{"report_id":"dea4c1c5-1e44-401e-b7cb-431cadce0ba1","version":0,"status":"done","tags":[],"date":"2026-06-07T09:33:44Z","url":{"schema":"https","addr":"elitecu.com","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"elitecu.com/","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"title":"ELITE CREDIT UNION - Dedicated to innovating, simplifying, and humanizing digital banking.","dom":{"size":79579,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3703)","md5":"be143098253b2cd7dfb89b6f438d28dd","sha1":"8ad20b994bcfce4eef6282baba5e4d2c1a84943b","sha256":"26082bcce3a37a39561322746d0d7735c4f450e7db71bc13090dc9e48d5a68e0","sha512":"706570f6622d8f3257ceacceda6db939437fca0b9352f3b4a0aa3c453a121438288527a81bc5bb1c44acdca92fbccbe4a870b136893a5780c5394a3b3bda7344","ssdeep":"1536:dkwgMZnHquPnlh4FGLx8TAy/w696GMMrZZXbX1W:ZFPlh4YLx8TAy/w696GfXbX1W","tlshash":"d473c62250f510735443ecc87b716f5b6aa1e107e90a8a287aec16c88ffede6cd5365c","dom_hash":"domhash40eb5254ababea312aef89b7f1b10db5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"elitecu.com","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-12T09:33:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"widget.getgist.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-03-12","domain_rank":1587279,"first_seen":"2019-05-04T19:46:52Z","last_seen":"2026-05-31T11:59:56.965527Z","alert_count":0,"request_count":1,"received_data":353,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-31T22:18:21.058888Z","alert_count":0,"request_count":7,"received_data":262759,"sent_data":3875,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-05-31T23:27:05.834013Z","alert_count":0,"request_count":1,"received_data":70237,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"chat.convertfox.com","ip":{"addr":"167.235.216.1","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2016-01-26","domain_rank":1504807,"first_seen":"2017-08-16T13:24:15Z","last_seen":"2026-06-04T09:46:20.017675Z","alert_count":0,"request_count":1,"received_data":284,"sent_data":616,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-31T22:42:17.707694Z","alert_count":0,"request_count":3,"received_data":216371,"sent_data":1503,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"elitecu.com","ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":27,"request_count":27,"received_data":1160481,"sent_data":31489,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.getgist.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-03-12","domain_rank":860069,"first_seen":"2023-04-06T09:24:22Z","last_seen":"2026-06-05T06:04:46.538911Z","alert_count":0,"request_count":6,"received_data":46846,"sent_data":3040,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-31T22:21:48.210615Z","alert_count":0,"request_count":2,"received_data":17672,"sent_data":1184,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"events.getgist.com","ip":{"addr":"167.235.218.174","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2016-03-12","domain_rank":1818878,"first_seen":"2023-05-31T22:14:52Z","last_seen":"2026-05-31T16:33:56.124099Z","alert_count":0,"request_count":2,"received_data":678,"sent_data":1052,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gist-widget.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":2076792,"first_seen":"2023-06-09T05:17:25Z","last_seen":"2026-05-31T16:33:55.882113Z","alert_count":0,"request_count":3,"received_data":1407932,"sent_data":1380,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"cdn-cgi","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-10-17T14:18:32.470193Z","last_seen":"2026-05-30T20:43:38.410666Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":980,"comment":"","tags":null,"fingerprints":null},{"fqdn":"data.getgist.com","ip":{"addr":"167.235.218.174","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2016-03-12","domain_rank":1798311,"first_seen":"2018-12-02T13:00:54Z","last_seen":"2026-05-31T16:33:55.799425Z","alert_count":0,"request_count":2,"received_data":2698,"sent_data":1050,"comment":"","tags":null,"fingerprints":[{"name":"Phusion Passenger:6.0.18","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-06-03T16:00:59.358639Z","alert_count":0,"request_count":13,"received_data":325097,"sent_data":7751,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/contact-form-script.