{"report_id":"d8290c8c-b904-4387-b74e-4f5abd5d1219","version":0,"status":"done","tags":[],"date":"2026-09-20T14:29:06Z","url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"title":"(1) Notification","dom":{"size":28316,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11292)","md5":"364d3684c5f95085e4f3f84c92d71499","sha1":"de3fed56b9508161ff036c33da91bf8bad0653bf","sha256":"5f119a68f52a75beb6507cf7dfdeaec9299870e0ad5b57886cccfc8eb6cc231b","sha512":"d9caf0bac4c2da4f9b0fff6eff6d58436608e51e2c583b192046389de2efed9d48ee0d8d7776c7aacc3dcc32ec5a70de3efb5ada72aae4bfe7175929e633ffc1","ssdeep":"768:n4rrxeabld5R9lP5AuVewLx651aMRzMq9V0xsYNt5JpZ0GN9mZ/IqdAlNgkI:n4rrxeaR9lPXewLx651NRzMqv0xsYNpw","tlshash":"d5d2da5c58fad6b333b960d4b593b5827078da031404e094f7fc8e2363a9d4b4977b69","dom_hash":"domhash53ef6f6ffb38a023a9f5eaffe560721e","first_seen":"2026-09-20T14:29:08.127962Z","last_seen":"2026-09-20T14:29:08.127962Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T14:29:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"yelziv.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2026-05-05","domain_rank":0,"first_seen":"2026-09-19T19:15:09.819305Z","last_seen":"2026-09-19T19:15:09.819305Z","alert_count":26,"request_count":26,"received_data":118600,"sent_data":14872,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"wuytl.com","ip":{"addr":"104.21.0.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-04","domain_rank":0,"first_seen":"2025-09-25T19:46:22.32251Z","last_seen":"2026-09-15T08:17:41.267207Z","alert_count":0,"request_count":3,"received_data":3629,"sent_data":1525,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/shared-I6IP22C7.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"17088b62269bea4bcf36096e1d2dab75","sha1":"cb89dff8e756bf0490d367b9bb2c39144b8ad0c5","sha256":"2cf77c744806301e33fba76993bdc31726a6eb560e66dbfc7704a8e30e7d1693","sha512":"2aa443c3911f088332d44ab6cf638dfe5bb8553c291d1eadbebcc43a472c837ec513bb5787d6b7b3ae888289095a59d4f43b9e886bf08a28f5de76cf4ab57cba","ssdeep":"96:rD0w1GiQf4Mzd72JZpGjM4NbTjnFH7qFAXK8cY7lx:/0wciQf4MVwZpmMObTjnRqFacY/","tlshash":"95b10e1adab7d8eb14f321dd028f9229713604133a4cf5943d9d9a012f2ed5e58e26ec","size":5134,"data":"","first_seen":"2026-09-19T19:15:15.565179Z","last_seen":"2026-09-20T14:29:08.135558Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/shared-PQUHJFH3.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"862e52454d06d378d856192e7bbfa111","sha1":"eda1fee4cab45f0247daadcb85a9fbd2b63e0081","sha256":"e1d7c9fac98cc12b3e4222a9020ae304b1c1d50be89b74a7bec380b56b7456d0","sha512":"47de5a36c2d09189c38db1a95d1f9ea0ac99827d9bc0cd12144dc96776299a5137f40133d896ece2671dd0945140fbaedc6ef9e50772124b8426092c111b8fce","ssdeep":"","tlshash":"cd51fe8e7dfb51950247102c5aaf51a3feb86103251cd8ecbbac90212f88d5a81f77cc","size":3057,"data":"","first_seen":"2026-09-19T19:15:15.560115Z","last_seen":"2026-09-20T14:29:08.147797Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d7fbd3b0d5949739c5e1fb93d0a81ab","sha1":"2c8b4b37166967bca4f9d26fbe1c61c8cf041256","sha256":"6a85aa3ba16947655eed236c3cb8469edc7df5e6cd415fcf56f6a01af678c761","sha512":"bdff299e12d0a553fcff8757f9505835d78fa19f06cf1b4ba11b2812b54648b52994219110198ec2b21498b2c27a05f09aa108b345bd56b8383cd1ad31ef728b","ssdeep":"","tlshash":"0ae08caec322ccbf4a4008ec087dda07214844839f04ea8d32cc222c4f0c22d283ad8f","size":360,"data":"","first_seen":"2026-09-19T19:15:15.611834Z","last_seen":"2026-09-20T14:29:08.160394Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d597d30e0a8d174cb92d27793010c87a","sha1":"9a3976acbed5b4162326614abb52b03d49f9a796","sha256":"b1daea0940cd2428a30a7431ec319c8f0a7cdace7af029988401b0fd0e592648","sha512":"045a22f4d5f93edf08788887e289109a66326299bd3a90c6b0cf16c77a5b5abfd32be551a416c3c3a2b88c116307a2c5dc12c60de6567a9542213f0d46dc3cdd","ssdeep":"96:A4W0MqxTKj1ogYaq4iDruI8vB6pyv6pPTdtuNKGwN6ejOe4s:A4rMqxLS/imDUpc6ldUNFof","tlshash":"7491844d80bad7ba33b550a8b5877252a038de422415a0b0e7a89f17e32dd0f8e27359","size":4533,"data":"","first_seen":"2026-06-20T14:42:16.449928Z","last_seen":"2026-09-20T14:29:08.161623Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5810af702332cd0993f4dd0ca47d3c56","sha1":"3a8dc052f236f1f770d4166e40974c0622a29f26","sha256":"3ae72f040f578001b5847be63f45d495be81b06c14662a76789af2562cb84bdd","sha512":"8751c296f89336cedad5424dc68db972ef29ddd21a37b5153f74b721ddf08dee221ec0c89970c5504a5c3dafa5246c25d2c6f9e96f9fadf2cf77bac4fe5fa316","ssdeep":"","tlshash":"6e51fd5d92beebf632b559e078827b926079ca031029b090ff585e63e139d4f9d0334e","size":3075,"data":"","first_seen":"2026-06-20T14:42:16.451374Z","last_seen":"2026-09-20T14:29:08.162236Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4790b9a09842de9c7cb8ee3574604787","sha1":"4332ea9aacbe23e0368222a2694183c0bf145d53","sha256":"9ca7592603892bd29bce3216ea0acc9002ddc850487c02df1e4c8b54649e5a14","sha512":"f7f0fc02daa3436d610d4dc69b15b72f88b53728e575b1721c6a217462ce9273995aad58e10c499be18668008a51a5dbbe194e4d5cf17e40b11096bc02014989","ssdeep":"","tlshash":"0561039d90fee7e037b550b4a587b7926074ca121804b190fb5d0f27b16ee5f862a78c","size":3415,"data":"","first_seen":"2026-06-20T14:42:16.452416Z","last_seen":"2026-09-20T14:29:08.162957Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"19dc27b32b055b8a89c04272b657ed60","sha1":"6e44d6f95f274e0d771a508183924962b0474748","sha256":"a4285a8dfcafaff8228584cf608b82ec71eab56a75f2b9b732d937578194e79f","sha512":"51dda7e5dc25ad58f47a356e50d5c3e056e9d81bbb50fdb4cca9385738ec1bc77aafbeec3d77f9b7edf9752a39e6946dde790ecc98f8c634af3c1a02e9dd6e28","ssdeep":"384:qzMq9V0xsYNt6iFbpZf7rmhWOGN9mZ/YDqdAirbsnRVzNgk5:qzMq9V0xsYNt5JpZ0GN9mZ/IqdAlNgk5","tlshash":"8242f979adaa917377bd71c5f8a29082f0285a061804d06cf6f4cd2231f9e8749f5f7a","size":12809,"data":"","first_seen":"2026-09-16T11:40:55.110381Z","last_seen":"2026-09-20T14:29:08.164226Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/shared-WNFUIQLE.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a2a9c420fa1632eca4075f2f98c4e317","sha1":"e6b3c9c2207b2870b86bfc6a2676c2cb16a13c96","sha256":"1bc137417bf99a946f92bb1fcd504ada51ed4300ca05cbec57fd6f9686807b00","sha512":"55214425ce755bdff1d61f596b93eba206dc1eb9dd9cebbf36021bb4212f362e3910056386e87f4682214adad7ca5ae2ddf48b7812aa1a29efd68d2fcb8db0f0","ssdeep":"96:mox2HJcb5SCmPyDDWQCawQOH/i4ViOQeoojiqcUPcGwqtbSrCwhhH7:mG2HJcbkCmPyDDWQCawQ2/i4ViOQeooe","tlshash":"2f81aa446af3413bc92762ab0f8741c5b9784a07203edc597b4e57036f90f2d8bea784","size":4159,"data":"","first_seen":"2026-09-19T19:15:15.555064Z","last_seen":"2026-09-20T14:29:08.142656Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/autoexit.