{"report_id":"ddae0f37-b38a-4885-a347-e97fb8bf5033","version":6,"status":"done","tags":[],"date":"2026-06-01T01:36:12Z","url":{"schema":"http","addr":"pdf-reader.net","fqdn":"pdf-reader.net","domain":"pdf-reader.net","tld":"net"},"ip":{"addr":"104.21.95.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pdf-reader.net/","fqdn":"pdf-reader.net","domain":"pdf-reader.net","tld":"net"},"title":"Accedi al tuo conto — Sicuro e Veloce","dom":{"size":40766,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"537bd6dd7132b579b7d9eaf3cc9c05a8","sha1":"250ea2d7f8f8154f6c1cf568799c7ea681d811a7","sha256":"94b43e5c2a52448dc4d3b55ee23d400d59de755b8d652c1357d0f70ea48635f4","sha512":"08876284402fc74f14ed1eeebfd0d013e3a23603a96da42a68d17e493a863aee32d2ce22c552838501b0f402bf2f0ea6a57fd54546dd169c9c01caf26adbc385","ssdeep":"384:eHtJK5NqFxPzKeet4l8TU2yqyJZVU2PzlR8wN1HgYJOpN1r7r+TN1gCwJJ520Xi1:eHtJK5NqFxP1ywJvf7w61","tlshash":"9b03746a75b304324ce3a0be37ab9345353290076c06ce19bfed47858f86e9559b27ec","dom_hash":"domhash109f287dcf38f1a60d3bb69f508300c9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pdf-reader.net","fqdn":"pdf-reader.net","domain":"pdf-reader.net","tld":"net"},"ip":{"addr":"104.21.95.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-06T01:36:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-01","alert":"Phishing Block","trigger":"pdf-reader.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pdf-reader.net","ip":{"addr":"104.21.95.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-26","domain_rank":0,"first_seen":"2026-06-01T00:46:21.202278Z","last_seen":"2026-06-01T00:46:21.202278Z","alert_count":36,"request_count":9,"received_data":50044,"sent_data":5667,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"file.garden","ip":{"addr":"172.67.72.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-15","domain_rank":161894,"first_seen":"2020-10-31T05:01:58Z","last_seen":"2026-05-26T03:20:11.136841Z","alert_count":0,"request_count":1,"received_data":60924,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pdf-reader.net/","fqdn":"pdf-reader.net","domain":"pdf-reader.net","tld":"net"},"ip":{"addr":"104.21.95.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c1a189ca6fe70726a304032d40ff5d7","sha1":"c74e030b63a1029be97b51e0d65cfa289b0b24d0","sha256":"e36d2ab2b686b7ce9f55d5e238caa7be93a53262b0068ef4412ef762b3270efe","sha512":"b40b7f1fb2cfde5f56d4b97c21a010516b2d9c22a92901e35a3be4d6943dec4396c4f2abaaec28a27baf6e9767ff0ec1d202deb6c409cce9b3efd407fd594961","ssdeep":"384:9l8TU2yqyJZVU2PzlR8wN1HgYJOpN1r7r+TN1gCwJJ520Xia:/Jvf7w6a","tlshash":"a8b263ba39b304318de7f0bf67ab92053932500b3846ce04beac87414fa5e555a767f9","size":24057,"data":"","first_seen":"2026-06-01T00:46:25.328316Z","last_seen":"2026-06-01T16:20:55.559062Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pdf-reader.net/api/support/start","fqdn":"pdf-reader.net","domain":"pdf-reader.net","tld":"net"},"ip":{"addr":"104.21.95.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pdf-reader.net/","date":"2026-06-01T01:35:47.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdf-reader.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 07:56:17 GMT","end":"Mon, 24 Aug 2026 07:56:16 GMT"},"fingerprint":{"sha1":"B0:BB:E4:02:62:5D:56:AB:21:DC:2F:9F:8C:54:CE:8A:AB:71:A9:FF","sha256":"B8:D6:88:8A:47:6E:E3:18:00:5F:AD:4F:BD:AA:DB:02:69:52:F1:C0:D3:29:39:38:2C:AA:1B:8C:97:52:47:0A"}}},"request":{"raw":"POST /api/support/start HTTP/1.1\r\nHost: pdf-reader.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pdf-reader.net/\r\nContent-Type: application/json\r\nContent-Length: 52\r\nOrigin: https://pdf-reader.