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"250bc40cc9bf0311ff49a31cb3fdd96f","sha1":"75b049495fd4ad8f8dba66abef363b74fa50b326","sha256":"01f88dcee3ea695865770808ba43f18d9b0a0db51696c39d69ea2a607c108e78","sha512":"7ba4df3992f99eb5cf3fc7ac3e4977218b0fe6d57912885197931701943e4a0d33d36971b70b656090d84bce351fccee973727bff9d85294c9dcc7d1c5350487","ssdeep":"","tlshash":"1811d012341429d9033b2bf9700e3602b3711a34c9bde91520b0b9cdbf78d9836a3316","size":895,"data":"","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-09T07:02:23.518003Z","times_seen":960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/aos.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","size":14243,"data":"","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-06-10T07:22:12.506278Z","times_seen":9648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"55a658fe4929bf4d82a551e170c5bf51","sha1":"76ad5e9adba3b4bf03cec592f55035c79e9596bd","sha256":"64f474a85f267ab57a1b53c8eeee8161fc93d21790e918678c02e78b3ae9d846","sha512":"7f834c11f80d96a2ab88f2dd5fa2bfaa069789f4b0e578f7957790cc20d15484ca451c836e56189b16ff5c1582ae332de034c10d94c5e26b382c75b63b06c607","ssdeep":"","tlshash":"24c0924bf5b0554b049ae10ad38b488c7278850a463a4e2a3791a0ca3eb3f9d174e1e8","size":136,"data":"","first_seen":"2026-06-07T09:33:55.849153Z","last_seen":"2026-06-07T09:35:34.016481Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e4197b9a2a2e69e1292e608cd567b40","sha1":"f81a2c94aaf8b49bd16584773a7f35d1aa982092","sha256":"a0d9a42cd552ddb18e4b83f168e4f91bc5193027893f2e47fcd09ccc72565c11","sha512":"2bee6040b763a769f671533c65718c8157982374dad6d968c37486b6122fc17ab1c11de62d21fd3600c168fe81c256db583e3d7bef35e4ba61dbe5df83fff79a","ssdeep":"","tlshash":"b2119b39961039344c136277abaebe896cbac1074545c8093a4ce60e3fd1de1eb679e9","size":1070,"data":"","first_seen":"2026-06-07T09:33:55.850252Z","last_seen":"2026-06-07T09:35:34.017217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0188cb52c4f0f08aea1c0a263f59b41","sha1":"8753572cac9d915a5d4eae5d20f26cc864b48b5b","sha256":"f835deec699471742e5490ec4a1f761adfde17fe5150260094847e327b39b4c2","sha512":"62b1c4cfcedb6752dd5463acc701b0cdd1d04c02dac86e2ed7dcffc9b8864300e5eb624cfe86a244480ed78ee3f0a8d47638064534b18a4fc06fac641b08f4b1","ssdeep":"","tlshash":"41f0816d77eed03b96c912e73d3f4a4dd12f141c0505cc41cd64c8213865dc501966ac","size":557,"data":"","first_seen":"2026-06-07T09:33:55.851464Z","last_seen":"2026-06-07T09:35:34.018034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gist-widget.b-cdn.net/favicon/favicon-c9aae08cce.min.js","fqdn":"gist-widget.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9aae08cce57fe0fac0ef2e55f359c0e","sha1":"0e61676e730959a393c8b64512bef85196817c1e","sha256":"e76434336965931331b75225d203d699ace53d801894122406e63e9d53c020b2","sha512":"044f6c365c83dca1f39283b39f1fdc48a6fbef2283156b13c26bbfff5b22b3aff6878f891d34ea8d2e7dcefab45fff7266a3bf33fe663f498585835984aa910c","ssdeep":"192:p1LdsiriQqHCWE+25mSj2jEyGmSj2j619XERipqNvDAU0YwPCkkfDLSoG+FAeUr/:p1Ld/oXP9Sj2jEy9Sj2j619XIipqNvDE","tlshash":"8212b7e8711aa2db2d4b257b341eb118b13351152f1bc464a501f8ac2cb8f4a9739b7f","size":9193,"data":"","first_seen":"2025-08-12T16:47:35.917Z","last_seen":"2026-06-10T04:27:39.342931Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","size":69597,"data":"","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-06-10T06:25:03.883102Z","times_seen":79058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/popper.js@1.12.9/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","size":19188,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-06-10T06:29:55.755589Z","times_seen":108770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/owl.carousel.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44348,"data":"","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-06-10T07:14:22.346633Z","times_seen":11898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/jquery.appear.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80d1c754b36f693ea7de8d608acc4afe","sha1":"10736302703a32d7682359a36226f341c8982daf","sha256":"b57506318dccce1f06d2545f2db1bead5d46acb07df071aee7651d2c3013105d","sha512":"53f2b2c87a37679c54ae6e4adec6ab5e38aba31bf9ad51c69ada851d85d3b6e9d5cb3a770986d2584203d4f55fe6f03acbc0314afd99d536d70fb020847d68c2","ssdeep":"","tlshash":"0e21a8ca38c6bce583fb311c562f72421161913f574299a31ceadd7c35a6c913c13e68","size":1198,"data":"","first_seen":"2023-03-07T17:48:49Z","last_seen":"2026-06-09T07:02:23.537492Z","times_seen":1005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/tweenmax.