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c0cf40887b9890f0f11e5fe80451d06","sha1":"12e8944693b8da0d64e8e8ed62ce3b4fd4df7b45","sha256":"953af76e36bc45eda41c765d5ee7e45a140883a1589e7a01341a4fc78a33390b","sha512":"bb10d2c33b89853731e9deb313a5048b4776d499f06345f750b976313dbfbff11d87224aef7df654ee0e22facb0368b13865bd46079b2ddd6aa41834f8cb2431","ssdeep":"","tlshash":"1f31ed3b33fb193b466788b9471fa19a2f242943224cdc9c3e2c57849f0412094e6bad","size":1798,"data":"","first_seen":"2026-09-19T19:15:15.575488Z","last_seen":"2026-09-20T14:29:08.156587Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/pushScript.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8d0ac50d86aa27a1ccffc7853751358","sha1":"69e4cd4208558e87c2f8fc1d8ede168b95bcea15","sha256":"adc645e851d8d6d4b7da540d889ebb37fd118bd62ea8c671ce4540c3fcfaf90d","sha512":"392b16e6f9c10cba8a31ef6733a3bdfc0a37986230562d3678c2a5179249f63d03d582d0367b329d2c34733e7d459815b5c0511614e4c3ecd08acf4d8060035b","ssdeep":"","tlshash":"0151001d98f384b941a3745e6a7fe4256237a0073904d9807f9c9a446f2ff1b48a7aec","size":3003,"data":"","first_seen":"2026-09-19T19:15:15.591486Z","last_seen":"2026-09-20T14:29:08.145404Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/reverse.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5d05586e972d6fccc855db1fefbd1b0","sha1":"ade733f7d586fdf2e6d9adc2585f43554e406c40","sha256":"422067c61b5f6fd325c438fe9ef1aabc7d64d6d169a013ee22f3579dbd2e4724","sha512":"5eb5ea7dc5f6ac8766cea9397aa75b8958e909ecedc649e2b4f769b39c5eb2e0c56c2fa1fc7df40765ea2751afb524d2ce51103d951753b561fc3ef6364ff4dc","ssdeep":"","tlshash":"5231fb4f01f70c3b44b328a88e5f7175373604832a48d8653f8c5608af2ae5fc6a2bd9","size":1687,"data":"","first_seen":"2026-09-19T19:15:15.587511Z","last_seen":"2026-09-20T14:29:08.152066Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/designs.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed385a47f2524143e21e9c00ae841004","sha1":"c4a112d542e5a3da483796bfb5161e17de35f0bc","sha256":"34cd4e79b4c0c46eff3118c35b179e475e2f9acf5631b9517a82d123b08a6598","sha512":"447e9df6441e10c59252cad1b47404e68c219cb74e24c1371c22148c638b76e33f66dcd527a9faa5ceefc206ad762fd3510e895f744e0b41264189cda7347f47","ssdeep":"","tlshash":"02714568e9f301700333225e1e6681867668444324f4e9c8bbdc854a6f74b6ecbf77d4","size":3684,"data":"","first_seen":"2026-09-19T19:15:15.573961Z","last_seen":"2026-09-20T14:29:08.153221Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/shared-3J2QBOX6.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"dd3ea025ffe506056365ad37494bcc54","sha1":"05adea22f835f8d9e1d89f40fcfc64ea939425ee","sha256":"53ff3fcd8d3779545f1f8a379a80fa294e1072dbdfe6fbe7ada25ec9cf415b86","sha512":"5a55af62aaa7010ac0354a8dd584cabd931ba85a167fa224150516fbb176b6d8b725c495443445380b73f653da7f96a3da755b9cb34c18bd17128f0703f286d8","ssdeep":"192:8DDA8egQfK8EZ+IO4HRzjDAJqVYHOyqjgBiGeiZBzyigCi2:29vzLjE","tlshash":"12f1321c42f3117680a7302c4f0fd9aabb7a49573608ce5c3edc5a502f9962ac9f27d8","size":7891,"data":"","first_seen":"2026-09-19T19:15:15.559113Z","last_seen":"2026-09-20T14:29:08.137134Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/shared-TMCNPBCK.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"622d2a3d72c543e30d39afd5141cb631","sha1":"7836a3239f286d66b3122ac759db0e67143c429a","sha256":"5a22bc741f941b01d10aac9284d333dccc638748b0f85603ff3bba8e8ad78d33","sha512":"804c2d3a2432aefa3dc4fd5fee3e6d015b60ac6ddeef197d7423c8263dca7881aa70da80fdcbb57de8b29fd8616a6006233fd663762656042aacf6d33a9d044b","ssdeep":"","tlshash":"c0c08c8b1ff6922a4099712d081dcc0bb6245963160c0a20740ca834bf9c15012e32c0","size":154,"data":"","first_seen":"2026-08-19T07:03:41.542013Z","last_seen":"2026-09-20T14:29:08.14896Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/mainExit.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8c72e051bb8718a0f83b267ea7419b0","sha1":"371dbbcf29d727f89f91eb88d4c62b25c3878c09","sha256":"a292bbd17a887cb8570eb6c45dbf6180edbf336e51355c53b09c494e6567e232","sha512":"486fc6b95b2622bdb6f31c9be36b9e4999144a947fd9465dffbc579aaf8ad74a47a947701e505efd0a057679852630b025c56fec1069ac93c9b539f230b1ec94","ssdeep":"","tlshash":"0e41f01623f69dad82b26441ca2b5a266fb951a33d55dc41311cd6104f9ceabc0ab3f8","size":1899,"data":"","first_seen":"2026-09-19T19:15:15.572323Z","last_seen":"2026-09-20T14:29:08.146579Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/shared-5YO44CBQ.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ccfa6c27c5167a4074038696dd251f95","sha1":"04d5d23dae489a905f6e31c937bc8b1b5efb362a","sha256":"2b0831ca8f21a9296174e80c8b89e503fd0f578281c697e7f0e1b6178a8ea034","sha512":"78d42ca4f1decf2602da19128c412a4734596ffd44b7e107df35c08352caa3c6446fb9a4340e1f524f583be0d28432881fa3c21ee2ae9805038ca232daf1476c","ssdeep":"192:fwiXMgY2LtoDRmCvDPegdXjvCeSJsGHw/4fjHBjGuLTsJb:4qYwSDRt1dD1MQ/4fjfLTSb","tlshash":"7af13f15d9bb487a26a260582a0f9a4073348c533e5ce064bbecce855f6ec1f91f63dd","size":7623,"data":"","first_seen":"2026-09-19T19:15:15.569572Z","last_seen":"2026-09-20T14:29:08.158627Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/appSdk.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef8f2a7b82f4515b09de817ebc4e2522","sha1":"55c058504b3f0daaeaa19e9cfc9f1ff213c40d94","sha256":"988f7dc65c1adaecd363b786f8833db5fd196a9444f5ded4d7bcb2544d72f74f","sha512":"e9c13d7e49b812e69096d60f6a561a491602a8d6cb9148252bf679c523ccc1fece13790b6b65b3f68334c0d2dded250869e7412ecaad291c4c4520652fd2ebff","ssdeep":"","tlshash":"82d05e6381f684ce003a54ea3a2ab64977670833178899413b4c8a30a7b4403d9a13a0","size":243,"data":"","first_seen":"2026-09-19T19:15:15.584635Z","last_seen":"2026-09-20T14:29:08.130791Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/translateElements.