{"report_id":"da82ef93-9fc7-422c-9088-40bf68f93c15","version":0,"status":"done","tags":[],"date":"2026-09-19T08:12:35Z","url":{"schema":"http","addr":"getvelora.live/","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":0,"asn":207994,"as":"Blockchain Creek B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"getvelora.live/","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"title":"Velora — аккаунты Robokassa","dom":{"size":23030,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (944)","md5":"49cc9ba0de539638e411d5b183846567","sha1":"96c10dca6c6aa883a7f73e27589b8ba7f4e83539","sha256":"b8e4af7dd2d4179bfe9e1bc66a5df038760bf440af419cd1fecabf0205137938","sha512":"1433e78edd03218a79415d83c12998d5bb66a552800c7633b9a56c4d767f1a8df43c34a38238267f733273d6755e92dc025df285889641c77e615937feccf3ca","ssdeep":"192:blS7iA22PodJSiVzhj7NEWKuqEck9MZy1IdE/x2s/FRhZ7eedpLAauSi:xS7HOzhLz9Ux2j/FRfeedlU","tlshash":"f6a286605af95c3e5213c19ae305bb2ebdaa50bf9e0f0304717c16b91fd2c99da3b158","dom_hash":"domhashca2182927b2a0330c1f89b6ecf53f608","first_seen":"2026-09-19T08:12:41.537741Z","last_seen":"2026-09-19T08:19:28.628467Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"getvelora.live/","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":0,"asn":207994,"as":"Blockchain Creek B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T08:12:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"getvelora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"getvelora.live","ip":{"addr":"62.72.177.194","port":443,"asn":207994,"as":"Blockchain Creek B.V.","country":"Jordan","country_code":"JO"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-19T08:12:36.955571Z","last_seen":"2026-09-19T08:12:36.955571Z","alert_count":10,"request_count":10,"received_data":2369039,"sent_data":5057,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"getvelora.live/","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":443,"asn":207994,"as":"Blockchain Creek B.V.","country":"Jordan","country_code":"JO"},"introduction_type":"scriptElement","is_inline":true,"md5":"a90eebeb96312b3dab6632dde5d2688d","sha1":"1e7ad2ffb5e8e102c36aaa77c2366b80878d207f","sha256":"579a896dad8f7e5df8a475ebe6d7e548c07ad6f011531e29a19ccb646f849642","sha512":"93e7f1f071822161c9c55cab1a417c55e99c4492f98d9eca8e9b7ef4fcba8ed69333c7ea6d68fe7c5fc4c41194bcd816ac17cd23e3c5a0c0414435cf4e22699d","ssdeep":"","tlshash":"f5b012f03209412044cd089c309c66d27b31750122966629900e080414b8dca1361fda","size":96,"data":"","first_seen":"2026-09-19T08:12:41.566737Z","last_seen":"2026-09-19T08:19:28.645147Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelora.live/js/app.js?v=9","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":443,"asn":207994,"as":"Blockchain Creek B.V.","country":"Jordan","country_code":"JO"},"introduction_type":"importedModule","is_inline":false,"md5":"2dfd6ce0b4c94c162c8d48cfb616a8a5","sha1":"3c4798a0bfa97acb610a7be6347cddd6c1aa4c24","sha256":"5fe8028b5b88c6a36a13833c2e9754633b0d90ba4763bd9a9c1522b0147206d1","sha512":"66976b7d877219c5606493671af325a4bc8c92ab6cf7c0af928402e18353ea0edd017d0a3ae9e442ccedbb3cf2992e398d67cdea9236524fae69177c417c57a3","ssdeep":"192:L+i6f0gQKFLV1YvLgTJbo3B2FODaf2lPi21OmFEq2vu95yfYLNA:Z6ZFogTJM3B2Fx2lPjEVYLW","tlshash":"ac22956339ab75394223f1b7b207d519746d617b3e0bca62756c0a0c2fe0a24d27e9f4","size":10149,"data":"","first_seen":"2026-09-19T08:12:41.546266Z","last_seen":"2026-09-19T08:19:28.631555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"getvelora.live/favicon.ico","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":443,"asn":207994,"as":"Blockchain Creek B.V.","country":"Jordan","country_code":"JO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelora.live/","date":"2026-09-19T08:12:05.479Z","timestamp":1789805525479,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelora.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 15:48:32 GMT","end":"Sun, 18 Oct 2026 15:48:31 GMT"},"fingerprint":{"sha1":"B2:CD:F6:53:6D:0D:95:96:FE:F3:7E:D6:49:09:7E:EF:29:B4:0F:4C","sha256":"E2:67:E5:51:BC:45:1C:F1:8E:78:45:1E:CB:5C:F2:44:71:77:85:F3:D5:33:BE:CF:5E:18:52:82:46:7D:DA:28"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: getvelora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvelora.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _l7t=AAAAANRDrmo4qOBRqElzHLq_MIc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: L7-Protection\r\nDate: Sat, 19 Sep 2026 08:12:05 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Encoding: br\r\nContent-Length: 5491\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Xss-Protection: 0\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; style-src 'self' 'unsafe-inline'; font-src 'self'; connect-src 'self' ws: wss:; script-src 'self' https://cdnjs.cloudflare.com 'sha256-V5qJba2Pfl34pHXr5tflSMB61vARUx4poZzLZG+ElkI=' 'sha256-vgNwq9rg0iv//sHZYrlgYBSSYQD6JUwV7E48G4PVoWw='\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Protected-By: SatxCloud\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20883,"size_decoded":6550,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f30c5bd35ce3e1d7b77ee7ca97707ad3","sha1":"771f92dc68141b3f1a50a2b9d5eab8daa6d95ae7","sha256":"3e61c8418243e62a2151fc2b0d0fe648038d3716e1d7252de57b2e3cd7f1fc72","sha512":"25e9331839868f0b67cab9529d21165de5e7fd1e71d331674392fa4b78ca0415b0d54052b5f83f3f3e93617f002ba3b33356b0f9be4d335ff29d64b6cabcbf7b","ssdeep":"192:ZlSsu4nWz0F6VIhRTON6nnuIcUKa8yvZy1IAErx20/FRhsLAauSK:7SZQZuraxJz/FREU","tlshash":"a79252605af95c7d5212d056e704ba2ebd6aa0bf5f1f1300703d1ab92fd1899ca3f29c","first_seen":"2026-09-19T08:12:41.540883Z","last_seen":"2026-09-19T08:19:28.639139Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"getvelora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvelora.live/","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":443,"asn":207994,"as":"Blockchain Creek B.V.","country":"Jordan","country_code":"JO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T08:12:03.776Z","timestamp":1789805523776,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelora.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 15:48:32 GMT","end":"Sun, 18 Oct 2026 15:48:31 GMT"},"fingerprint":{"sha1":"B2:CD:F6:53:6D:0D:95:96:FE:F3:7E:D6:49:09:7E:EF:29:B4:0F:4C","sha256":"E2:67:E5:51:BC:45:1C:F1:8E:78:45:1E:CB:5C:F2:44:71:77:85:F3:D5:33:BE:CF:5E:18:52:82:46:7D:DA:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: getvelora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: L7-Protection\r\nDate: Sat, 19 Sep 2026 08:12:04 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Encoding: br\r\nContent-Length: 5491\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Xss-Protection: 0\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; style-src 'self' 'unsafe-inline'; font-src 'self'; connect-src 'self' ws: wss:; script-src 'self' https://cdnjs.cloudflare.com 'sha256-V5qJba2Pfl34pHXr5tflSMB61vARUx4poZzLZG+ElkI=' 'sha256-vgNwq9rg0iv//sHZYrlgYBSSYQD6JUwV7E48G4PVoWw='\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Protected-By: SatxCloud\r\nSet-Cookie: _l7t=AAAAANNDrmrdibs83FWS9icx138; max-age=172800; path=/; HttpOnly; secure; SameSite=Lax\n_l7t=AAAAANRDrmo4qOBRqElzHLq_MIc; max-age=172800; path=/; HttpOnly; secure; SameSite=Lax\r\n\r\n","headers":null,"cookies":[{"name":"_l7t","value":"AAAAANNDrmrdibs83FWS9icx138","quoted":false,"path":"/","max_age":172800,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"_l7t=AAAAANNDrmrdibs83FWS9icx138; max-age=172800; path=/; HttpOnly; secure; SameSite=Lax"},{"name":"_l7t","value":"AAAAANRDrmo4qOBRqElzHLq_MIc","quoted":false,"path":"/","max_age":172800,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"_l7t=AAAAANRDrmo4qOBRqElzHLq_MIc; max-age=172800; path=/; HttpOnly; secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20883,"size_decoded":6741,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f30c5bd35ce3e1d7b77ee7ca97707ad3","sha1":"771f92dc68141b3f1a50a2b9d5eab8daa6d95ae7","sha256":"3e61c8418243e62a2151fc2b0d0fe648038d3716e1d7252de57b2e3cd7f1fc72","sha512":"25e9331839868f0b67cab9529d21165de5e7fd1e71d331674392fa4b78ca0415b0d54052b5f83f3f3e93617f002ba3b33356b0f9be4d335ff29d64b6cabcbf7b","ssdeep":"192:ZlSsu4nWz0F6VIhRTON6nnuIcUKa8yvZy1IAErx20/FRhsLAauSK:7SZQZuraxJz/FREU","tlshash":"a79252605af95c7d5212d056e704ba2ebd6aa0bf5f1f1300703d1ab92fd1899ca3f29c","first_seen":"2026-09-19T08:12:41.540883Z","last_seen":"2026-09-19T08:19:28.639139Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1216,"timings":{"blocked":0,"dns":73,"connect":28,"send":0,"wait":1053,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"getvelora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvelora.live/css/style.css?v=9","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":443,"asn":207994,"as":"Blockchain Creek B.V.","country":"Jordan","country_code":"JO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelora.live/","date":"2026-09-19T08:12:05.215Z","timestamp":1789805525215,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelora.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 15:48:32 GMT","end":"Sun, 18 Oct 2026 15:48:31 GMT"},"fingerprint":{"sha1":"B2:CD:F6:53:6D:0D:95:96:FE:F3:7E:D6:49:09:7E:EF:29:B4:0F:4C","sha256":"E2:67:E5:51:BC:45:1C:F1:8E:78:45:1E:CB:5C:F2:44:71:77:85:F3:D5:33:BE:CF:5E:18:52:82:46:7D:DA:28"}}},"request":{"raw":"GET /css/style.css?v=9 HTTP/1.1\r\nHost: getvelora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvelora.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _l7t=AAAAANRDrmo4qOBRqElzHLq_MIc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: L7-Protection\r\nDate: Sat, 19 Sep 2026 08:12:04 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Encoding: br\r\nContent-Length: 5934\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nCache-Control: public, max-age=1800\r\nX-Protected-By: SatxCloud\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23621,"size_decoded":6567,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"73df09f9695161206332b01065a541b3","sha1":"fdd033652f1996d34da063a2488809261e328e08","sha256":"907907124704e237208b7d0f69b1a9705c5712a373c83f721e3943ca4bad8efb","sha512":"1910670ca2cde649575b523045b2f4f51acb6bbfff7a485c751eed2f1fb41f0b17cde3dfc1a814deeb0689ee7828a174335d567c04b71711b96023e3ab303d87","ssdeep":"384:1f/k3t7gC/NTlwtCpI8BYKoMdPYMKEG2sxoKua:Et7B1lwtCpI8BYFMdPYMtG9CKt","tlshash":"bfb2a8233f1422b9b466f7657acaab5ff2597223961496bc6cd4101cd1cd3b801beb8c","first_seen":"2026-09-19T08:12:41.542378Z","last_seen":"2026-09-19T08:19:28.640135Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"getvelora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvelora.live/css/home.css?v=3","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":443,"asn":207994,"as":"Blockchain Creek B.V.","country":"Jordan","country_code":"JO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelora.live/","date":"2026-09-19T08:12:05.219Z","timestamp":1789805525219,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelora.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 15:48:32 GMT","end":"Sun, 18 Oct 2026 15:48:31 GMT"},"fingerprint":{"sha1":"B2:CD:F6:53:6D:0D:95:96:FE:F3:7E:D6:49:09:7E:EF:29:B4:0F:4C","sha256":"E2:67:E5:51:BC:45:1C:F1:8E:78:45:1E:CB:5C:F2:44:71:77:85:F3:D5:33:BE:CF:5E:18:52:82:46:7D:DA:28"}}},"request":{"raw":"GET /css/home.css?v=3 HTTP/1.1\r\nHost: getvelora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvelora.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _l7t=AAAAANRDrmo4qOBRqElzHLq_MIc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: L7-Protection\r\nDate: Sat, 19 Sep 2026 08:12:04 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Encoding: br\r\nContent-Length: 4573\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nCache-Control: public, max-age=1800\r\nX-Protected-By: SatxCloud\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19532,"size_decoded":5206,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"3c1aa282ee43eaebb4ad79976e7986ec","sha1":"9568fe290cbd2a3c50d402b5438f3cfb590b93c7","sha256":"9af7444554b3a9c0e1f5e13a0c065cc03d0107def108ac3f1bc6da0c971085fe","sha512":"f256699ecca0f4ea52274da67077b22a8dbe4be32ad2e3bc1dacb828dca5f22bb99f474e33fe9600ad86a982146868fbd7a884831c8adfc525b76fd1be8e6f2f","ssdeep":"384:i1HKCM+1z50zsoxFvx63ogU0dZpLYBhOeE9jt:i15kxFvxdth4","tlshash":"9d8265512f10e164761aff25b24ad74eff18b2179a9961fc38b91814c7c827742bef48","first_seen":"2026-09-19T08:12:41.544423Z","last_seen":"2026-09-19T08:19:28.641189Z","times_seen":2,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":17,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"getvelora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvelora.live/js/app.js?v=9","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":443,"asn":207994,"as":"Blockchain Creek B.V.","country":"Jordan","country_code":"JO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelora.live/","date":"2026-09-19T08:12:05.224Z","timestamp":1789805525224,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelora.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 15:48:32 GMT","end":"Sun, 18 Oct 2026 15:48:31 GMT"},"fingerprint":{"sha1":"B2:CD:F6:53:6D:0D:95:96:FE:F3:7E:D6:49:09:7E:EF:29:B4:0F:4C","sha256":"E2:67:E5:51:BC:45:1C:F1:8E:78:45:1E:CB:5C:F2:44:71:77:85:F3:D5:33:BE:CF:5E:18:52:82:46:7D:DA:28"}}},"request":{"raw":"GET /js/app.js?v=9 HTTP/1.1\r\nHost: getvelora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvelora.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _l7t=AAAAANRDrmo4qOBRqElzHLq_MIc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: L7-Protection\r\nDate: Sat, 19 Sep 2026 08:12:04 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Encoding: br\r\nContent-Length: 3710\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nCache-Control: public, max-age=1800\r\nX-Protected-By: SatxCloud\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10149,"size_decoded":4350,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2dfd6ce0b4c94c162c8d48cfb616a8a5","sha1":"3c4798a0bfa97acb610a7be6347cddd6c1aa4c24","sha256":"5fe8028b5b88c6a36a13833c2e9754633b0d90ba4763bd9a9c1522b0147206d1","sha512":"66976b7d877219c5606493671af325a4bc8c92ab6cf7c0af928402e18353ea0edd017d0a3ae9e442ccedbb3cf2992e398d67cdea9236524fae69177c417c57a3","ssdeep":"192:L+i6f0gQKFLV1YvLgTJbo3B2FODaf2lPi21OmFEq2vu95yfYLNA:Z6ZFogTJM3B2Fx2lPjEVYLW","tlshash":"ac22956339ab75394223f1b7b207d519746d617b3e0bca62756c0a0c2fe0a24d27e9f4","first_seen":"2026-09-19T08:12:41.546266Z","last_seen":"2026-09-19T08:19:28.631555Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"getvelora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvelora.live/img/hero-dark.png?v=2","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":443,"asn":207994,"as":"Blockchain Creek B.V.","country":"Jordan","country_code":"JO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelora.live/","date":"2026-09-19T08:12:05.229Z","timestamp":1789805525229,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelora.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 15:48:32 GMT","end":"Sun, 18 Oct 2026 15:48:31 GMT"},"fingerprint":{"sha1":"B2:CD:F6:53:6D:0D:95:96:FE:F3:7E:D6:49:09:7E:EF:29:B4:0F:4C","sha256":"E2:67:E5:51:BC:45:1C:F1:8E:78:45:1E:CB:5C:F2:44:71:77:85:F3:D5:33:BE:CF:5E:18:52:82:46:7D:DA:28"}}},"request":{"raw":"GET /img/hero-dark.png?v=2 HTTP/1.1\r\nHost: getvelora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvelora.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _l7t=AAAAANRDrmo4qOBRqElzHLq_MIc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: L7-Protection\r\nDate: Sat, 19 Sep 2026 08:12:05 GMT\r\nContent-Type: image/png\r\nContent-Length: 1239860\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nCache-Control: public, max-age=1800\r\nX-Protected-By: SatxCloud\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1239860,"size_decoded":1240460,"mime_type":"image/png","magic":"PNG image data, 1402 x 1122, 8-bit/color RGBA, non-interlaced","md5":"cd656447a764819a7905a76d340ef6fc","sha1":"80cd37eacbb87c2c53385478bd7b2f8392424806","sha256":"8b0c9d1c06cb16b49af364333ca3a2bceea3afe0c0d0e566bbc43362d026f1ae","sha512":"bc39db26527cb9434f3d868e6fdc0bceb7800710fabb30f86fb56c4a5c7659dad7ac8800709ad1b18ec5d3fdcfc36f1d861cf90efd2b68377e2b107dfc680f78","ssdeep":"24576:LWTyJ886VWVbFThjetMYRMocXPqVsrggaZx17v26+:yrWVlhjeKYRMZXPqVskNxZ26+","tlshash":"a22533506be23c5e4e80d9732bae842cff4a8f876760f654895f295f337282c45f514a","first_seen":"2026-09-19T08:12:41.549973Z","last_seen":"2026-09-19T08:19:28.643506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":48,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"getvelora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvelora.live/api/auth/me","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":443,"asn":207994,"as":"Blockchain Creek B.V.","country":"Jordan","country_code":"JO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://getvelora.live/","date":"2026-09-19T08:12:05.322Z","timestamp":1789805525322,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelora.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 15:48:32 GMT","end":"Sun, 18 Oct 2026 15:48:31 GMT"},"fingerprint":{"sha1":"B2:CD:F6:53:6D:0D:95:96:FE:F3:7E:D6:49:09:7E:EF:29:B4:0F:4C","sha256":"E2:67:E5:51:BC:45:1C:F1:8E:78:45:1E:CB:5C:F2:44:71:77:85:F3:D5:33:BE:CF:5E:18:52:82:46:7D:DA:28"}}},"request":{"raw":"GET /api/auth/me HTTP/1.1\r\nHost: getvelora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvelora.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _l7t=AAAAANRDrmo4qOBRqElzHLq_MIc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: L7-Protection\r\nDate: Sat, 19 Sep 2026 08:12:05 GMT\r\nContent-Type: application/json\r\nContent-Length: 13\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Protected-By: SatxCloud\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13,"size_decoded":607,"mime_type":"application/json","magic":"JSON text data","md5":"6d3600a46bb738376a1514eae93988bf","sha1":"3b78be6a9d9c7dfe5bc613d137c3f2cdc8ce6ef0","sha256":"2e7fe66d0f26a4cc5aaad5f34dba496c7988c175f79b24dcfa414a1dba289c0a","sha512":"e09a82f35923dea8be19633df341b29240143f583ffb7c10fdd8acb20a9c923870e0a0dcf93bc7299ea408659db53e153d2231e0b319a082dce500bd55a15b94","ssdeep":"","tlshash":"1c600000cc0300003000000300000003030c00c303000c00c030cf0000c00303030000","first_seen":"2023-04-10T14:09:19Z","last_seen":"2026-09-19T10:58:07.141982Z","times_seen":3414,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"getvelora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvelora.live/api/shop/products","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":443,"asn":207994,"as":"Blockchain Creek B.V.","country":"Jordan","country_code":"JO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://getvelora.live/","date":"2026-09-19T08:12:05.361Z","timestamp":1789805525361,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelora.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 15:48:32 GMT","end":"Sun, 18 Oct 2026 15:48:31 GMT"},"fingerprint":{"sha1":"B2:CD:F6:53:6D:0D:95:96:FE:F3:7E:D6:49:09:7E:EF:29:B4:0F:4C","sha256":"E2:67:E5:51:BC:45:1C:F1:8E:78:45:1E:CB:5C:F2:44:71:77:85:F3:D5:33:BE:CF:5E:18:52:82:46:7D:DA:28"}}},"request":{"raw":"GET /api/shop/products HTTP/1.1\r\nHost: getvelora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvelora.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _l7t=AAAAANRDrmo4qOBRqElzHLq_MIc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: L7-Protection\r\nDate: Sat, 19 Sep 2026 08:12:05 GMT\r\nContent-Type: application/json\r\nContent-Length: 154\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Protected-By: SatxCloud\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154,"size_decoded":749,"mime_type":"application/json","magic":"JSON text data","md5":"e198c140cd90198b9508dbe9fcfe891a","sha1":"6a64cadf81c80664871068412aba75344f831df4","sha256":"fca59f7a9150c0f403647c575ef5c7ebb029544a23446d9f11e23c9c35647b6b","sha512":"dda496444d79e8db1cb93bd7ad67635613e56653ccd6976aae50da503255d114bd188193ebe6d3529c16319d7af675b847cc2bd74dc92d4e307f5d3d54faca46","ssdeep":"","tlshash":"10c02b869eb101b0a0880210cc7a682399dc431c0cd487c98cf8e53908d0cce7403332","first_seen":"2026-09-19T08:12:41.555769Z","last_seen":"2026-09-19T08:19:28.637789Z","times_seen":2,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"getvelora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvelora.live/img/hero-light.png?v=2","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":443,"asn":207994,"as":"Blockchain Creek B.V.","country":"Jordan","country_code":"JO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelora.live/","date":"2026-09-19T08:12:05.226Z","timestamp":1789805525226,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelora.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 15:48:32 GMT","end":"Sun, 18 Oct 2026 15:48:31 GMT"},"fingerprint":{"sha1":"B2:CD:F6:53:6D:0D:95:96:FE:F3:7E:D6:49:09:7E:EF:29:B4:0F:4C","sha256":"E2:67:E5:51:BC:45:1C:F1:8E:78:45:1E:CB:5C:F2:44:71:77:85:F3:D5:33:BE:CF:5E:18:52:82:46:7D:DA:28"}}},"request":{"raw":"GET /img/hero-light.png?v=2 HTTP/1.1\r\nHost: getvelora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvelora.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _l7t=AAAAANRDrmo4qOBRqElzHLq_MIc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: L7-Protection\r\nDate: Sat, 19 Sep 2026 08:12:05 GMT\r\nContent-Type: image/png\r\nContent-Length: 1026448\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nCache-Control: public, max-age=1800\r\nX-Protected-By: SatxCloud\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1026448,"size_decoded":1027048,"mime_type":"image/png","magic":"PNG image data, 1402 x 1122, 8-bit/color RGBA, non-interlaced","md5":"29181653cd1933362cf96696e9be5247","sha1":"3c72cfe7da172765b751d1413b63923a0b80f2cd","sha256":"5c237fd8f1b50f0e451f5b8d8ce1ebd943f530267f923846e43b4f829b68ed67","sha512":"4a691a348dabd549d4e8e800df8e11a743f5125d342df67356b34fd64953ffba5111b8972c2801afc29f6c5da7d9701abab7abe7cfbe1b8353137150241f451a","ssdeep":"24576:Lhx3vQ9sPr1cCPf7gV9RHh3bCQeJjH1kFqYFlfjV+RpfGgqOa3Je0yG:LRJcp7HhukFdjg9GYwULG","tlshash":"f025335b885319b006d0db90d6eb5a9c64472382f162cf1dc1f8bb49a25b7937be21f4","first_seen":"2026-09-19T08:12:41.559378Z","last_seen":"2026-09-19T08:19:28.642118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":43,"dns":0,"connect":28,"send":0,"wait":44,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"getvelora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvelora.live/api/shop/settings","fqdn":"getvelora.live","domain":"getvelora.live","tld":"live"},"ip":{"addr":"62.72.177.194","port":443,"asn":207994,"as":"Blockchain Creek B.V.","country":"Jordan","country_code":"JO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://getvelora.live/","date":"2026-09-19T08:12:05.359Z","timestamp":1789805525359,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelora.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 15:48:32 GMT","end":"Sun, 18 Oct 2026 15:48:31 GMT"},"fingerprint":{"sha1":"B2:CD:F6:53:6D:0D:95:96:FE:F3:7E:D6:49:09:7E:EF:29:B4:0F:4C","sha256":"E2:67:E5:51:BC:45:1C:F1:8E:78:45:1E:CB:5C:F2:44:71:77:85:F3:D5:33:BE:CF:5E:18:52:82:46:7D:DA:28"}}},"request":{"raw":"GET /api/shop/settings HTTP/1.1\r\nHost: getvelora.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getvelora.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _l7t=AAAAANRDrmo4qOBRqElzHLq_MIc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: L7-Protection\r\nDate: Sat, 19 Sep 2026 08:12:05 GMT\r\nContent-Type: application/json\r\nContent-Length: 297\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Protected-By: SatxCloud\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":297,"size_decoded":892,"mime_type":"application/json","magic":"JSON text data","md5":"e77238fa55a0d77654310ba7b753c627","sha1":"685100e9ae7a522255189d0cdd282ad4864faa0d","sha256":"32417b68b14ce3f6584ab5eac2ca2d5f9a24b97210ce584297bde1d673e63ae9","sha512":"318214a4452f39b2aac1a4e38d2503efe7911657f70f06df6356ab0504352611a106419be946822e4a472cf58bd3aaeb7c5e03922176d9cb73957581d31ae71d","ssdeep":"","tlshash":"0ce0cd5404d45ce70120e55da5051c4b3dae44ff6f95d59416e85c5920b01b44517623","first_seen":"2026-09-19T08:12:41.563438Z","last_seen":"2026-09-19T08:19:28.635914Z","times_seen":2,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"getvelora.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}