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ebfc60317f7c7439949d5728c2e7905","sha1":"6bdc6e3e92cf447dc3922977d923b2901e36640d","sha256":"db1047e16f9ed072dbc343334fb2dde5f14c486676495bed4e592d75dc73522a","sha512":"dbf9d706a05c8b5215e73702744e075522cd0641e1a9a6566004866681eb6d3e55e5d8cf47829a2c6bb85f9a64d25555efe9b65c8c6614332177753583d142c7","ssdeep":"3072:wAcorGC89zpEosfUfR3Hb9jLYQz3Xk9kqJaR1MfgO4553Njx849GXIFsHtsznbFc:wmGC89zpEosfUfR3Hb2Qz3Xk9kR1Mfth","tlshash":"1fe3c54523d1213e8547f2629d7fcc46b33a8d68a385c85e790c94fc68189748bbeebd","size":144259,"data":"","first_seen":"2023-03-10T21:06:35Z","last_seen":"2026-06-09T07:02:23.453023Z","times_seen":935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/main.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c36261f13ab72adcc6d121b42ecf7527","sha1":"c3797740ed1bcf47c268153320a1d04cec5d014c","sha256":"087aa918d5cd7d8340a2facc168e57245932b0a5f668f6249a45727b7868da1c","sha512":"a61e110a84815d8b4cb3bd2158daad9f9e12a20c95244c7d099b8f714efa5aa4ce48b72d699e4a08e6fdb7712bab17c7521586f52e18d683585df2f4c530c729","ssdeep":"48:YcKnGmRenN89Di9ooisW9ooiEM//PPBlLMeBlLqPBebfH0Yujmwm8Q+03iMbq1x5:YGOZ7W3vTLMyLqk9+0DeLfa+TBdD/","tlshash":"56b1864e712030ab94ef331598df6a44bf3b1910d700e999e2b641797d6890fbcb3a6d","size":5498,"data":"","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-09T07:02:23.471667Z","times_seen":853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.0.0/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","size":48944,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-06-10T05:35:57.926744Z","times_seen":108154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/jquery.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89503,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-10T06:14:12.899072Z","times_seen":19701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/odometer.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","size":10264,"data":"","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-06-10T07:22:03.052687Z","times_seen":2244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/fancybox.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5903cd4e4bdc6c28ece32e469b887a8a","sha1":"825baf2b74a47eccb7b3f439fe58da710b84a2c4","sha256":"c563abe9b3e16a2461415597e352e306678e093e2078d6f3b9618d902b1ad2c7","sha512":"9562ef7d089c8ebd39a3978cdac3266643a4a184ebb122598b9991b8c9dbbcd61e4aae736bc2e1a84ce6edd97d6f671fb366ebc802b9a8170cc82d510ffbd3b9","ssdeep":"1536:FUtGulsqqQzeFuouppK0WFVnsQrNz7M4HJ3t5oSKN1fQq58cTJ7PBTf:cGasqqQzeFuoubK0WrNz7M4pd8qq58cH","tlshash":"0663f89fb610702582bb0594a30f560ed1377116f10284fa78bcd4d55ae4fc922ebbfa","size":68446,"data":"","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-09T07:02:23.496541Z","times_seen":997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"55a658fe4929bf4d82a551e170c5bf51","sha1":"76ad5e9adba3b4bf03cec592f55035c79e9596bd","sha256":"64f474a85f267ab57a1b53c8eeee8161fc93d21790e918678c02e78b3ae9d846","sha512":"7f834c11f80d96a2ab88f2dd5fa2bfaa069789f4b0e578f7957790cc20d15484ca451c836e56189b16ff5c1582ae332de034c10d94c5e26b382c75b63b06c607","ssdeep":"","tlshash":"24c0924bf5b0554b049ae10ad38b488c7278850a463a4e2a3791a0ca3eb3f9d174e1e8","size":136,"data":"","first_seen":"2026-06-07T09:33:55.849153Z","last_seen":"2026-06-07T09:35:34.016481Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e4197b9a2a2e69e1292e608cd567b40","sha1":"f81a2c94aaf8b49bd16584773a7f35d1aa982092","sha256":"a0d9a42cd552ddb18e4b83f168e4f91bc5193027893f2e47fcd09ccc72565c11","sha512":"2bee6040b763a769f671533c65718c8157982374dad6d968c37486b6122fc17ab1c11de62d21fd3600c168fe81c256db583e3d7bef35e4ba61dbe5df83fff79a","ssdeep":"","tlshash":"b2119b39961039344c136277abaebe896cbac1074545c8093a4ce60e3fd1de1eb679e9","size":1070,"data":"","first_seen":"2026-06-07T09:33:55.850252Z","last_seen":"2026-06-07T09:35:34.017217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0188cb52c4f0f08aea1c0a263f59b41","sha1":"8753572cac9d915a5d4eae5d20f26cc864b48b5b","sha256":"f835deec699471742e5490ec4a1f761adfde17fe5150260094847e327b39b4c2","sha512":"62b1c4cfcedb6752dd5463acc701b0cdd1d04c02dac86e2ed7dcffc9b8864300e5eb624cfe86a244480ed78ee3f0a8d47638064534b18a4fc06fac641b08f4b1","ssdeep":"","tlshash":"41f0816d77eed03b96c912e73d3f4a4dd12f141c0505cc41cd64c8213865dc501966ac","size":557,"data":"","first_seen":"2026-06-07T09:33:55.851464Z","last_seen":"2026-06-07T09:35:34.018034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.getgist.com/","fqdn":"widget.getgist.com","domain":"getgist.