr":"172.18.0.4","port":46826,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"188.42.108.108","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-06-19T17:25:44.792519+0000\",\"flow_id\":422217969579716,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"188.42.108.108\",\"src_port\":443,\"dest_ip\":\"172.18.0.4\",\"dest_port\":46826,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=pb.noetickavass.top\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA\",\"serial\":\"00:FD:9A:AF:CC:57:A7:51:6F:01:19:67:99:F8:F8:30:B2\",\"fingerprint\":\"bb:99:18:51:58:9e:70:a3:39:40:c4:52:61:d0:30:29:9b:58:03:25\",\"sni\":\"pb.noetickavass.top\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-05-15T00:00:00\",\"notafter\":\"2025-08-13T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"76fd782f81a37e6b32ec21bbc9fb4c00\",\"string\":\"771,47,0-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1461,\"bytes_toclient\":4021,\"start\":\"2025-06-19T17:25:44.734916+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-19T17:25:45Z","timestamp":1750353945,"ip_dst":{"addr":"188.42.108.108","port":80,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.4","port":32776,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-06-19T17:25:45.031196+0000\",\"flow_id\":4624741839622,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":32776,\"dest_ip\":\"188.42.108.108\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"pb.noetickavass.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":404,\"length\":29},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":676,\"bytes_toclient\":584,\"start\":\"2025-06-19T17:25:44.996102+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"noetickavass.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"noetickavass.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"noetickavass.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pb.noetickavass.top/","fqdn":"pb.noetickavass.top","domain":"noetickavass.top","tld":"top"},"ip":{"addr":"188.42.108.108","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-19T17:25:44.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pb.noetickavass.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 May 2025 00:00:00 GMT","end":"Wed, 13 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BB:99:18:51:58:9E:70:A3:39:40:C4:52:61:D0:30:29:9B:58:03:25","sha256":"95:84:B3:0D:EF:F3:EA:C1:D7:13:C8:DF:A4:BF:BC:16:B0:0C:5A:C6:1F:F3:E6:23:3A:2F:41:1E:3B:C6:25:D3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pb.noetickavass.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Thu, 19 Jun 2025 17:25:44 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-01T18:10:49.760673Z","times_seen":16013365,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":285,"dns":169,"connect":17,"send":0,"wait":18,"receive":0,"ssl":97},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-06-19T17:25:45Z","timestamp":1750353945,"ip_dst":{"addr":"188.42.108.108","port":80,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.4","port":32776,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-06-19T17:25:45.031196+0000\",\"flow_id\":4624741839622,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":32776,\"dest_ip\":\"188.42.108.108\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"pb.noetickavass.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":404,\"length\":29},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":676,\"bytes_toclient\":584,\"start\":\"2025-06-19T17:25:44.996102+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"noetickavass.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"pb.noetickavass.top/","fqdn":"pb.noetickavass.top","domain":"noetickavass.top","tld":"top"},"ip":{"addr":"188.42.108.108","port":80,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-19T17:25:44.998Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: pb.noetickavass.