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=.eJwNzEEOwkAIBdC7sHYBU4dCL9NMgG-MpibaXdO723eAd9Aavy_W_fOqjRZqlVA0xFBLVknm1g0ms8O6p2ISYTgXzxmAhfcKHfdUDy2hG73H9rim507nH0xcG7Y.ahzh8w.4dd2BvAVTVo5t7-C_ogclwrKoaE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":52,"data":"{\"user_id\":\"temp_lg146xwde7h\",\"user_id_type\":\"temp\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 01:35:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 28\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; font-src 'self' data: https://cdn.jsdelivr.net; img-src 'self' data: https://file.garden; connect-src 'self'\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nvary: Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bpuWNaPnLEchZUOyPfozCbw%2FEHKV0YO%2FFjvQLfEJIQyU9FSF%2F%2Fyi3%2BQQqKG%2BDsrpgZ559vGHaQu8s7UBRRljTJbKyHo5mHm%2FtZ9XukVXka%2BD5XIyMveK9rkyPotIQIJ%2F7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7bd458f55695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4dc8e6e78b90cc2622076cb6f64ea352","sha1":"3f32ea71087f99b28428fa48601d3d25986df094","sha256":"d84341fac3592e981a17514210dad0e23bea8b5895dbe28b41f99a6544406ecb","sha512":"418fddbf64db0a25986215af0303881cb36cef09f047b70432c2a81e6e15b7912dc23743f84f1b3cd2f3c10fcce2368641a2ca99f125aaeba6f1f87639684604","ssdeep":"","tlshash":"c2800080a832a8a000828c8032ba28220e208300a0808002a2b002800a8ca808280808","first_seen":"2026-06-01T01:36:13.180353Z","last_seen":"2026-06-01T01:36:13.180353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-01","alert":"Phishing Block","trigger":"pdf-reader.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdf-reader.net/api/support/messages?user_id=temp_lg146xwde7h\u0026user_id_type=temp\u0026last_id=0","fqdn":"pdf-reader.net","domain":"pdf-reader.net","tld":"net"},"ip":{"addr":"104.21.95.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pdf-reader.net/","date":"2026-06-01T01:35:54.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdf-reader.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 07:56:17 GMT","end":"Mon, 24 Aug 2026 07:56:16 GMT"},"fingerprint":{"sha1":"B0:BB:E4:02:62:5D:56:AB:21:DC:2F:9F:8C:54:CE:8A:AB:71:A9:FF","sha256":"B8:D6:88:8A:47:6E:E3:18:00:5F:AD:4F:BD:AA:DB:02:69:52:F1:C0:D3:29:39:38:2C:AA:1B:8C:97:52:47:0A"}}},"request":{"raw":"GET /api/support/messages?user_id=temp_lg146xwde7h\u0026user_id_type=temp\u0026last_id=0 HTTP/1.1\r\nHost: pdf-reader.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pdf-reader.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=.eJwNzEEOwkAIBdC7sHYBU4dCL9NMgG-MpibaXdO723eAd9Aavy_W_fOqjRZqlVA0xFBLVknm1g0ms8O6p2ISYTgXzxmAhfcKHfdUDy2hG73H9rim507nH0xcG7Y.ahzh8w.4dd2BvAVTVo5t7-C_ogclwrKoaE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 01:35:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; font-src 'self' data: https://cdn.jsdelivr.net; img-src 'self' data: https://file.garden; connect-src 'self'\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nvary: Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nwvYohhliqpfA%2FoWRoSK6ECi8%2B4vUy%2BRY7LI63DnPm5g9XmDFUtuZdg12QazW6OoCq5C4B6fI2OeLzM7isz7lCm1wzEn20Z9s%2B7n7vPAnQ07BrtLkfyUWlHX%2Fd83VwKDQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7bfaf9c75695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"207999057af01556a81681700da2d6a6","sha1":"341227e5de92bd74d29049e00035c96869b352a0","sha256":"967f89089aeadc7e90a8ecac9d3c9aca28ee83f59003525afa418983f5afd4b3","sha512":"b5d50dc28e612439232d306b3f0687d86015d2f75d0f0efb6aaf40cd2e0e19c5db2e637220a15caa3b93144bd8c2fa7283e96abd09696a6ca95aed5a4dd68a58","ssdeep":"","tlshash":"8960000008202c0802020002b8002a02800000000028a8220a0c008803008000882202","first_seen":"2024-04-22T10:39:36Z","last_seen":"2026-06-12T18:44:16.263624Z","times_seen":33,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-01","alert":"Phishing Block","trigger":"pdf-reader.