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b7e8888f3fbda7d48ef075f0ff632e3","sha1":"136f6134846afc63d738e8919522e0be0ab5c746","sha256":"606bebae9861068752d4ddb255fc6722a0295297a4fcbe1548a6975b1078e893","sha512":"045ec1d232b8260c3c64e5e62fca5cd91906f901e205d1b5a6b3566afeea4df213dbf102481da2ddbe2fae71d93c2edf1d4386e432bdf504d0fa9600c46dc06c","ssdeep":"","tlshash":"d5f0972331f2c88489888a2f46daa44b77684a1b4c782c15338c72507f98159b37a390","size":483,"data":"","first_seen":"2026-09-19T19:15:15.581653Z","last_seen":"2026-09-20T14:29:08.132747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Some keys from locales folder weren't used for translation when loading the landing page for the first time:our_app","filename":"https://yelziv.com/prelanders/player-aff/assets/scripts/shared-WNFUIQLE.js","line_number":92,"column_number":17}]},"http":[{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/images/sound.svg","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.712Z","timestamp":1789914517712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/images/sound.svg HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 347\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"62af0edb1806ca4c7913dee8e3d29bdf\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":347,"size_decoded":732,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"62af0edb1806ca4c7913dee8e3d29bdf","sha1":"046ea8721fe56a53ccaf2999d3eba6392c4882d2","sha256":"6fb8568db58d8b68f61b7eebf332720721033556d4f48e0757490d75a741b156","sha512":"61387a5f27dd97c956e54482a7b2bf14d91030bc740e4f67aea07bc0217133584fe0dd39709501029568ede3d1888b5a04ca6e87d0c35c63e8814b8375e579d2","ssdeep":"","tlshash":"bfe0dfba06be483456d547b4c9a5d952a883a5f2a08c4339816cea156b3488b42a94b8","first_seen":"2025-08-27T22:34:27.832724Z","last_seen":"2026-09-20T14:29:08.129992Z","times_seen":168,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/appSdk.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.496Z","timestamp":1789914517496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/scripts/appSdk.js HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 243\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"ef8f2a7b82f4515b09de817ebc4e2522\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":243,"size_decoded":630,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"ef8f2a7b82f4515b09de817ebc4e2522","sha1":"55c058504b3f0daaeaa19e9cfc9f1ff213c40d94","sha256":"988f7dc65c1adaecd363b786f8833db5fd196a9444f5ded4d7bcb2544d72f74f","sha512":"e9c13d7e49b812e69096d60f6a561a491602a8d6cb9148252bf679c523ccc1fece13790b6b65b3f68334c0d2dded250869e7412ecaad291c4c4520652fd2ebff","ssdeep":"","tlshash":"82d05e6381f684ce003a54ea3a2ab64977670833178899413b4c8a30a7b4403d9a13a0","first_seen":"2026-09-19T19:15:15.584635Z","last_seen":"2026-09-20T14:29:08.130791Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/translateElements.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.506Z","timestamp":1789914517506,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/scripts/translateElements.js HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 483\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"9b7e8888f3fbda7d48ef075f0ff632e3\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":483,"size_decoded":870,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"9b7e8888f3fbda7d48ef075f0ff632e3","sha1":"136f6134846afc63d738e8919522e0be0ab5c746","sha256":"606bebae9861068752d4ddb255fc6722a0295297a4fcbe1548a6975b1078e893","sha512":"045ec1d232b8260c3c64e5e62fca5cd91906f901e205d1b5a6b3566afeea4df213dbf102481da2ddbe2fae71d93c2edf1d4386e432bdf504d0fa9600c46dc06c","ssdeep":"","tlshash":"d5f0972331f2c88489888a2f46daa44b77684a1b4c782c15338c72507f98159b37a390","first_seen":"2026-09-19T19:15:15.581653Z","last_seen":"2026-09-20T14:29:08.132747Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/images/close.svg","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.704Z","timestamp":1789914517704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/images/close.svg HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 521\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"93d7a7381314900ee9e046d7508bdb9e\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":521,"size_decoded":906,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"93d7a7381314900ee9e046d7508bdb9e","sha1":"8b644d9f777b26bd42da72d42f83961306f1743b","sha256":"84ab32e8638831c707570eb7211ebd7730a31656662edc1ee9016904f2405a8a","sha512":"1d2a6eff8bc2b3e103ad3eac2c82bd0c024cee114533e2ca06be362bd6676dc30728ce72c2ec13f4b5260a3275cbb7100b98a4a3266dfc05c39795d019655ce0","ssdeep":"","tlshash":"5ef082acc154ec78a0bfd72c5a656281b42306be27c9c87d94eb6a1405af0ee110ee8c","first_seen":"2025-08-27T22:34:27.810414Z","last_seen":"2026-09-20T14:29:08.134195Z","times_seen":179,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/images/fullScreen.svg","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.715Z","timestamp":1789914517715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/images/fullScreen.svg HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 697\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"65067baaf711f9b871e022d724d1249f\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":697,"size_decoded":1082,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65067baaf711f9b871e022d724d1249f","sha1":"409e29312188a52e212276466c714398e2ecf8d8","sha256":"a5c54d2fc89f9c47563daa5105b9ba2c1188cfe8186b9c284052278759af9ba0","sha512":"b446246ebfe3aa91559571dfdb6a6e6ac0a22802932ed9de1ee27eec85ed5d5d9cf9b8548c0f8ce58a24c6af52b90c8c147e96ee153d464bd1f1beb49326ddd2","ssdeep":"","tlshash":"690142fa42384138d4db3f8401aaf2ba7deb16b3f1881c3953acb8e20974d002ec41d0","first_seen":"2025-08-27T22:34:27.82026Z","last_seen":"2026-09-20T14:29:08.134902Z","times_seen":169,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/shared-I6IP22C7.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.748Z","timestamp":1789914517748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/scripts/shared-I6IP22C7.js HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/assets/scripts/appSdk.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5134\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"17088b62269bea4bcf36096e1d2dab75\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5134,"size_decoded":5522,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"17088b62269bea4bcf36096e1d2dab75","sha1":"cb89dff8e756bf0490d367b9bb2c39144b8ad0c5","sha256":"2cf77c744806301e33fba76993bdc31726a6eb560e66dbfc7704a8e30e7d1693","sha512":"2aa443c3911f088332d44ab6cf638dfe5bb8553c291d1eadbebcc43a472c837ec513bb5787d6b7b3ae888289095a59d4f43b9e886bf08a28f5de76cf4ab57cba","ssdeep":"96:rD0w1GiQf4Mzd72JZpGjM4NbTjnFH7qFAXK8cY7lx:/0wciQf4MVwZpmMObTjnRqFacY/","tlshash":"95b10e1adab7d8eb14f321dd028f9229713604133a4cf5943d9d9a012f2ed5e58e26ec","first_seen":"2026-09-19T19:15:15.565179Z","last_seen":"2026-09-20T14:29:08.135558Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/shared-3J2QBOX6.