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":769,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[1,0,3]]],373,[[\"1750353941756\",null,null,null,null,null,null,\"[1,40400,30,null,\\\"771812865.0\\\",\\\"FUhUaPm3BNO0wt0PiKjEiQ0\\\",null,null,null,\\\"no\\\",\\\"NOR\\\",0,7,1282,null,0,0,null,\\\"og-b2263d7f-0b9b-4128-b236-e334bf7d81b2\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,0,null,[2,5,\\\"ug\\\",226],null,null,0,0,1]\",null,null,null,null,null,null,0,[null,null,null,\"[]\"],null,null,null,null,1]],\"1750353956524\",null,null,null,null,null,null,null,null,null,null,null,null,null,[[null,[null,null,null,null,null,null,null,null,null,null,null,null,122505695]],9]]"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Thu, 19 Jun 2025 17:25:45 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-01T18:10:49.760673Z","times_seen":16013365,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":16,"dns":5,"connect":18,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-06-19T17:25:45Z","timestamp":1750353945,"ip_dst":{"addr":"188.42.108.108","port":80,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.4","port":32776,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-06-19T17:25:45.031196+0000\",\"flow_id\":4624741839622,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":32776,\"dest_ip\":\"188.42.108.108\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"pb.noetickavass.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":404,\"length\":29},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":676,\"bytes_toclient\":584,\"start\":\"2025-06-19T17:25:44.996102+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"noetickavass.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"pb.noetickavass.top/favicon.ico","fqdn":"pb.noetickavass.top","domain":"noetickavass.top","tld":"top"},"ip":{"addr":"188.42.108.108","port":80,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"http://pb.noetickavass.top/","date":"2025-06-19T17:25:45.226Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pb.noetickavass.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://pb.noetickavass.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":15431,"data":"{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":20},\"discarded\":false},\"application\":{\"id\":\"6aa7fbaa-0fbf-4297-bf8a-85b3df3c3d26\"},\"date\":1750353907718,\"service\":\"kairos\",\"source\":\"browser\",\"session\":{\"id\":\"d0f33e33-4049-4e3a-8d73-31031e084b1e\",\"type\":\"user\"},\"view\":{\"id\":\"08f102da-38cc-48fb-b1d5-fd9876944f11\",\"url\":\"https://app.omadahealth.com/registration/v2?attribution_session_id=3202282c-0ef2-4a15-adfb-4b6e44e449cd\u0026campaign_participation_code=8fd4b832a5ae\u0026deployment_code=cigna_standard\u0026landing_page_digest=51e1424eeb514560081905811593feb19b6594c1e79146eae6fff3bed87a3e5a\u0026landing_slug=omadaforcigna-pvn\",\"referrer\":\"https://pages.omadahealth.com/\"},\"action\":{\"id\":[]},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"resource\":{\"id\":\"1dbfd9e0-0897-4ba9-888a-8d97faec6544\",\"type\":\"css\",\"url\":\"https://app.omadahealth.com/assets/css/therapy-951c8249d553f6eae90d472d02588e1203e3264beeeffa8267287c968ad3e480.css\",\"protocol\":\"h3\",\"duration\":278000000,\"size\":106950,\"encoded_body_size\":14405,\"decoded_body_size\":106950,\"transfer_size\":14958,\"download\":{\"duration\":2000000,\"start\":276000000},\"first_byte\":{\"duration\":234000000,\"start\":42000000}},\"type\":\"resource\"}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":20},\"discarded\":false},\"application\":{\"id\":\"6aa7fbaa-0fbf-4297-bf8a-85b3df3c3d26\"},\"date\":1750353907718,\"service\":\"kairos\",\"source\":\"browser\",\"session\":{\"id\":\"d