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdf-reader.net/api/support/messages?user_id=temp_lg146xwde7h\u0026user_id_type=temp\u0026last_id=0","fqdn":"pdf-reader.net","domain":"pdf-reader.net","tld":"net"},"ip":{"addr":"104.21.95.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pdf-reader.net/","date":"2026-06-01T01:35:57.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdf-reader.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 07:56:17 GMT","end":"Mon, 24 Aug 2026 07:56:16 GMT"},"fingerprint":{"sha1":"B0:BB:E4:02:62:5D:56:AB:21:DC:2F:9F:8C:54:CE:8A:AB:71:A9:FF","sha256":"B8:D6:88:8A:47:6E:E3:18:00:5F:AD:4F:BD:AA:DB:02:69:52:F1:C0:D3:29:39:38:2C:AA:1B:8C:97:52:47:0A"}}},"request":{"raw":"GET /api/support/messages?user_id=temp_lg146xwde7h\u0026user_id_type=temp\u0026last_id=0 HTTP/1.1\r\nHost: pdf-reader.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pdf-reader.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=.eJwNzEEOwkAIBdC7sHYBU4dCL9NMgG-MpibaXdO723eAd9Aavy_W_fOqjRZqlVA0xFBLVknm1g0ms8O6p2ISYTgXzxmAhfcKHfdUDy2hG73H9rim507nH0xcG7Y.ahzh8w.4dd2BvAVTVo5t7-C_ogclwrKoaE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 01:35:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; font-src 'self' data: https://cdn.jsdelivr.net; img-src 'self' data: https://file.garden; connect-src 'self'\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nvary: Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EPu8oLiD0kkQF54%2FpfrT73XOpZoA316CcjFaBNmZyvsJ8edytk4TdENgHlj9WR5YHl9Lb7V3%2B45sf7h%2FOpaMxW3FRPAnDV7NrhSnkl1vCSrYDpYDHP6YFAXTJjyyYYELvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7c0db9f15695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"207999057af01556a81681700da2d6a6","sha1":"341227e5de92bd74d29049e00035c96869b352a0","sha256":"967f89089aeadc7e90a8ecac9d3c9aca28ee83f59003525afa418983f5afd4b3","sha512":"b5d50dc28e612439232d306b3f0687d86015d2f75d0f0efb6aaf40cd2e0e19c5db2e637220a15caa3b93144bd8c2fa7283e96abd09696a6ca95aed5a4dd68a58","ssdeep":"","tlshash":"8960000008202c0802020002b8002a02800000000028a8220a0c008803008000882202","first_seen":"2024-04-22T10:39:36Z","last_seen":"2026-06-12T18:44:16.263624Z","times_seen":33,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-01","alert":"Phishing Block","trigger":"pdf-reader.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdf-reader.net/api/support/messages?user_id=temp_lg146xwde7h\u0026user_id_type=temp\u0026last_id=0","fqdn":"pdf-reader.net","domain":"pdf-reader.net","tld":"net"},"ip":{"addr":"104.21.95.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pdf-reader.net/","date":"2026-06-01T01:36:06.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdf-reader.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 07:56:17 GMT","end":"Mon, 24 Aug 2026 07:56:16 GMT"},"fingerprint":{"sha1":"B0:BB:E4:02:62:5D:56:AB:21:DC:2F:9F:8C:54:CE:8A:AB:71:A9:FF","sha256":"B8:D6:88:8A:47:6E:E3:18:00:5F:AD:4F:BD:AA:DB:02:69:52:F1:C0:D3:29:39:38:2C:AA:1B:8C:97:52:47:0A"}}},"request":{"raw":"GET /api/support/messages?user_id=temp_lg146xwde7h\u0026user_id_type=temp\u0026last_id=0 HTTP/1.1\r\nHost: pdf-reader.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pdf-reader.