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.760Z","timestamp":1789914517760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/scripts/shared-3J2QBOX6.js HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/assets/scripts/autoexit.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7891\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"dd3ea025ffe506056365ad37494bcc54\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7891,"size_decoded":8279,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"dd3ea025ffe506056365ad37494bcc54","sha1":"05adea22f835f8d9e1d89f40fcfc64ea939425ee","sha256":"53ff3fcd8d3779545f1f8a379a80fa294e1072dbdfe6fbe7ada25ec9cf415b86","sha512":"5a55af62aaa7010ac0354a8dd584cabd931ba85a167fa224150516fbb176b6d8b725c495443445380b73f653da7f96a3da755b9cb34c18bd17128f0703f286d8","ssdeep":"192:8DDA8egQfK8EZ+IO4HRzjDAJqVYHOyqjgBiGeiZBzyigCi2:29vzLjE","tlshash":"12f1321c42f3117680a7302c4f0fd9aabb7a49573608ce5c3edc5a502f9962ac9f27d8","first_seen":"2026-09-19T19:15:15.559113Z","last_seen":"2026-09-20T14:29:08.137134Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/locales/en.json","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.800Z","timestamp":1789914517800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/locales/en.json HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: application/json\r\ncontent-length: 199\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:31 GMT\r\netag: \"67e77b05314e7cc936f33f61815a9394\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199,"size_decoded":587,"mime_type":"application/json","magic":"JSON text data","md5":"67e77b05314e7cc936f33f61815a9394","sha1":"c1100e625d8c63710193a67358c3947e3ca333b1","sha256":"f6f3c888acc858ec7523ced0e7ace48def27fd08361468d93cc1a308b63f3ced","sha512":"ea3a0b82e8b4276b39be8dcdf71ee567038a419e92739f78b47396e4670498b092848668e77eda20adedae1d77b90c7ae219566ed814ecc574542550f5438e7a","ssdeep":"","tlshash":"b9d0232e0804c1a1bbc882350dc3540084234d3f4913245d1fe719cc02cb137b3a334b","first_seen":"2026-03-20T10:07:38.45263Z","last_seen":"2026-09-20T14:29:08.138468Z","times_seen":31,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/favicon/favicon-16x16.png","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.849Z","timestamp":1789914517849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/favicon/favicon-16x16.png HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nCookie: templateHash:player=5ccc9b9de218bd3f34d9523a7cfd3b2736fb4a8b933a20d9f11ca65174104659\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 722\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:29 GMT\r\netag: \"70fc91d6bbc52c5b6afebba1b3ceb60a\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":722,"size_decoded":1103,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"70fc91d6bbc52c5b6afebba1b3ceb60a","sha1":"b0d0c310c8d1e6f15887fd9d4a80b310d2de6719","sha256":"5fed1f830679fc7dd3c18aee30a1c353d66c2c109619c2dd84dcbc4b515260bd","sha512":"cc750f235e4b2cccc1210a31321d173d66568ea824366099237ac387a00f656974e3030fa33b7735dc2a8622efaca1362c98c1e2cece04cc1f6c67b400e11c67","ssdeep":"","tlshash":"bf01944296fd693acb0b00b8f135af4b4d6cb29403c1e250ca1f965547ca0889cd87bb","first_seen":"2025-10-10T20:59:35.860964Z","last_seen":"2026-09-20T14:29:08.139725Z","times_seen":173,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/images/bell.svg","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.706Z","timestamp":1789914517706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/images/bell.svg HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 859\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"3d0bdfb7dccb3bafefdd1a12a7e79e52\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":859,"size_decoded":1244,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d0bdfb7dccb3bafefdd1a12a7e79e52","sha1":"13ad1546eed82c33faae3e3aa12ef68c70ae6b15","sha256":"c04cbab5850e73cc9b63a5c8f82b59df0e18988b2a32027b59c2de3cb9e91825","sha512":"597bc292476ce2cdbbaf72880be23d6eaa51e576647189b554fb30fc156288e416ac66a66fd5d04cc2c0bfcf9caa5775e20db33a0685148f5361f5c9357f41bf","ssdeep":"","tlshash":"9d118e78c3a0c3b89d96967daf332490948e507b40e0d286b2e9ca603bd60d1f15f989","first_seen":"2025-08-27T22:34:27.840252Z","last_seen":"2026-09-20T14:29:08.140987Z","times_seen":180,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/images/play.svg","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.709Z","timestamp":1789914517709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/images/play.svg HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 221\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"63f6307e74f085bd2d8f2031e26c7f8e\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221,"size_decoded":606,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63f6307e74f085bd2d8f2031e26c7f8e","sha1":"4a0b6f05e869073df22b1325b5634342b40ad871","sha256":"51a644dd1e6a6d31ba2f701a6f54479670decd87b4f645a0add33ea09f73212f","sha512":"9b1a6640ad0b5c04ec8d72c9faad6da54fbb4ee6541dc5317bf487e90541382fc7ab78b5b24b147b5e5c53ef8c065c0b281f5e19bcf1912c3d10309d5f8452e7","ssdeep":"","tlshash":"31d023eda466153ce5c65b501074710a74de60a7f0cc091d62e9a9411510c8575ccbd5","first_seen":"2025-08-27T22:34:27.842519Z","last_seen":"2026-09-20T14:29:08.142137Z","times_seen":168,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/shared-WNFUIQLE.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.766Z","timestamp":1789914517766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/scripts/shared-WNFUIQLE.js HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/assets/scripts/designs.