0f33e33-4049-4e3a-8d73-31031e084b1e\",\"type\":\"user\"},\"view\":{\"id\":\"08f102da-38cc-48fb-b1d5-fd9876944f11\",\"url\":\"https://app.omadahealth.com/registration/v2?attribution_session_id=3202282c-0ef2-4a15-adfb-4b6e44e449cd\u0026campaign_participation_code=8fd4b832a5ae\u0026deployment_code=cigna_standard\u0026landing_page_digest=51e1424eeb514560081905811593feb19b6594c1e79146eae6fff3bed87a3e5a\u0026landing_slug=omadaforcigna-pvn\",\"referrer\":\"https://pages.omadahealth.com/\"},\"action\":{\"id\":[]},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"resource\":{\"id\":\"cafd5e5d-39c2-44c0-835b-abc598ef36c5\",\"type\":\"css\",\"url\":\"https://app.omadahealth.com/assets/css/registration-06723bf9494685d6b0b2d33db3e98234aea0a5ed13569fd1d4cf8dcc4ba06246.css\",\"protocol\":\"h3\",\"duration\":299000000,\"size\":188007,\"encoded_body_size\":26249,\"decoded_body_size\":188007,\"transfer_size\":26802,\"download\":{\"duration\":4000000,\"start\":295000000},\"first_byte\":{\"duration\":251000000,\"start\":44000000}},\"type\":\"resource\"}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":20},\"discarded\":false},\"application\":{\"id\":\"6aa7fbaa-0fbf-4297-bf8a-85b3df3c3d26\"},\"date\":1750353907718,\"service\":\"kairos\",\"source\":\"browser\",\"session\":{\"id\":\"d0f33e33-4049-4e3a-8d73-31031e084b1e\",\"type\":\"user\"},\"view\":{\"id\":\"08f102da-38cc-48fb-b1d5-fd9876944f11\",\"url\":\"https://app.omadahealth.com/registration/v2?attribution_session_id=3202282c-0ef2-4a15-adfb-4b6e44e449cd\u0026campaign_participation_code=8fd4b832a5ae\u0026deployment_code=cigna_standard\u0026landing_page_digest=51e1424eeb514560081905811593feb19b6594c1e79146eae6fff3bed87a3e5a\u0026landing_slug=omadaforcigna-pvn\",\"referrer\":\"https://pages.omadahealth.com/\"},\"action\":{\"id\":[]},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"resource\":{\"id\":\"c43ae97c-e955-4f2a-8001-8ff22f9601f0\",\"type\":\"css\",\"url\":\"https://app.omadahealth.com/assets/js/registration/registration-9528032209fe9052046da54662cd5a0fbee6d83cc8704da7da5aacdeeeb5998d.css\",\"protocol\":\"h3\",\"duration\":621000000,\"size\":27229,\"encoded_body_size\":6945,\"decoded_body_size\":27229,\"transfer_size\":7497,\"download\":{\"duration\":1000000,\"start\":620000000},\"first_byte\":{\"duration\":572000000,\"start\":48000000}},\"type\":\"resource\"}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":20},\"discarded\":false},\"application\":{\"id\":\"6aa7fbaa-0fbf-4297-bf8a-85b3df3c3d26\"},\"date\":1750353907719,\"service\":\"kairos\",\"source\":\"browser\",\"session\":{\"id\":\"d0f33e33-4049-4e3a-8d73-31031e084b1e\",\"type\":\"user\"},\"view\":{\"id\":\"08f102da-38cc-48fb-b1d5-fd9876944f11\",\"url\":\"https://app.omadahealth.com/registration/v2?attribution_session_id=3202282c-0ef2-4a15-adfb-4b6e44e449cd\u0026campaign_participation_code=8fd4b832a5ae\u0026deployment_code=cigna_standard\u0026landing_page_digest=51e1424eeb514560081905811593feb19b6594c1e79146eae6fff3bed87a3e5a\u0026landing_slug=omadaforcigna-pvn\",\"referrer\":\"https://pages.omadahealth.com/\"},\"action\":{\"id\":[]},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"resource\":{\"id\":\"b20ed94e-80f4-42e2-a862-e10e4175af77\",\"type\":\"js\",\"url\":\"https://app.omadahealth.com/assets/js/polyfills/polyfills-791bc5f013b0c460f2c96edb9007934aeae4e09d1c1db1cb813238371ceb73a8.js\",\"protocol\":\"h3\",\"duration\":785000000,\"size\":186429,\"encoded_body_size\":63150,\"decoded_body_size\":186429,\"transfer_size\":63717,\"download\":{\"duration\":2000000,\"start\":783000000},\"first_byte\":{\"duration\":733000000,\"start\":50000000}},\"type\":\"resource\"}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":20},\"discarded\":false},\"application\":{\"id\":\"6aa7fbaa-0fbf-4297-bf8a-85b3df3c3d26\"},\"date\":1750353907719,\"service