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=.eJwNzEEOwkAIBdC7sHYBU4dCL9NMgG-MpibaXdO723eAd9Aavy_W_fOqjRZqlVA0xFBLVknm1g0ms8O6p2ISYTgXzxmAhfcKHfdUDy2hG73H9rim507nH0xcG7Y.ahzh8w.4dd2BvAVTVo5t7-C_ogclwrKoaE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 01:36:06 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; font-src 'self' data: https://cdn.jsdelivr.net; img-src 'self' data: https://file.garden; connect-src 'self'\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nvary: Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PGpR4%2BFu98VXULlByB3iZ9Y1Z2%2F9Vi%2B8n5M7eAN5XkKc61JEO4p0cpDkb42MxXQQ4pMP2QKVc%2BDTYSS%2F8nMhlO%2Bk8ct6mHidllZM8d4FHXSqRRI%2Fxyivm3LnWHzFMaYxwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7c45fac15695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"207999057af01556a81681700da2d6a6","sha1":"341227e5de92bd74d29049e00035c96869b352a0","sha256":"967f89089aeadc7e90a8ecac9d3c9aca28ee83f59003525afa418983f5afd4b3","sha512":"b5d50dc28e612439232d306b3f0687d86015d2f75d0f0efb6aaf40cd2e0e19c5db2e637220a15caa3b93144bd8c2fa7283e96abd09696a6ca95aed5a4dd68a58","ssdeep":"","tlshash":"8960000008202c0802020002b8002a02800000000028a8220a0c008803008000882202","first_seen":"2024-04-22T10:39:36Z","last_seen":"2026-06-12T18:44:16.263624Z","times_seen":33,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-01","alert":"Phishing Block","trigger":"pdf-reader.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"file.garden/agySnWxYGnD9uhTn/Paypal-Logo.png","fqdn":"file.garden","domain":"file.garden","tld":"garden"},"ip":{"addr":"172.67.72.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdf-reader.net/","date":"2026-06-01T01:35:47.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"file.garden","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 22:26:12 GMT","end":"Fri, 17 Jul 2026 23:23:39 GMT"},"fingerprint":{"sha1":"58:0F:31:7A:B4:78:D4:25:50:4C:93:DC:9C:5C:74:7F:0C:A6:18:A1","sha256":"D3:0A:94:4C:C3:22:82:71:81:48:AA:68:EE:16:F0:03:8C:95:FE:A2:7E:06:08:42:73:D3:B0:D9:F3:DB:16:F6"}}},"request":{"raw":"GET /agySnWxYGnD9uhTn/Paypal-Logo.png HTTP/1.1\r\nHost: file.garden\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdf-reader.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 01:35:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 60074\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src file.garden linkh.at data: mediastream: blob: 'unsafe-inline' 'unsafe-eval'\r\ncache-control: max-age=14400, no-transform\r\nlast-modified: Wed, 20 May 2026 10:00:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\nage: 1006490\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4QIMbvyIeXsTe69heiA3GbArEac%2BB%2F2%2FyWNrfq8Xln6OjOUnFyn%2B1PXpTp2joz2KeljE7%2FQzF9OllYtodfhY10C%2F8tMr0Lu%2FWaIfk7%2FHWycyio6GygbyKFEaNaSW0A%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a04a7bd6a8e61ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":60074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 900, 8-bit/color RGBA, non-interlaced","md5":"6ef7832d4d45bef72e7d6df9440d64b1","sha1":"9342a8c86463ef46892099ac8477f69210287119","sha256":"a2d15e8cf6e93a446ae7fe99b324a2b963dab0965094ccbc229601ae64498ea8","sha512":"4dad59f1cf1389864ca15d3684abdaf73c02212cd688d9588a584f9d87e071d356071addee466327c4fc459142e7821bffef1a8a909374085da1c73a190d18d2","ssdeep":"1536:inD/OG6neohxTg6+sdUyk8W14IzQ/IdcMIhRyah7nPnXPdOR:6r7SgtStDWFdNIh8M7nfXP8R","tlshash":"5943ac15d39a4537b21582aef8a25a2329907d733420cc4761db3a5f73a3fb5ac34e9c","first_seen":"2026-06-01T00:46:25.325619Z","last_seen":"2026-06-12T18:44:16.242804Z","times_seen":6,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":372,"dns":37,"connect":33,"send":0,"wait":78,"receive":9,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdf-reader.net/favicon.ico","fqdn":"pdf-reader.net","domain":"pdf-reader.net","tld":"net"},"ip":{"addr":"104.21.95.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdf-reader.net/","date":"2026-06-01T01:35:48.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdf-reader.