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"87f9a162375f12feb75de0e6a2935896","sha1":"1cb1081e1ba92f5b642e55dc81554d2b302f29f5","sha256":"88d33be64d02963d4850a3d882ea96fdc5c802546913d34e65c59cd261af3a68","sha512":"6ba55c938957971501e3953e4082ff7aab397a831be8c1b9e24b87228c46186888c01418ac0cb7f99acdcc20db2cbe4e521341407fc0d154d786bbd5f7c27809","ssdeep":"1536:kHE18B9NMgxx5woYkhN3LOXdTvhiFMD45ahTCfhy2LwbEeZ89r5Q4YTEC1hSIA41:JQuse4yOyYaXWd516AX1qtzycH","tlshash":"0d040aa5bda4137707ef41fe24fa5308273d813da981049024a5e8f41afad86739bf9d","size":189034,"data":"","first_seen":"2025-12-08T08:52:49.458051Z","last_seen":"2026-06-10T05:52:27.518284Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gist-widget.b-cdn.net/messenger/bundle-a293f545fc9471eb870b.min.js","fqdn":"gist-widget.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0021bfe14d71d3343df2206e8471e510","sha1":"849f78fe7fa41e74dd298804ae62d7e49051560d","sha256":"82360cbb7da349e5df18774d0b368f3994d772a82f68afaa56255a93835947b7","sha512":"cd2932d33098839110f18341f9fbe819be4fe9e761d6dd595e46f9afe1cdc4e080e85fb67b2a8fe68074bad3bf37978fb6a9b64a0b7e52bb3e0bd787465b0dc5","ssdeep":"6144:wooA4ycm9JX0DCjrV1W3d1vHT7nHIy3WcN5aFH1VZX0QcysB2P:wooQcm9JX0DC1WPHveSTya2P","tlshash":"fd452988f591b0b447a327a542ff1106f33d7915a51ad0a0f76cc8e26fb84dd9263f2a","size":1207795,"data":"","first_seen":"2025-12-08T08:52:49.535832Z","last_seen":"2026-06-10T04:27:39.621284Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78085,"data":"","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-06-10T07:22:03.059577Z","times_seen":2213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/form-validator.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4daf2755cb5c35eb40079a0457af6af","sha1":"98813bbfbc7a3b53b68457778cbf073281af1ecb","sha256":"5932ef8c9c2d361a85d8834d47f508dbd305fda081fb646c18f7fbe76839080a","sha512":"428ab339eaee7b3da2ee135ae6e9a99dd7626693027f1eb33a4239486475dcda6bd40f2dfa40fed5d46728813354f874feb0572f6806ea51c523ef6640825051","ssdeep":"96:HaMWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:HaMW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c9c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","size":6063,"data":"","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-09T07:02:23.509662Z","times_seen":960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/jquery.countdown.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76a923d3d69255c45cd24bf9b100244f","sha1":"eb3c96f9901692f1a03500ea632963a16afdb985","sha256":"8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5","sha512":"b97bed03f0e8868df19d9e2437158b89f06a46827af8876f616c8f42786d145105964e8518d8bad9eece23cd9c7a4767f39861488c5410ab42ffc7e20cde44a4","ssdeep":"96:GBXpuplQHIwbeRFMSiM3jG6Ghdynv/2bBqz2eJxMxHxqxAxixw3xexIxrxAxW7qf:rQHnUpxGhdBqztJxMxHxqxAxixw3xexx","tlshash":"b9b1a5ceb3b213d508e553a201ae1116a27bf15be4d6001cb5fceac87a75c9d606fd78","size":5360,"data":"","first_seen":"2023-03-07T01:28:01Z","last_seen":"2026-06-10T05:39:19.182164Z","times_seen":8905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"55a658fe4929bf4d82a551e170c5bf51","sha1":"76ad5e9adba3b4bf03cec592f55035c79e9596bd","sha256":"64f474a85f267ab57a1b53c8eeee8161fc93d21790e918678c02e78b3ae9d846","sha512":"7f834c11f80d96a2ab88f2dd5fa2bfaa069789f4b0e578f7957790cc20d15484ca451c836e56189b16ff5c1582ae332de034c10d94c5e26b382c75b63b06c607","ssdeep":"","tlshash":"24c0924bf5b0554b049ae10ad38b488c7278850a463a4e2a3791a0ca3eb3f9d174e1e8","size":136,"data":"","first_seen":"2026-06-07T09:33:55.849153Z","last_seen":"2026-06-07T09:35:34.016481Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e4197b9a2a2e69e1292e608cd567b40","sha1":"f81a2c94aaf8b49bd16584773a7f35d1aa982092","sha256":"a0d9a42cd552ddb18e4b83f168e4f91bc5193027893f2e47fcd09ccc72565c11","sha512":"2bee6040b763a769f671533c65718c8157982374dad6d968c37486b6122fc17ab1c11de62d21fd3600c168fe81c256db583e3d7bef35e4ba61dbe5df83fff79a","ssdeep":"","tlshash":"b2119b39961039344c136277abaebe896cbac1074545c8093a4ce60e3fd1de1eb679e9","size":1070,"data":"","first_seen":"2026-06-07T09:33:55.850252Z","last_seen":"2026-06-07T09:35:34.017217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0188cb52c4f0f08aea1c0a263f59b41","sha1":"8753572cac9d915a5d4eae5d20f26cc864b48b5b","sha256":"f835deec699471742e5490ec4a1f761adfde17fe5150260094847e327b39b4c2","sha512":"62b1c4cfcedb6752dd5463acc701b0cdd1d04c02dac86e2ed7dcffc9b8864300e5eb624cfe86a244480ed78ee3f0a8d47638064534b18a4fc06fac641b08f4b1","ssdeep":"","tlshash":"41f0816d77eed03b96c912e73d3f4a4dd12f141c0505cc41cd64c8213865dc501966ac","size":557,"data":"","first_seen":"2026-06-07T09:33:55.851464Z","last_seen":"2026-06-07T09:35:34.018034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"elitecu.com/storage/app/public/photos/uwB9eTJfoJMihk9ZS2fWzXehmpO3Inrz2D9X7124.png","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:24.078Z","timestamp":1780824804078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /storage/app/public/photos/uwB9eTJfoJMihk9ZS2fWzXehmpO3Inrz2D9X7124.png HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 10 May 2026 09:19:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3828\r\ndate: Sun, 07 Jun 2026 09:33:24 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3828,"size_decoded":4111,"mime_type":"image/png","magic":"ASCII text, with very long lines (5106), with no line terminators","md5":"0a7ee501ba2285710c6db725e3b35451","sha1":"c9045b9b6c1b660f9bf5f3670a73f5881d673632","sha256":"68ad3d0d9eef49d0622bad3baa8023239dad994304764e00ac02d46ce09f8e52","sha512":"8ce6d0bdf2ab0736f689d626282607fb8b278f2f750a36898c3014a36fa763a6f0eeeccaaa7207b94fb9d3fd6852b71f77ffc89d73d9c9184adcf4d6d421edc8","ssdeep":"96:7wMSEPXXDvVQFH/C8W+DFHgatfgqn+mLN5RDUbADQx0cJ8poUQPpfSZ7/E:7wiXD2Zq8fDFHgat4ChLN5TMYcpfSa","tlshash":"cdb18d792aea7b136f70c74be21748173ebf2ebe16a51f827d5621073013b413444294","first_seen":"2026-06-07T09:33:55.796057Z","last_seen":"2026-06-07T09:35:33.975957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data.getgist.com/v1/contacts","fqdn":"data.getgist.com","domain":"getgist.com","tld":"com"},"ip":{"addr":"167.235.218.174","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:24.597Z","timestamp":1780824804597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getgist.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 08:53:21 GMT","end":"Sun, 28 Jun 2026 08:53:20 GMT"},"fingerprint":{"sha1":"8E:A0:3B:A9:0C:7A:04:37:1E:83:22:C1:B4:42:DD:B7:70:76:0A:71","sha256":"5D:C1:6E:B8:A8:D9:8F:7E:2B:02:77:8C:A0:6A:66:10:3A:AB:E8:75:75:DC:0C:9A:1F:C6:6A:1B:D0:F2:D6:D4"}}},"request":{"raw":"OPTIONS /v1/contacts HTTP/1.1\r\nHost: data.getgist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://elitecu.com/\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:24 GMT\r\ncontent-type: text/plain\r\ncontent-length: 0\r\nstatus: 200 OK\r\naccess-control-allow-origin: https://elitecu.com\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST, OPTIONS\r\nx-powered-by: Phusion Passenger(R) 6.0.18\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Phusion Passenger:6.0.18","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":452,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"9d4568c009d203ab10e33ea9953a0264","sha1":"dd29ecf524b030a65261e3059c48ab9e1ecb2585","sha256":"12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126","sha512":"64d24560970ca14d349bea0e7d2526d4754bf3283568ab4dd602bd79eb454dc3657d5bb6f9a30c90ea98d9600ebd0fb45d582f4cae3f8e3c50b0e8fb18059892","ssdeep":"","tlshash":"c710000000000000000000000000000030000000000000000000000000000000000000","first_seen":"2023-03-09T21:44:55Z","last_seen":"2026-06-10T06:59:38.362894Z","times_seen":23721,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":37,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.getgist.com/translation_files/en_translation.json","fqdn":"cdn.getgist.com","domain":"getgist.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:25.113Z","timestamp":1780824805113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.getgist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 22:06:38 GMT","end":"Sun, 23 Aug 2026 22:06:37 GMT"},"fingerprint":{"sha1":"68:34:A3:C1:D8:B6:A2:AE:E4:20:81:F9:A5:A6:D7:53:CF:BC:CD:C9","sha256":"30:52:03:1B:EB:60:C4:11:5F:3F:93:99:D2:D4:92:70:A0:64:59:CE:6D:BD:E7:2A:61:FA:E3:7D:94:B2:29:DA"}}},"request":{"raw":"GET /translation_files/en_translation.json HTTP/1.1\r\nHost: cdn.getgist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:25 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1321525\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: \"0106a3103cfaa2baf9d4b03f56b21316\"\r\nlast-modified: Thu, 29 May 2025 13:13:02 GMT\r\nx-amz-id-2: S7zlxpNTrry0RSsgCimhVXfvK26vfQHneozOWGzML7uAe3tfy0O9RKpLuNUeUaYmN74/79UYjq0=\r\nx-amz-request-id: CT4D2JAYR2Y500MT\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/26/2025 11:35:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 74ebbd9adbd6f8021e377887b8233489\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4032,"size_decoded":2892,"mime_type":"text/xml","magic":"Unicode text, UTF-8 text, with very long lines (4469), with no line terminators","md5":"19bc8d058998ece4cf8191af9a5977da","sha1":"7ba1f3e2e521f18c1f3fa9f5c362ea517e66d673","sha256":"afb889b7bb8064d6db7d6c2919cfc9ecc41765e1202278af63cb0178f31daab5","sha512":"a93b8f4d6511d60254a00f0a3e151be7c8bf2610bd8e73a913777a35d980f780743adb7e0a68715702f8505ef9f125b887306b65c3c2ab7eb9cb58808275988d","ssdeep":"96:yVFQ6i54uyZeQv4yyL/4epblIlGIuRQM2dnXkLFpZxeUDaCbvsfKaI00q/UnG:yVp9ujwByL/F4lB0xuhP7F","tlshash":"c991bd9ee858d96bc1931f8b617f7d72a6ae90780bc110ac691cc0594171c3cbbfb786","first_seen":"2026-06-07T09:33:55.79803Z","last_seen":"2026-06-07T09:35:33.996003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/contact-form-script.