\":\"kairos\",\"source\":\"browser\",\"session\":{\"id\":\"d0f33e33-4049-4e3a-8d73-31031e084b1e\",\"type\":\"user\"},\"view\":{\"id\":\"08f102da-38cc-48fb-b1d5-fd9876944f11\",\"url\":\"https://app.omadahealth.com/registration/v2?attribution_session_id=3202282c-0ef2-4a15-adfb-4b6e44e449cd\u0026campaign_participation_code=8fd4b832a5ae\u0026deployment_code=cigna_standard\u0026landing_page_digest=51e1424eeb514560081905811593feb19b6594c1e79146eae6fff3bed87a3e5a\u0026landing_slug=omadaforcigna-pvn\",\"referrer\":\"https://pages.omadahealth.com/\"},\"action\":{\"id\":[]},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"resource\":{\"id\":\"f6233add-fac4-4cc2-ae89-d2c625fec22e\",\"type\":\"js\",\"url\":\"https://app.omadahealth.com/assets/inline_scripts/datadog-3567c81c4ca22e8426f54fa82ba8c19546d9f2874b172df266d60539ea874e88.js\",\"protocol\":\"h3\",\"duration\":246000000,\"size\":966,\"encoded_body_size\":527,\"decoded_body_size\":966,\"transfer_size\":1092,\"download\":{\"duration\":0,\"start\":246000000},\"first_byte\":{\"duration\":197000000,\"start\":49000000}},\"type\":\"resource\"}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":20},\"discarded\":false},\"application\":{\"id\":\"6aa7fbaa-0fbf-4297-bf8a-85b3df3c3d26\"},\"date\":1750353907721,\"service\":\"kairos\",\"source\":\"browser\",\"session\":{\"id\":\"d0f33e33-4049-4e3a-8d73-31031e084b1e\",\"type\":\"user\"},\"view\":{\"id\":\"08f102da-38cc-48fb-b1d5-fd9876944f11\",\"url\":\"https://app.omadahealth.com/registration/v2?attribution_session_id=3202282c-0ef2-4a15-adfb-4b6e44e449cd\u0026campaign_participation_code=8fd4b832a5ae\u0026deployment_code=cigna_standard\u0026landing_page_digest=51e1424eeb514560081905811593feb19b6594c1e79146eae6fff3bed87a3e5a\u0026landing_slug=omadaforcigna-pvn\",\"referrer\":\"https://pages.omadahealth.com/\"},\"action\":{\"id\":[]},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"resource\":{\"id\":\"82a1f655-420a-463b-97c1-2a71e215fd29\",\"type\":\"js\",\"url\":\"https://app.omadahealth.com/assets/runtime~js/registration/registration-74ad7dcef27165683093aeda2798a821cafde529683127bfc42e8fabbb3b1010.js\",\"protocol\":\"h3\",\"duration\":577000000,\"size\":2086,\"encoded_body_size\":1124,\"decoded_body_size\":2086,\"transfer_size\":1690,\"download\":{\"duration\":0,\"start\":577000000},\"first_byte\":{\"duration\":528000000,\"start\":49000000}},\"type\":\"resource\"}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":20},\"discarded\":false},\"application\":{\"id\":\"6aa7fbaa-0fbf-4297-bf8a-85b3df3c3d26\"},\"date\":1750353907721,\"service\":\"kairos\",\"source\":\"browser\",\"session\":{\"id\":\"d0f33e33-4049-4e3a-8d73-31031e084b1e\",\"type\":\"user\"},\"view\":{\"id\":\"08f102da-38cc-48fb-b1d5-fd9876944f11\",\"url\":\"https://app.omadahealth.com/registration/v2?attribution_session_id=3202282c-0ef2-4a15-adfb-4b6e44e449cd\u0026campaign_participation_code=8fd4b832a5ae\u0026deployment_code=cigna_standard\u0026landing_page_digest=51e1424eeb514560081905811593feb19b6594c1e79146eae6fff3bed87a3e5a\u0026landing_slug=omadaforcigna-pvn\",\"referrer\":\"https://pages.omadahealth.com/\"},\"action\":{\"id\":[]},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"resource\":{\"id\":\"023e0564-e2b4-4590-b6df-e722d4d874d4\",\"type\":\"js\",\"url\":\"https://app.omadahealth.com/assets/defaultVendors~js/registration/registration-35d4dac7522f933e71f43032a987a7a8f25b22ff7aff9dd1ec11bfdd139a54b2.js\",\"protocol\":\"h3\",\"duration\":616000000,\"size\":1652474,\"encoded_body_size\":305638,\"decoded_body_size\":1652474,\"transfer_size\":306206,\"download\":{\"duration\":291000000,\"start\":325000000},\"first_byte\":{\"duration\":274000000,\"start\":51000000}},\"type\":\"resource\"}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":20},\"discarded\":false},\"application\":{\"id\