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4159\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"a2a9c420fa1632eca4075f2f98c4e317\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4159,"size_decoded":4547,"mime_type":"text/javascript","magic":"ASCII text","md5":"a2a9c420fa1632eca4075f2f98c4e317","sha1":"e6b3c9c2207b2870b86bfc6a2676c2cb16a13c96","sha256":"1bc137417bf99a946f92bb1fcd504ada51ed4300ca05cbec57fd6f9686807b00","sha512":"55214425ce755bdff1d61f596b93eba206dc1eb9dd9cebbf36021bb4212f362e3910056386e87f4682214adad7ca5ae2ddf48b7812aa1a29efd68d2fcb8db0f0","ssdeep":"96:mox2HJcb5SCmPyDDWQCawQOH/i4ViOQeoojiqcUPcGwqtbSrCwhhH7:mG2HJcbkCmPyDDWQCawQ2/i4ViOQeooe","tlshash":"2f81aa446af3413bc92762ab0f8741c5b9784a07203edc597b4e57036f90f2d8bea784","first_seen":"2026-09-19T19:15:15.555064Z","last_seen":"2026-09-20T14:29:08.142656Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T14:28:37.159Z","timestamp":1789914517159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057 HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 28422\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:31 GMT\r\netag: \"d63fe18593c3e4d1ad9dbbd5327f6865\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28422,"size_decoded":28820,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (11292)","md5":"d63fe18593c3e4d1ad9dbbd5327f6865","sha1":"4b8323b8f87300454cb94ea624ed022c9782bd70","sha256":"dd49729ead479063f39957b43d5c3635fed0317a1c6b7ac4e8a97da3e71e3493","sha512":"2856f2a31932d5f09b558b86f33a5f55818c652f4e2844e834bd2292b0ebc65d2be9e40ef862700792df8a935b08bb48514f8b76fd7ebbd3c6e551d5b4d3da36","ssdeep":"768:44rrxeabld5R9lP5AuAW4Lx651aMRzMq9V0xsYNt5JpZ0GN9mZ/IqdAlNgkI:44rrxeaR9lPOW4Lx651NRzMqv0xsYNpw","tlshash":"a8d2ea5c58fad6b333b920d4b592b5827078da071404e094fbfc8e2363a9e4f4977b69","first_seen":"2026-09-19T19:15:15.580387Z","last_seen":"2026-09-20T14:29:08.14392Z","times_seen":2,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":72,"connect":22,"send":0,"wait":30,"receive":20,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/pushScript.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.499Z","timestamp":1789914517499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/scripts/pushScript.js HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3003\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 12:52:16 GMT\r\netag: \"b8d0ac50d86aa27a1ccffc7853751358\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3003,"size_decoded":3391,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"b8d0ac50d86aa27a1ccffc7853751358","sha1":"69e4cd4208558e87c2f8fc1d8ede168b95bcea15","sha256":"adc645e851d8d6d4b7da540d889ebb37fd118bd62ea8c671ce4540c3fcfaf90d","sha512":"392b16e6f9c10cba8a31ef6733a3bdfc0a37986230562d3678c2a5179249f63d03d582d0367b329d2c34733e7d459815b5c0511614e4c3ecd08acf4d8060035b","ssdeep":"","tlshash":"0151001d98f384b941a3745e6a7fe4256237a0073904d9807f9c9a446f2ff1b48a7aec","first_seen":"2026-09-19T19:15:15.591486Z","last_seen":"2026-09-20T14:29:08.145404Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/mainExit.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.505Z","timestamp":1789914517505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/scripts/mainExit.js HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1899\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"e8c72e051bb8718a0f83b267ea7419b0\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1899,"size_decoded":2287,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"e8c72e051bb8718a0f83b267ea7419b0","sha1":"371dbbcf29d727f89f91eb88d4c62b25c3878c09","sha256":"a292bbd17a887cb8570eb6c45dbf6180edbf336e51355c53b09c494e6567e232","sha512":"486fc6b95b2622bdb6f31c9be36b9e4999144a947fd9465dffbc579aaf8ad74a47a947701e505efd0a057679852630b025c56fec1069ac93c9b539f230b1ec94","ssdeep":"","tlshash":"0e41f01623f69dad82b26441ca2b5a266fb951a33d55dc41311cd6104f9ceabc0ab3f8","first_seen":"2026-09-19T19:15:15.572323Z","last_seen":"2026-09-20T14:29:08.146579Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/shared-PQUHJFH3.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.762Z","timestamp":1789914517762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/scripts/shared-PQUHJFH3.js HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/assets/scripts/autoexit.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3057\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"862e52454d06d378d856192e7bbfa111\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3057,"size_decoded":3445,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"862e52454d06d378d856192e7bbfa111","sha1":"eda1fee4cab45f0247daadcb85a9fbd2b63e0081","sha256":"e1d7c9fac98cc12b3e4222a9020ae304b1c1d50be89b74a7bec380b56b7456d0","sha512":"47de5a36c2d09189c38db1a95d1f9ea0ac99827d9bc0cd12144dc96776299a5137f40133d896ece2671dd0945140fbaedc6ef9e50772124b8426092c111b8fce","ssdeep":"","tlshash":"cd51fe8e7dfb51950247102c5aaf51a3feb86103251cd8ecbbac90212f88d5a81f77cc","first_seen":"2026-09-19T19:15:15.560115Z","last_seen":"2026-09-20T14:29:08.147797Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/shared-TMCNPBCK.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.763Z","timestamp":1789914517763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/scripts/shared-TMCNPBCK.js HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/assets/scripts/autoexit.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 154\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"622d2a3d72c543e30d39afd5141cb631\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154,"size_decoded":541,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"622d2a3d72c543e30d39afd5141cb631","sha1":"7836a3239f286d66b3122ac759db0e67143c429a","sha256":"5a22bc741f941b01d10aac9284d333dccc638748b0f85603ff3bba8e8ad78d33","sha512":"804c2d3a2432aefa3dc4fd5fee3e6d015b60ac6ddeef197d7423c8263dca7881aa70da80fdcbb57de8b29fd8616a6006233fd663762656042aacf6d33a9d044b","ssdeep":"","tlshash":"c0c08c8b1ff6922a4099712d081dcc0bb6245963160c0a20740ca834bf9c15012e32c0","first_seen":"2026-08-19T07:03:41.542013Z","last_seen":"2026-09-20T14:29:08.14896Z","times_seen":6,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/favicon/apple-touch-icon.png","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.848Z","timestamp":1789914517848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nCookie: templateHash:player=5ccc9b9de218bd3f34d9523a7cfd3b2736fb4a8b933a20d9f11ca65174104659\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 31858\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:29 GMT\r\netag: \"8913bd1cde4934bb9ac355bc2ea1ec85\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31858,"size_decoded":32241,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"8913bd1cde4934bb9ac355bc2ea1ec85","sha1":"f3e9d3c601b47dc65b22a6932a628f25e0405960","sha256":"d0d1f2eb496328ae34673b6c660527efb4ad268eef6953417734c986a6108189","sha512":"17bee5e8f1f154797049ad9aa6589bf2e0ce413c9c53d6c5216a2a1d5dcc6038fd207ae42d60f3ffb81b8b2d7879e1d050d7d74d64f13f1a53500febd65929a9","ssdeep":"768:VOHJMJQQjsOww9hCCxD2sTbJluHYiK5AJ:cHJMJNjsVwTNxysJliYiK5+","tlshash":"1be2e17d29583339a1cae21e11fcf83e1cfe256c217c376b45da812d9a45e06c1b8f92","first_seen":"2025-10-10T20:59:35.866115Z","last_seen":"2026-09-20T14:29:08.149609Z","times_seen":166,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/styles/style.css","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.490Z","timestamp":1789914517490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/styles/style.css HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/css\r\ncontent-length: 2604\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"d5fa578bd0cbe94f9776c5412a368c30\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2604,"size_decoded":2985,"mime_type":"text/css","magic":"ASCII text","md5":"d5fa578bd0cbe94f9776c5412a368c30","sha1":"9d7ee6377aa718a631a8b3e9816b118482adedd6","sha256":"d3d2f651d85fac05155282c9cdac31fa12b0b8727d7ef55b35bf4a7e7d413908","sha512":"f8cc71c91c9651a4d575d436f3d9cd82d7b208f0fa53efc494b0ae598bbf5f3fee1a25d1b43a41475385506c03c88041c0ad8aa40f81a6c3e3695547bec02b07","ssdeep":"","tlshash":"1a5110839fb90a08b96fd0a93c928fa5333d4042960fd96d56f1304c5dcd1ea65b3bc9","first_seen":"2026-03-20T10:07:38.449434Z","last_seen":"2026-09-20T14:29:08.151011Z","times_seen":23,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/reverse.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.501Z","timestamp":1789914517501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/scripts/reverse.js HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1687\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"f5d05586e972d6fccc855db1fefbd1b0\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1687,"size_decoded":2075,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"f5d05586e972d6fccc855db1fefbd1b0","sha1":"ade733f7d586fdf2e6d9adc2585f43554e406c40","sha256":"422067c61b5f6fd325c438fe9ef1aabc7d64d6d169a013ee22f3579dbd2e4724","sha512":"5eb5ea7dc5f6ac8766cea9397aa75b8958e909ecedc649e2b4f769b39c5eb2e0c56c2fa1fc7df40765ea2751afb524d2ce51103d951753b561fc3ef6364ff4dc","ssdeep":"","tlshash":"5231fb4f01f70c3b44b328a88e5f7175373604832a48d8653f8c5608af2ae5fc6a2bd9","first_seen":"2026-09-19T19:15:15.587511Z","last_seen":"2026-09-20T14:29:08.152066Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/designs.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.503Z","timestamp":1789914517503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/scripts/designs.js HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3684\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"ed385a47f2524143e21e9c00ae841004\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3684,"size_decoded":4072,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"ed385a47f2524143e21e9c00ae841004","sha1":"c4a112d542e5a3da483796bfb5161e17de35f0bc","sha256":"34cd4e79b4c0c46eff3118c35b179e475e2f9acf5631b9517a82d123b08a6598","sha512":"447e9df6441e10c59252cad1b47404e68c219cb74e24c1371c22148c638b76e33f66dcd527a9faa5ceefc206ad762fd3510e895f744e0b41264189cda7347f47","ssdeep":"","tlshash":"02714568e9f301700333225e1e6681867668444324f4e9c8bbdc854a6f74b6ecbf77d4","first_seen":"2026-09-19T19:15:15.573961Z","last_seen":"2026-09-20T14:29:08.153221Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/images/settings.svg","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.713Z","timestamp":1789914517713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/images/settings.svg HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 880\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"8f38c420ce395deb292d9649e6423152\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":880,"size_decoded":1265,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f38c420ce395deb292d9649e6423152","sha1":"25d206f6c5333d387cebd7c1b9d9a556e19cebb7","sha256":"6f4db4e7c17e86fee74907fab99e7f59781ec816985b02254094d8107fa6e1a4","sha512":"d0e0bf754acdc6bb91282b2db04ecfe374b252ccd98476428fe4838359290d191e10f62e3cb8bd1157c02756f7b01386ec6ff10a4aae73361b017b7b9dfa6f91","ssdeep":"","tlshash":"7d1150d6b155dded984bc41dc6dfa2b0210e048ba06aa0d87ce9477df53edc4f294351","first_seen":"2025-08-27T22:34:27.849819Z","last_seen":"2026-09-20T14:29:08.154338Z","times_seen":169,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/images/screen.svg","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.714Z","timestamp":1789914517714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/images/screen.svg HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 198\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"bc9547886dd0afeda17a3425581dd148\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":198,"size_decoded":583,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc9547886dd0afeda17a3425581dd148","sha1":"158cedb5326b62c4dce33f36f5337bd2f7ad1caa","sha256":"a338f04a2b8f5e3ff2ea7ac551d885da22943769ff27280b19d5ca8b560065fe","sha512":"351cc560734dbb82f205504d04719aae95a9574812f3ba367835b9c7eba8d663a35d55b8694d20d6c1c1addc4dc26c061dabd55f53fb76c77ebfbf3220f8e352","ssdeep":"","tlshash":"afd0c0e43db44c44d4825b3820f4b207f06b1073f0810b55f2e429a23812eb139960c6","first_seen":"2025-08-27T22:34:27.835124Z","last_seen":"2026-09-20T14:29:08.155472Z","times_seen":169,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wuytl.com/sync-metrics","fqdn":"wuytl.com","domain":"wuytl.com","tld":"com"},"ip":{"addr":"104.21.0.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.728Z","timestamp":1789914517728,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: wuytl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 688\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://yelziv.