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.989Z","timestamp":1780824796989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/js/contact-form-script.js HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 425\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":895,"size_decoded":672,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (947), with no line terminators","md5":"f0099005b9a4b2e37c8b0b0caf78320b","sha1":"7147b89cdef07f439b66bd1719b2d609d2a47b8b","sha256":"4da2e1dafaaf3997d3e5094450794fc9f6da5daca4f94cd7f4155cc69d9f3e8f","sha512":"a5b8fbb3456000ad4837dec93f69ab5a677d86833cdab3f3764742be938bf60e083d0aa788a5832a749de9f07c760dee76300d3cfd79c03ee57ffa0b2458737f","ssdeep":"","tlshash":"af110b027a046189072726b2701e213a93301a10c46da90631b2e2cceb79fa83bf330e","first_seen":"2026-06-03T19:42:33.50177Z","last_seen":"2026-06-07T09:35:34.008329Z","times_seen":4,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1560520653-9e0e4c89eb11?w=700\u0026q=80\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.015Z","timestamp":1780824797015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1560520653-9e0e4c89eb11?w=700\u0026q=80\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 5274859f828d429db73845ea2f8a7a494d999da7\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 29 May 2026 12:37:23 GMT\r\nserver: imgix\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nage: 766560\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230187-FRA, cache-bma-essb1270045-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 20453\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":20453,"size_decoded":21083,"mime_type":"image/avif","magic":"ASCII text, with very long lines (27272), with no line terminators","md5":"58f1d2b5c29bd2ae1438eee4c6d080da","sha1":"e4726c7683cb69ab2fa41b1d1cd78a9e40339513","sha256":"77bae9550184e7df669e3ddb6ca936182b783b46fcda0c1b311b1cfcdfd26d3b","sha512":"f1a6b24258c29b4fdb5b5743395c22512293611bc14b7bd2fc820a009e3e45fea035ff804bc768c95aaf221c3a36584ab830ef8e239fe49ff7d444c9418960cc","ssdeep":"384:tpQjwBuC5rjUukbpuGQwPlALY5mMSd/WRvwZ7rzD0yDGJOOLJ89fzB7pk5jcFjK5:BIgjLkb6OZ5VScYPPpOLu9t1Fj8KUe9S","tlshash":"28c2e1b48e6cfdd8ed3a4f28ad40af8e9ccd5ea73774d44d9a486876e013441e80ce59","first_seen":"2026-06-07T09:33:55.800107Z","last_seen":"2026-06-07T09:35:33.989344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6636,"timings":{"blocked":6594,"dns":0,"connect":9,"send":0,"wait":10,"receive":4,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Cormorant+Garant:ital,wght@0,400;0,600;0,700;1,400;1,600\u0026family=Outfit:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.978Z","timestamp":1780824796978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /css2?family=Cormorant+Garant:ital,wght@0,400;0,600;0,700;1,400;1,600\u0026family=Outfit:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 07 Jun 2026 09:33:17 GMT\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4235,"size_decoded":1133,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4327), with no line terminators","md5":"6df2f4e231fe9990260e7e6b7eae77d9","sha1":"f694feed9b896ac60eb11a3bfbf7ed840b277252","sha256":"cb89c5192fd2f438b26158ff44ac690ecfa8d6306847d573d64fdc895a44eb65","sha512":"71a7bc5b62a6e212e2c976cd5912dfe41f6a67d8a653dbb963f6bbad713b952d190e747fdd634aac8018d09df5c7a2422316cd3b4a70b0577ba12bdb4e7e7685","ssdeep":"96:mJc+u7NYJc+uUNlJc+u1NiJc+uWNnJc+uPNc:mbLzjd","tlshash":"6291eb91041ba144da870fd223ca3a32ff0f7340a4606231affd189b6cabc5a935774c","first_seen":"2026-06-06T18:31:55.981083Z","last_seen":"2026-06-07T17:26:44.920612Z","times_seen":6,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":24,"connect":16,"send":0,"wait":33,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1507003211169-0a1dd7228f2d?w=100\u0026q=80\u0026auto=format\u0026fit=crop\u0026facepad=3\u0026faces=1","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.025Z","timestamp":1780824797025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1507003211169-0a1dd7228f2d?w=100\u0026q=80\u0026auto=format\u0026fit=crop\u0026facepad=3\u0026faces=1 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 