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 07:56:17 GMT","end":"Mon, 24 Aug 2026 07:56:16 GMT"},"fingerprint":{"sha1":"B0:BB:E4:02:62:5D:56:AB:21:DC:2F:9F:8C:54:CE:8A:AB:71:A9:FF","sha256":"B8:D6:88:8A:47:6E:E3:18:00:5F:AD:4F:BD:AA:DB:02:69:52:F1:C0:D3:29:39:38:2C:AA:1B:8C:97:52:47:0A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pdf-reader.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdf-reader.net/\r\nCookie: session=.eJwNzEEOwkAIBdC7sHYBU4dCL9NMgG-MpibaXdO723eAd9Aavy_W_fOqjRZqlVA0xFBLVknm1g0ms8O6p2ISYTgXzxmAhfcKHfdUDy2hG73H9rim507nH0xcG7Y.ahzh8w.4dd2BvAVTVo5t7-C_ogclwrKoaE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 01:35:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2awg14YPLTreHYCNoFoKhWd6GHvBfsp5bxUsKQy05%2ByOeWVHsxzrGrBMdheYpDD1WezKu6rnuD3WQ7i4vgHfJm4kEj00iU7ZMgcf2iU7bf4iaj1BNnBv4G3q37k3UG86fA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; font-src 'self' data: https://cdn.jsdelivr.net; img-src 'self' data: https://file.garden; connect-src 'self'\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nvary: Cookie, accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7bd5e9075695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e46c4e5e1fbc64b1bae9ebd9bcef7fcf","sha1":"d767b3cb0ad66544c649e4165fc4b37e3c17e370","sha256":"e9639e3c4681ce85f852fbac48e2eeee5ba51296dbfec57c200d59b76237ab80","sha512":"d82048fdcff225197a7e9f0b7f22d470518420a4b10ea3327d604804d04d0d97efadafc84a0aaa23650146f59d94373438dc18bb822e26fd60283c384940ddb9","ssdeep":"","tlshash":"dad0224ed30a032b0a20071035c11beb998f1322757612398f42583e6185b2d81e23c8","first_seen":"2023-04-05T03:09:50Z","last_seen":"2026-06-20T21:34:28.219817Z","times_seen":16660,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-01","alert":"Phishing Block","trigger":"pdf-reader.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdf-reader.net/api/support/messages?user_id=temp_lg146xwde7h\u0026user_id_type=temp\u0026last_id=0","fqdn":"pdf-reader.net","domain":"pdf-reader.net","tld":"net"},"ip":{"addr":"104.21.95.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pdf-reader.net/","date":"2026-06-01T01:35:51.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdf-reader.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 07:56:17 GMT","end":"Mon, 24 Aug 2026 07:56:16 GMT"},"fingerprint":{"sha1":"B0:BB:E4:02:62:5D:56:AB:21:DC:2F:9F:8C:54:CE:8A:AB:71:A9:FF","sha256":"B8:D6:88:8A:47:6E:E3:18:00:5F:AD:4F:BD:AA:DB:02:69:52:F1:C0:D3:29:39:38:2C:AA:1B:8C:97:52:47:0A"}}},"request":{"raw":"GET /api/support/messages?user_id=temp_lg146xwde7h\u0026user_id_type=temp\u0026last_id=0 HTTP/1.1\r\nHost: pdf-reader.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pdf-reader.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=.eJwNzEEOwkAIBdC7sHYBU4dCL9NMgG-MpibaXdO723eAd9Aavy_W_fOqjRZqlVA0xFBLVknm1g0ms8O6p2ISYTgXzxmAhfcKHfdUDy2hG73H9rim507nH0xcG7Y.ahzh8w.4dd2BvAVTVo5t7-C_ogclwrKoaE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 01:35:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; font-src 'self' data: https://cdn.jsdelivr.net; img-src 'self' data: https://file.garden; connect-src 'self'\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nvary: Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JQUdtDcFtw%2BdMxq8bgjVtTRqTpohClaPQ%2BYvzj4fNB8xWNYR8AVSI8GYMcj%2FOc7QGM8MD0YY86ONt7oTRgB0PemyxX6O3FQ1ZfxMJBVRfq9EPl1AiRA%2FGpJ4wsbN19j32w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7be8398f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"207999057af01556a81681700da2d6a6","sha1":"341227e5de92bd74d29049e00035c96869b352a0","sha256":"967f89089aeadc7e90a8ecac9d3c9aca28ee83f59003525afa418983f5afd4b3","sha512":"b5d50dc28e612439232d306b3f0687d86015d2f75d0f0efb6aaf40cd2e0e19c5db2e637220a15caa3b93144bd8c2fa7283e96abd09696a6ca95aed5a4dd68a58","ssdeep":"","tlshash":"8960000008202c0802020002b8002a02800000000028a8220a0c008803008000882202","first_seen":"2024-04-22T10:39:36Z","last_seen":"2026-06-12T18:44:16.263624Z","times_seen":33,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-01","alert":"Phishing Block","trigger":"pdf-reader.