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":688,"data":"[{\"app\":\"landings-constructor\",\"event\":\"start\",\"language\":\"en\",\"landing_name\":\"player\",\"build_version\":\"0.0.217\",\"landing_domain\":\"yelziv.com\",\"landing_url\":\"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\",\"template_hash\":\"\",\"request_var\":\"276837_hk_342057\",\"source_zone_id\":1693,\"sub_id\":\"400719446\",\"landing_load_date_time\":\"2026-09-20 14:28:37.467000 +00:00\",\"error_message\":\"\",\"event_history\":\"{\\\"event_history\\\":[{\\\"currentTs\\\":1789914517468,\\\"eventName\\\":\\\"start\\\",\\\"delta\\\":0}]}\",\"context\":\"{\\\"ag\\\":false,\\\"template_hashes\\\":{}}\",\"env\":\"production-archive\",\"js_version\":\"QKk0nO_bTOeMkzJK3IoqeHJubC-RdAjmmXFeGLmPzKCKVdA\"}]"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://yelziv.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UW5%2BSqdAG2xdz8wUdvYPalEI9uoQlGj7z9Tdbpw2pwSbwSby%2FEv4Hqe8rhXiOw0BcQ%2B2JZOsuAbNbZttu%2FINo3jOGzMJ%2F3bCSV38jxLnCH1KyCZJbA9pX1b6vV4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e184881d38a0c9-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/autoexit.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.498Z","timestamp":1789914517498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/scripts/autoexit.js HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1798\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"4c0cf40887b9890f0f11e5fe80451d06\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1798,"size_decoded":2186,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"4c0cf40887b9890f0f11e5fe80451d06","sha1":"12e8944693b8da0d64e8e8ed62ce3b4fd4df7b45","sha256":"953af76e36bc45eda41c765d5ee7e45a140883a1589e7a01341a4fc78a33390b","sha512":"bb10d2c33b89853731e9deb313a5048b4776d499f06345f750b976313dbfbff11d87224aef7df654ee0e22facb0368b13865bd46079b2ddd6aa41834f8cb2431","ssdeep":"","tlshash":"1f31ed3b33fb193b466788b9471fa19a2f242943224cdc9c3e2c57849f0412094e6bad","first_seen":"2026-09-19T19:15:15.575488Z","last_seen":"2026-09-20T14:29:08.156587Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/images/next.svg","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.710Z","timestamp":1789914517710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/images/next.svg HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 205\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"ee8dba30c4773e84b31b9fe736b360bd\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205,"size_decoded":590,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee8dba30c4773e84b31b9fe736b360bd","sha1":"c394036594ed1d1f6e793075c0fd04d6f8add3f6","sha256":"7e834a69286321482db1ce2239a120bab66a5674a4519dd1c4563aa72e7b9052","sha512":"32751432e67e04536fef71eeb62b03663b093041fd101da54b4687ac530c66b18400e84cef4cc3a8ed5fbb1ab11fa155e9374d426cc5f1af36a734de46c22a31","ssdeep":"","tlshash":"5cd022d820a62868e4c21b9001b0f42aa88b20b7b0c00ca592f8b8825420fa269cb8e0","first_seen":"2025-08-27T22:34:27.813267Z","last_seen":"2026-09-20T14:29:08.157944Z","times_seen":168,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yelziv.com/prelanders/player-aff/assets/scripts/shared-5YO44CBQ.js","fqdn":"yelziv.com","domain":"yelziv.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.749Z","timestamp":1789914517749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yelziv.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 02:33:12 GMT","end":"Tue, 01 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"9A:F2:15:29:B5:FD:1C:A8:F2:8B:A1:63:E8:24:3B:70:D7:B2:E3:78","sha256":"1B:D6:94:D8:5D:D3:04:F8:68:2F:46:20:8D:99:96:81:01:44:A6:81:EE:D0:80:9F:29:D3:60:5F:E1:9B:9A:D6"}}},"request":{"raw":"GET /prelanders/player-aff/assets/scripts/shared-5YO44CBQ.js HTTP/1.1\r\nHost: yelziv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/prelanders/player-aff/assets/scripts/appSdk.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7623\r\nserver: nginx\r\nlast-modified: Fri, 21 Aug 2026 15:16:30 GMT\r\netag: \"ccfa6c27c5167a4074038696dd251f95\"\r\nexpires: Tue, 20 Oct 2026 14:28:37 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7623,"size_decoded":8011,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"ccfa6c27c5167a4074038696dd251f95","sha1":"04d5d23dae489a905f6e31c937bc8b1b5efb362a","sha256":"2b0831ca8f21a9296174e80c8b89e503fd0f578281c697e7f0e1b6178a8ea034","sha512":"78d42ca4f1decf2602da19128c412a4734596ffd44b7e107df35c08352caa3c6446fb9a4340e1f524f583be0d28432881fa3c21ee2ae9805038ca232daf1476c","ssdeep":"192:fwiXMgY2LtoDRmCvDPegdXjvCeSJsGHw/4fjHBjGuLTsJb:4qYwSDRt1dD1MQ/4fjfLTSb","tlshash":"7af13f15d9bb487a26a260582a0f9a4073348c533e5ce064bbecce855f6ec1f91f63dd","first_seen":"2026-09-19T19:15:15.569572Z","last_seen":"2026-09-20T14:29:08.158627Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"yelziv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wuytl.com/sync-metrics","fqdn":"wuytl.com","domain":"wuytl.com","tld":"com"},"ip":{"addr":"104.21.0.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.821Z","timestamp":1789914517821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wuytl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 13:26:46 GMT","end":"Sat, 05 Dec 2026 14:25:18 GMT"},"fingerprint":{"sha1":"B4:BD:6C:74:10:8C:1B:BA:27:7B:D6:F1:0D:DD:B8:79:6E:76:9B:6C","sha256":"C9:66:1E:74:E7:1F:A9:28:E0:7F:D3:42:52:BE:24:BD:BE:DB:CE:5B:EB:2E:48:E1:2E:EC:5A:27:E0:AE:87:44"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: wuytl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 848\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://yelziv.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":848,"data":"[{\"app\":\"landings-constructor\",\"event\":\"template_hash_ready\",\"language\":\"en\",\"landing_name\":\"player\",\"build_version\":\"0.0.217\",\"landing_domain\":\"yelziv.com\",\"landing_url\":\"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\",\"template_hash\":\"5ccc9b9de218bd3f34d9523a7cfd3b2736fb4a8b933a20d9f11ca65174104659\",\"request_var\":\"276837_hk_342057\",\"source_zone_id\":1693,\"sub_id\":\"400719446\",\"landing_load_date_time\":\"2026-09-20 14:28:37.467000 +00:00\",\"error_message\":\"\",\"event_history\":\"{\\\"event_history\\\":[{\\\"currentTs\\\":1789914517468,\\\"eventName\\\":\\\"start\\\",\\\"delta\\\":0},{\\\"currentTs\\\":1789914517814,\\\"eventName\\\":\\\"template_hash_ready\\\",\\\"delta\\\":346}]}\",\"context\":\"{\\\"ag\\\":false,\\\"template_hashes\\\":{}}\",\"env\":\"production-archive\",\"js_version\":\"QKk0nO_bTOeMkzJK3IoqeHJubC-RdAjmmXFeGLmPzKCKVdA\"}]"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://yelziv.