":\"6aa7fbaa-0fbf-4297-bf8a-85b3df3c3d26\"},\"date\":1750353908368,\"service\":\"kairos\",\"source\":\"browser\",\"session\":{\"id\":\"d0f33e33-4049-4e3a-8d73-31031e084b1e\",\"type\":\"user\"},\"view\":{\"id\":\"08f102da-38cc-48fb-b1d5-fd9876944f11\",\"url\":\"https://app.omadahealth.com/registration/v2?attribution_session_id=3202282c-0ef2-4a15-adfb-4b6e44e449cd\u0026campaign_participation_code=8fd4b832a5ae\u0026deployment_code=cigna_standard\u0026landing_page_digest=51e1424eeb514560081905811593feb19b6594c1e79146eae6fff3bed87a3e5a\u0026landing_slug=omadaforcigna-pvn\",\"referrer\":\"https://pages.omadahealth.com/\"},\"action\":{\"id\":[]},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"resource\":{\"id\":\"3214c258-fef9-4d5f-a5e4-4368a67c4432\",\"type\":\"js\",\"url\":\"https://www.datadoghq-browser-agent.com/us1/v5/datadog-rum.js\",\"protocol\":\"h2\",\"duration\":69000000,\"size\":165703,\"encoded_body_size\":51813,\"decoded_body_size\":165703,\"transfer_size\":52377,\"download\":{\"duration\":2000000,\"start\":67000000},\"first_byte\":{\"duration\":3000000,\"start\":64000000},\"connect\":{\"duration\":19000000,\"start\":44000000},\"ssl\":{\"duration\":8000000,\"start\":55000000},\"dns\":{\"duration\":29000000,\"start\":15000000}},\"type\":\"resource\"}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":20},\"discarded\":false},\"application\":{\"id\":\"6aa7fbaa-0fbf-4297-bf8a-85b3df3c3d26\"},\"date\":1750353907729,\"service\":\"kairos\",\"source\":\"browser\",\"session\":{\"id\":\"d0f33e33-4049-4e3a-8d73-31031e084b1e\",\"type\":\"user\"},\"view\":{\"id\":\"08f102da-38cc-48fb-b1d5-fd9876944f11\",\"url\":\"https://app.omadahealth.com/registration/v2?attribution_session_id=3202282c-0ef2-4a15-adfb-4b6e44e449cd\u0026campaign_participation_code=8fd4b832a5ae\u0026deployment_code=cigna_standard\u0026landing_page_digest=51e1424eeb514560081905811593feb19b6594c1e79146eae6fff3bed87a3e5a\u0026landing_slug=omadaforcigna-pvn\",\"referrer\":\"https://pages.omadahealth.com/\"},\"action\":{\"id\":[]},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"resource\":{\"id\":\"d4290c00-410b-4bd6-8347-b491262c033d\",\"type\":\"js\",\"url\":\"https://app.omadahealth.com/assets/js/registration/registration-92ff03f56cc7aa24945578f8f1752f992f31d9fe6efb32b4d1be17311bb743cd.js\",\"protocol\":\"h3\",\"duration\":1026000000,\"size\":558051,\"encoded_body_size\":154665,\"decoded_body_size\":558051,\"transfer_size\":155233,\"download\":{\"duration\":192000000,\"start\":834000000},\"first_byte\":{\"duration\":788000000,\"start\":46000000}},\"type\":\"resource\"}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":20},\"discarded\":false},\"application\":{\"id\":\"6aa7fbaa-0fbf-4297-bf8a-85b3df3c3d26\"},\"date\":1750353904185,\"service\":\"kairos\",\"source\":\"browser\",\"session\":{\"id\":\"d0f33e33-4049-4e3a-8d73-31031e084b1e\",\"type\":\"user\"},\"view\":{\"id\":\"08f102da-38cc-48fb-b1d5-fd9876944f11\",\"url\":\"https://app.omadahealth.com/registration/v2?attribution_session_id=3202282c-0ef2-4a15-adfb-4b6e44e449cd\u0026campaign_participation_code=8fd4b832a5ae\u0026deployment_code=cigna_standard\u0026landing_page_digest=51e1424eeb514560081905811593feb19b6594c1e79146eae6fff3bed87a3e5a\u0026landing_slug=omadaforcigna-pvn\",\"referrer\":\"https://pages.omadahealth.com/\"},\"action\":{\"id\":[]},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"resource\":{\"id\":\"d975b026-33e1-4935-b8e1-ac1dcbf8bf60\",\"type\":\"document\",\"url\":\"https://app.omadahealth.com/registration/v2?attribution_session_id=3202282c-0ef2-4a15-adfb-4b6e44e449cd\u0026campaign_participation_code=8fd4b832a5ae\u0026deployment_code=cigna_standard\u0026landing_page_digest=51e1424eeb514560081905811593feb19b6594c1e79146eae6fff3bed87a3e5a\u0026landing_slug=omadaforcigna-pvn\",\"protocol\":\"h3\",\"duration