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdf-reader.net/api/support/messages?user_id=temp_lg146xwde7h\u0026user_id_type=temp\u0026last_id=0","fqdn":"pdf-reader.net","domain":"pdf-reader.net","tld":"net"},"ip":{"addr":"104.21.95.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pdf-reader.net/","date":"2026-06-01T01:36:00.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdf-reader.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 07:56:17 GMT","end":"Mon, 24 Aug 2026 07:56:16 GMT"},"fingerprint":{"sha1":"B0:BB:E4:02:62:5D:56:AB:21:DC:2F:9F:8C:54:CE:8A:AB:71:A9:FF","sha256":"B8:D6:88:8A:47:6E:E3:18:00:5F:AD:4F:BD:AA:DB:02:69:52:F1:C0:D3:29:39:38:2C:AA:1B:8C:97:52:47:0A"}}},"request":{"raw":"GET /api/support/messages?user_id=temp_lg146xwde7h\u0026user_id_type=temp\u0026last_id=0 HTTP/1.1\r\nHost: pdf-reader.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pdf-reader.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=.eJwNzEEOwkAIBdC7sHYBU4dCL9NMgG-MpibaXdO723eAd9Aavy_W_fOqjRZqlVA0xFBLVknm1g0ms8O6p2ISYTgXzxmAhfcKHfdUDy2hG73H9rim507nH0xcG7Y.ahzh8w.4dd2BvAVTVo5t7-C_ogclwrKoaE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 01:36:00 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; font-src 'self' data: https://cdn.jsdelivr.net; img-src 'self' data: https://file.garden; connect-src 'self'\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nvary: Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=obJ%2F5n4V%2FenCwNMcGDC8Xoo3UlNLiu7kZp%2FaY0QmDK11K%2BRrw123y616XbGScSbdSKS21f93ACMo2UISR7%2BdK%2Fy5uFNVUqOkxoySYlH42J4kXumydbaqqad7sYb0YA%2BlCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7c207a585695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"207999057af01556a81681700da2d6a6","sha1":"341227e5de92bd74d29049e00035c96869b352a0","sha256":"967f89089aeadc7e90a8ecac9d3c9aca28ee83f59003525afa418983f5afd4b3","sha512":"b5d50dc28e612439232d306b3f0687d86015d2f75d0f0efb6aaf40cd2e0e19c5db2e637220a15caa3b93144bd8c2fa7283e96abd09696a6ca95aed5a4dd68a58","ssdeep":"","tlshash":"8960000008202c0802020002b8002a02800000000028a8220a0c008803008000882202","first_seen":"2024-04-22T10:39:36Z","last_seen":"2026-06-12T18:44:16.263624Z","times_seen":33,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-01","alert":"Phishing Block","trigger":"pdf-reader.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdf-reader.net/api/support/messages?user_id=temp_lg146xwde7h\u0026user_id_type=temp\u0026last_id=0","fqdn":"pdf-reader.net","domain":"pdf-reader.net","tld":"net"},"ip":{"addr":"104.21.95.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pdf-reader.net/","date":"2026-06-01T01:36:03.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdf-reader.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 07:56:17 GMT","end":"Mon, 24 Aug 2026 07:56:16 GMT"},"fingerprint":{"sha1":"B0:BB:E4:02:62:5D:56:AB:21:DC:2F:9F:8C:54:CE:8A:AB:71:A9:FF","sha256":"B8:D6:88:8A:47:6E:E3:18:00:5F:AD:4F:BD:AA:DB:02:69:52:F1:C0:D3:29:39:38:2C:AA:1B:8C:97:52:47:0A"}}},"request":{"raw":"GET /api/support/messages?user_id=temp_lg146xwde7h\u0026user_id_type=temp\u0026last_id=0 HTTP/1.1\r\nHost: pdf-reader.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pdf-reader.