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UroZsya%2BVfe9qWBjkctVmPmbKZyi61dGU16z75zlqIpOePN936HgO1p171aK%2FAe9zXPctsE3AuR%2BxkT3VDvuU%2FH2UhxMfzqY0EzEMLF%2BKx6%2FU%2Fw%2BXt81uaWZ2Dg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e184886d4da0c9-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wuytl.com/sync-metrics","fqdn":"wuytl.com","domain":"wuytl.com","tld":"com"},"ip":{"addr":"104.21.0.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057","date":"2026-09-20T14:28:37.824Z","timestamp":1789914517824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wuytl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 13:26:46 GMT","end":"Sat, 05 Dec 2026 14:25:18 GMT"},"fingerprint":{"sha1":"B4:BD:6C:74:10:8C:1B:BA:27:7B:D6:F1:0D:DD:B8:79:6E:76:9B:6C","sha256":"C9:66:1E:74:E7:1F:A9:28:E0:7F:D3:42:52:BE:24:BD:BE:DB:CE:5B:EB:2E:48:E1:2E:EC:5A:27:E0:AE:87:44"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: wuytl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4031\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://yelziv.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yelziv.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4031,"data":"[{\"app\":\"landings-constructor\",\"event\":\"template_hashes_ready\",\"language\":\"en\",\"landing_name\":\"player\",\"build_version\":\"0.0.217\",\"landing_domain\":\"yelziv.com\",\"landing_url\":\"https://yelziv.com/prelanders/player-aff/index.html?fa=1\u0026var_1=400719446\u0026var_2=1693\u0026var_3=276837_hk_342057\",\"template_hash\":\"5ccc9b9de218bd3f34d9523a7cfd3b2736fb4a8b933a20d9f11ca65174104659\",\"request_var\":\"276837_hk_342057\",\"source_zone_id\":1693,\"sub_id\":\"400719446\",\"landing_load_date_time\":\"2026-09-20 14:28:37.467000 +00:00\",\"error_message\":\"\",\"event_history\":\"{\\\"event_history\\\":[{\\\"currentTs\\\":1789914517468,\\\"eventName\\\":\\\"start\\\",\\\"delta\\\":0},{\\\"currentTs\\\":1789914517814,\\\"eventName\\\":\\\"template_hash_ready\\\",\\\"delta\\\":346},{\\\"currentTs\\\":1789914517817,\\\"eventName\\\":\\\"template_hashes_ready\\\",\\\"delta\\\":3}]}\",\"context\":\"{\\\"ag\\\":false,\\\"template_hashes\\\":{\\\"main\\\":{\\\"buildHash\\\":\\\"5674c568c76b2fce9e7da37fd71ef01205673315f430dd7926ccbf887ca2f22d\\\",\\\"clientHash\\\":\\\"b450aec65d64701fca9b83b42686234d148d2aec6c0f245ffd6b9ff5c91198a2\\\",\\\"equal\\\":false},\\\"html\\\":{\\\"buildHash\\\":\\\"4d68fdc93b386791e3b8bb110ee24d69b7d81e7819f6a1cc86812ed21e600e70\\\",\\\"clientHash\\\":\\\"c7add5cfc55fb2980b384c37a64bd8fb4b02f685dcb6291dec3033a36d5a0628\\\",\\\"equal\\\":false},\\\"css\\\":{\\\"buildHash\\\":\\\"a01393783a2858877d4711b0f3a6417d815ab39c6e5da83352efa9b6546e7df5\\\",\\\"clientHash\\\":\\\"a01393783a2858877d4711b0f3a6417d815ab39c6e5da83352efa9b6546e7df5\\\",\\\"equal\\\":true},\\\"js\\\":{\\\"buildHash\\\":\\\"743262310ce05fd3ead045cbcbbf8510ab124ca71ff96b9c64416ef74026dce7\\\",\\\"clientHash\\\":\\\"19708d555b43eabb430ba71ff4231e99780c5bb2251f3330e461385bece4b289\\\",\\\"equal\\\":false},\\\"img\\\":{\\\"buildHash\\\":\\\"de0b9bc62824e8c99c607118710f402d0e018868a0d824cc0f5db89fe59b43a7\\\",\\\"clientHash\\\":\\\"de0b9bc62824e8c99c607118710f402d0e018868a0d824cc0f5db89fe59b43a7\\\",\\\"equal\\\":true},\\\"inlineSources\\\":{\\\"scripts\\\":[\\\"\\\\\\\"use strict\\\\\\\";(()=\u003e{var b=()=\u003e{let t=new Date,e=t.getUTCFullYear(),s=String(t.getUTCMonth()+1).padStart(2,\\\\\\\"0\\\\\\\"),a=String(t.getUTCDate()).padStart(2,\\\\\\\"0\\\\\\\")\\\",\\\"\\\\\\\"use strict\\\\\\\";(()=\u003e{var p=()=\u003e{let r=new Date,c=r.getUTCFullYear(),o=String(r.getUTCMonth()+1).padStart(2,\\\\\\\"0\\\\\\\"),l=String(r.getUTCDate()).padStart(2,\\\\\\\"0\\\\\\\")\\\",\\\"\\\\\\\"use strict\\\\\\\";(()=\u003e{var u=()=\u003e{let r=new Date,e=r.getUTCFullYear(),o=String(r.getUTCMonth()+1).padStart(2,\\\\\\\"0\\\\\\\"),n=String(r.getUTCDate()).padStart(2,\\\\\\\"0\\\\\\\")\\\",\\\"\\\\\\\"use strict\\\\\\\";(()=\u003e{var l=[\\\\\\\"/assets/images/bell.svg\\\\\\\",\\\\\\\"/assets/images/close.svg\\\\\\\",\\\\\\\"/assets/images/fullScreen.svg\\\\\\\",\\\\\\\"/assets/images/next.svg\\\\\\\",\\\\\\\"/assets/imag\\\"],\\\"styles\\\":[]},\\\"resources\\\":{\\\"normal\\\":[{\\\"name\\\":\\\"/assets/styles/style.css\\\",\\\"size\\\":2604,\\\"extension\\\":\\\"css\\\"},{\\\"name\\\":\\\"/assets/scripts/appSdk.js\\\",\\\"size\\\":243,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/autoexit.js\\\",\\\"size\\\":1798,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/pushScript.js\\\",\\\"size\\\":3003,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/reverse.js\\\",\\\"size\\\":1687,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/designs.js\\\",\\\"size\\\":3684,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/mainExit.js\\\",\\\"size\\\":1899,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/scripts/translateElements.js\\\",\\\"size\\\":483,\\\"extension\\\":\\\"js\\\"},{\\\"name\\\":\\\"/assets/images/close.svg\\\",\\\"size\\\":521,\\\"extension\\\":\\\"svg\\\"},{\\\"name\\\":\\\"/assets/images/bell.svg\\\",\\\"size\\\":859,\\\"extension\\\":\\\"svg\\\"},{\\\"name\\\":\\\"/assets/images/play.svg\\\",\\\"size\\\":221,\\\"extension\\\":\\\"svg\\\"},{\\\"name\\\":\\\"/assets/images/next.svg\\\",\\\"size\\\":205,\\\"extension\\\":\\\"svg\\\"},{\\\"name\\\":\\\"/assets/images/sound.svg\\\",\\\"size\\\":347,\\\"extension\\\":\\\"svg\\\"},{\\\"name\\\":\\\"/assets/images/settings.svg\\\",\\\"size\\\":880,\\\"extension\\\":\\\"svg\\\"},{\\\"name\\\":\\\"/assets/images/screen.svg\\\",\\\"size\\\":198,\\\"extension\\\":\\\"svg\\\"},{\\\"name\\\":\\\"/assets/images/fullScreen.svg\\\",\\\"size\\\":697,\\\"extension\\\":\\\"svg\\\"}]},\\\"diffHints\\\":{\\\"nodeCountDiff\\\":6,\\\"textLengthDiff\\\":0,\\\"styleCountDiff\\\":0,\\\"scriptCountDiff\\\":6,\\\"imgCountDiff\\\":0}}}\",\"env\":\"production-archive\",\"js_version\":\"QKk0nO_bTOeMkzJK3IoqeHJubC-RdAjmmXFeGLmPzKCKVdA\"}]"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 14:28:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://yelziv.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BT4u9tk3qnh5fyArtEcIE6tnY1z7YPDrAkyLFZmaWz04WFgBPchqJzqE6pDurhysVD2NoPyzmw2qoCKZXwKjgU4wez3k4rod05D0C2q8Xf0f2A72169670dOBWQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e184887d4ea0c9-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}