\":3364000000,\"size\":6108,\"encoded_body_size\":2783,\"decoded_body_size\":6108,\"transfer_size\":6395,\"download\":{\"duration\":0,\"start\":3364000000},\"first_byte\":{\"duration\":2724000000,\"start\":640000000}},\"type\":\"resource\"}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":20},\"discarded\":false},\"application\":{\"id\":\"6aa7fbaa-0fbf-4297-bf8a-85b3df3c3d26\"},\"date\":1750353909185,\"service\":\"kairos\",\"source\":\"browser\",\"session\":{\"id\":\"d0f33e33-4049-4e3a-8d73-31031e084b1e\",\"type\":\"user\"},\"view\":{\"id\":\"08f102da-38cc-48fb-b1d5-fd9876944f11\",\"url\":\"https://app.omadahealth.com/registration/v2?attribution_session_id=3202282c-0ef2-4a15-adfb-4b6e44e449cd\u0026campaign_participation_code=8fd4b832a5ae\u0026deployment_code=cigna_standard\u0026landing_page_digest=51e1424eeb514560081905811593feb19b6594c1e79146eae6fff3bed87a3e5a\u0026landing_slug=omadaforcigna-pvn\",\"referrer\":\"https://pages.omadahealth.com/\"},\"action\":{\"id\":[]},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"resource\":{\"id\":\"438648e5-55c7-41df-b4e6-80dc4f3c7168\",\"type\":\"xhr\",\"duration\":256000000,\"method\":\"POST\",\"status_code\":200,\"protocol\":\"h3\",\"url\":\"https://app.omadahealth.com/analytics_events\",\"size\":0,\"encoded_body_size\":0,\"decoded_body_size\":0,\"transfer_size\":1936,\"download\":{\"duration\":1000000,\"start\":255000000},\"first_byte\":{\"duration\":251000000,\"start\":4000000}},\"type\":\"resource\"}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":20,\"start_session_replay_recording_manually\":false},\"document_version\":1,\"page_states\":[{\"state\":\"passive\",\"start\":4366000000}]},\"application\":{\"id\":\"6aa7fbaa-0fbf-4297-bf8a-85b3df3c3d26\"},\"date\":1750353904185,\"service\":\"kairos\",\"source\":\"browser\",\"session\":{\"id\":\"d0f33e33-4049-4e3a-8d73-31031e084b1e\",\"type\":\"user\",\"sampled_for_replay\":false},\"view\":{\"id\":\"08f102da-38cc-48fb-b1d5-fd9876944f11\",\"url\":\"https://app.omadahealth.com/registration/v2?attribution_session_id=3202282c-0ef2-4a15-adfb-4b6e44e449cd\u0026campaign_participation_code=8fd4b832a5ae\u0026deployment_code=cigna_standard\u0026landing_page_digest=51e1424eeb514560081905811593feb19b6594c1e79146eae6fff3bed87a3e5a\u0026landing_slug=omadaforcigna-pvn\",\"referrer\":\"https://pages.omadahealth.com/\",\"action\":{\"count\":0},\"frustration\":{\"count\":0},\"error\":{\"count\":0},\"is_active\":true,\"loading_type\":\"initial_load\",\"long_task\":{\"count\":0},\"resource\":{\"count\":0},\"time_spent\":4380000000},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"view\",\"privacy\":{\"replay_level\":\"mask-user-input\"}}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 19 Jun 2025 17:25:45 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 1406\r\nLast-Modified: Wed, 18 Jun 2025 12:06:19 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nETag: \"6852abbb-57e\"\r\nExpires: Fri, 20 Jun 2025 17:25:45 GMT\r\nCache-Control: max-age=86400\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1406,"size_decoded":0,"mime_type":"application/octet-stream","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"011201ab56695ce86ea2f190bce2670b","sha1":"bb8fad6accf293e619360935047c23f00da3c769","sha256":"a9bc1ab7f7c0c6bc5d097050968993474e32346cffa537be1e0335a19645f12e","sha512":"56d53a1219e58ad045c96dc81d71c63c0cf5a9766add778d34895fdaa7fda8dead44161ec291f0ed3d10a405322b7973b56c6b211d68a8d82a8510b5b7c0456c","ssdeep":"","tlshash":"71210082bb20c02cc82c0b300802eba82388f00ac8e8330b30c80b8e0c0008c8ef8ae0","first_seen":"2023-04-05T07:23:52Z","last_seen":"2026-06-01T17:42:48.527594Z","times_seen":21048,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-19","alert":"Sinkholed","trigger":"noetickavass.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}