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=.eJwNzEEOwkAIBdC7sHYBU4dCL9NMgG-MpibaXdO723eAd9Aavy_W_fOqjRZqlVA0xFBLVknm1g0ms8O6p2ISYTgXzxmAhfcKHfdUDy2hG73H9rim507nH0xcG7Y.ahzh8w.4dd2BvAVTVo5t7-C_ogclwrKoaE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 01 Jun 2026 01:36:03 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; font-src 'self' data: https://cdn.jsdelivr.net; img-src 'self' data: https://file.garden; connect-src 'self'\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nvary: Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O6HLRZARp1OYsV99eZDULvSZPKUZcdkuuVQ9m%2FHJa1j5BCeZABLdXjIttPfJmiH5UOgCTspoIKRx2rw0jehZ1JTqQs5sjEZO7NDA1uZsFd5LnOjNFfp%2BgRfwavyFJxQW1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7c333a935695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"207999057af01556a81681700da2d6a6","sha1":"341227e5de92bd74d29049e00035c96869b352a0","sha256":"967f89089aeadc7e90a8ecac9d3c9aca28ee83f59003525afa418983f5afd4b3","sha512":"b5d50dc28e612439232d306b3f0687d86015d2f75d0f0efb6aaf40cd2e0e19c5db2e637220a15caa3b93144bd8c2fa7283e96abd09696a6ca95aed5a4dd68a58","ssdeep":"","tlshash":"8960000008202c0802020002b8002a02800000000028a8220a0c008803008000882202","first_seen":"2024-04-22T10:39:36Z","last_seen":"2026-06-12T18:44:16.263624Z","times_seen":33,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-01","alert":"Phishing Block","trigger":"pdf-reader.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdf-reader.net/","fqdn":"pdf-reader.net","domain":"pdf-reader.net","tld":"net"},"ip":{"addr":"104.21.95.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-01T01:35:47.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pdf-reader.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 07:56:17 GMT","end":"Mon, 24 Aug 2026 07:56:16 GMT"},"fingerprint":{"sha1":"B0:BB:E4:02:62:5D:56:AB:21:DC:2F:9F:8C:54:CE:8A:AB:71:A9:FF","sha256":"B8:D6:88:8A:47:6E:E3:18:00:5F:AD:4F:BD:AA:DB:02:69:52:F1:C0:D3:29:39:38:2C:AA:1B:8C:97:52:47:0A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pdf-reader.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 01:35:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; font-src 'self' data: https://cdn.jsdelivr.net; img-src 'self' data: https://file.garden; connect-src 'self'\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nvary: Cookie, accept-encoding\r\nset-cookie: session=.eJwNzEEOwkAIBdC7sHYBU4dCL9NMgG-MpibaXdO723eAd9Aavy_W_fOqjRZqlVA0xFBLVknm1g0ms8O6p2ISYTgXzxmAhfcKHfdUDy2hG73H9rim507nH0xcG7Y.ahzh8w.4dd2BvAVTVo5t7-C_ogclwrKoaE; HttpOnly; Path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2FRHN6129IbEptqap4tH0GhzQaMoPy24f2U7V9cldGKB10pHFC5%2FUN6Ll3v6ZZ4TYWUgTuLRqX1mspjO%2FmdqUQ6KEUVRokaPhdnLKy%2BG9Td3kdv3zJAXsAw6me3SMcbi2Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a04a7bd1f8fd120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40787,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8e2d4cebd19a81238fa4ad73a8160490","sha1":"025309e92c0fb9cc6fe7e3c4ceac8ee961afbe5e","sha256":"1d86fb2ae919ca40cb67a7761230b5ca5fc82c115f3123c36a8b993f4fd4c581","sha512":"e8b6f8be194be073c95267c40f95166b112409432a1895bc7a1d6a698d97a836f7e9c2f1df5ccd08183a96300860a7e1905a20310f9068c4ee6a588db57a7b46","ssdeep":"384:oHtJK5NqFxPzKeetCl8TU2yqyJZVU2PzlR8wN1HgYJOpN1r7r+TN1gCwJJ520XiD:oHtJK5NqFxP1yWJvf7w6D","tlshash":"d703746a75b304324ce3a0be37ab9345353290076c06ce197fed87458f86e9559b27ec","first_seen":"2026-06-01T00:46:25.314867Z","last_seen":"2026-06-12T18:44:16.26713Z","times_seen":5,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":107,"dns":27,"connect":33,"send":0,"wait":116,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-01","alert":"Phishing Block","trigger":"pdf-reader.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"pdf-reader.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}