806aa92b76a1a02521920f4c30314463b41e8615\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 05 Jun 2026 12:20:10 GMT\r\nserver: imgix\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nage: 162793\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230224-FRA, cache-bma-essb1270045-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 5372\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5372,"size_decoded":6001,"mime_type":"image/avif","magic":"ASCII text, with very long lines (7166), with no line terminators","md5":"f0d17dfea29ade029864461ec74679f0","sha1":"998397a8a15f23efa3f2338eb26acca111ac02dc","sha256":"5667f1c5a7c2caeeff2fbaa0b0fa81c365057fc82c3bb1890c57f451e4684341","sha512":"a1df51dfba51e370ff669df2df0534904e6b877f615bc82927e8a4d13ea04d74d2003700387ee6cdc68eb29d9060d4837644e21b5e40f35b2e437feedbeb3534","ssdeep":"192:vM4kszMWptY9LcNWO84ijXmC2oVCncSyJXCsqAFo:EpQjwBuC5rpE3SFo","tlshash":"68e17f33871ff5caba1a890c5e60bd27ec88dc47ab4df40a9dd06cd558f25416e4449c","first_seen":"2026-06-07T09:33:55.802564Z","last_seen":"2026-06-07T09:35:33.990008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6634,"timings":{"blocked":6605,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1556157382-97eda2d62296?w=100\u0026q=80\u0026auto=format\u0026fit=crop\u0026facepad=3\u0026faces=1","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.027Z","timestamp":1780824797027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1556157382-97eda2d62296?w=100\u0026q=80\u0026auto=format\u0026fit=crop\u0026facepad=3\u0026faces=1 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 6387\r\nx-imgix-id: de4cb8af21ca5c0c8a7c3cb12ff3b4eb5ca6aa48\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 06 Jun 2026 11:00:04 GMT\r\nserver: imgix\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nage: 81199\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230221-FRA, cache-bma-essb1270040-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6387,"size_decoded":6995,"mime_type":"image/avif","magic":"ASCII text, with very long lines (8518), with no line terminators","md5":"c803614e53ca40d555e6d61e5f77facc","sha1":"048600145106ceaa1f4cae9f3ab5150818965ce3","sha256":"5531a8397903381e8f94b8d5f0f4468cb755c61945103ccfbfb6ee90538fb815","sha512":"fda88ea487468d3caa73b993973b0388d76c7cafba64a16e7970247c79bcd8f01fcb46cb1a52bba8ae0065d0f9210374f43b78794bdaed65a1805fe60ce8dd48","ssdeep":"192:vi4kszMWptY9LcNWO84ijXmCJ92iUwwdeK5dHe5b7AK49:qpQjwBuC5rJX7C5dHyG9","tlshash":"b4027cb3071b70c69e26da281c10ad6bcecc98277b48b45f9cd96cd299e56c29d44cac","first_seen":"2026-06-07T09:33:55.803544Z","last_seen":"2026-06-07T09:35:33.980111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6852,"timings":{"blocked":6575,"dns":0,"connect":10,"send":0,"wait":11,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.getgist.com/widget/settings/project_ya99srdd.txt","fqdn":"cdn.getgist.com","domain":"getgist.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:24.152Z","timestamp":1780824804152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.getgist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 22:06:38 GMT","end":"Sun, 23 Aug 2026 22:06:37 GMT"},"fingerprint":{"sha1":"68:34:A3:C1:D8:B6:A2:AE:E4:20:81:F9:A5:A6:D7:53:CF:BC:CD:C9","sha256":"30:52:03:1B:EB:60:C4:11:5F:3F:93:99:D2:D4:92:70:A0:64:59:CE:6D:BD:E7:2A:61:FA:E3:7D:94:B2:29:DA"}}},"request":{"raw":"GET /widget/settings/project_ya99srdd.txt HTTP/1.1\r\nHost: cdn.getgist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:24 GMT\r\ncontent-type: text/plain\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1321525\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=0\r\netag: W/\"f7db7e52e21723ecb93bfdb971ffa5d3\"\r\nlast-modified: Mon, 11 May 2026 12:41:28 GMT\r\nx-amz-id-2: ENvSLzeFT1B4/Em2ScNnE2ol0aSwDpFbSlW1coF0n+XCYjb0CHiXIpk4mFcUB7aN/cP57YLxvVfAi3u9uwIYcNpBrlwwly8X\r\nx-amz-request-id: ZE9HKCHGMZ8R4ZXW\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/07/2026 09:33:24\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 13e91174b5db2761ddbe98744fe4fb6c\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5435,"size_decoded":3254,"mime_type":"text/plain","magic":"Unicode text, UTF-8 text, with very long lines (5983), with no line terminators","md5":"c1b570d3ebe4d71d7eee9755eb682afd","sha1":"d3a6c46ad7b263091bdcf452f0dd95db7c3cb663","sha256":"eec9b935f1c8476f4e954e3880e6fc02cb8f99da723d626d821b90597e2e1e19","sha512":"b560f0c7f6bb56cb210b6eff2fc39065fc1533a67b6796f98fb5d58581b113adc907c56033601dcc425a6cbc36b13bad915a50ea6425682ab71bdee59e22bbda","ssdeep":"96:4G9eEbQXxvAIYUGQ/8UAWO3pFGsQ1rt4E7nQdRQ2SVGiuejxHQQDIHWkik6OCq1u:/MdIFUx8UF2Si8GNe92HWkj6CacgYgv9","tlshash":"56c15469cc08e85be0c3ce2ab3b97f378594455e58917c385658d93d02e20bebf63d52","first_seen":"2026-06-07T09:33:55.804769Z","last_seen":"2026-06-07T09:35:33.987419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":0,"dns":25,"connect":1,"send":0,"wait":364,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.getgist.com/audios/newConversation.mp3","fqdn":"cdn.getgist.com","domain":"getgist.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:24.996Z","timestamp":1780824804996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.getgist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 22:06:38 GMT","end":"Sun, 23 Aug 2026 22:06:37 GMT"},"fingerprint":{"sha1":"68:34:A3:C1:D8:B6:A2:AE:E4:20:81:F9:A5:A6:D7:53:CF:BC:CD:C9","sha256":"30:52:03:1B:EB:60:C4:11:5F:3F:93:99:D2:D4:92:70:A0:64:59:CE:6D:BD:E7:2A:61:FA:E3:7D:94:B2:29:DA"}}},"request":{"raw":"GET /audios/newConversation.mp3 HTTP/1.1\r\nHost: cdn.getgist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Sun, 07 Jun 2026 09:33:25 GMT\r\ncontent-type: audio/mp3\r\ncontent-length: 5031\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1321525\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=0\r\netag: \"cdaee4ceec32d333f7d7066e16506e70\"\r\nlast-modified: Tue, 03 Mar 2020 08:32:41 GMT\r\nx-amz-id-2: DucsAfhVyw7ljdrePkUJOm/D+F5Xbvn+j2COCA2f+kIIpigbqkp0y3qyLpDTMKDYQuv9SZjdWsI=\r\nx-amz-request-id: PT61Q4MG9S0XP46W\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/26/2025 11:26:18\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ca9075b6a73af715271f2f9eb7544205\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-range: bytes 0-5030/5031\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5031,"size_decoded":5746,"mime_type":"audio/mpeg","magic":"ASCII text, with very long lines (6710), with no line terminators","md5":"faa8b36886dff0092f785064db3be298","sha1":"2b8afd79a028e94927b7aa93e64d0dbd872c20ee","sha256":"59fe6f73f40203a54c2abdf8ed57f6fa1a68f6b2db1523c2c66251b1db30145f","sha512":"fe98700068d978b3adc26a93764a77eaffe396b4b23ada66d16b7e4d4b786d5c54699c0edda6dfe0346d6cfbffd80da634c743eba41b15cfdcbbcfed74ca4377","ssdeep":"192:TAjJjaKk2RpsDCS/S9dLfekt1QjhGUs0Onw45G:TAdjaKk2jaC79dLfe4QjgUQnLs","tlshash":"15d1ad7aad368be9401f12d8853e208d6fcb10e7fb0b80ea939134c711a6072b6a2904","first_seen":"2026-06-07T09:17:10.118065Z","last_seen":"2026-06-07T09:35:33.970164Z","times_seen":3,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":18,"connect":13,"send":0,"wait":2,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-07T09:33:15.672Z","timestamp":1780824795672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.1.33\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; expires=Sat, 29-Aug-2026 17:33:16 GMT; Max-Age=7200000; path=/; samesite=lax; secure\necu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D; expires=Sat, 29-Aug-2026 17:33:16 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\ncontent-length: 14850\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Sun, 07 Jun 2026 09:33:16 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74496,"size_decoded":16202,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"7ab8e7d3d0a43c3832a6ba78d037c5f9","sha1":"837b7dd30e3569c8e8573469d8f93d70916635a6","sha256":"7a9498cd04398b2871c384465ff2da7ece4148252a6f25a4af3675081a519edd","sha512":"8f1d29b18c9fe9b478866a65a4427a1122c0a88d764dc6a0b73944f1a5742526637aa4cc78f04ec1323211af57b5c5835d7ed2bf83d1baa9942dc4c157f826a8","ssdeep":"768:Bz4IjN1GtW57zSh1Su3otSuWCaHEAFegmjg:tKchuXSAiNaHEAF9og","tlshash":"e473722251c020365433de98af729f9efea19103da06861876ed27cb4ffed55cd13a98","first_seen":"2026-06-07T09:33:55.8066Z","last_seen":"2026-06-07T09:35:33.991183Z","times_seen":2,"resource_available":true,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":223,"connect":88,"send":0,"wait":350,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/odometer.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.993Z","timestamp":1780824796993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/js/odometer.min.js HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3453\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10264,"size_decoded":3701,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10241), with CRLF line terminators","md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-06-10T07:22:03.052687Z","times_seen":2244,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1554224155-6726b3ff858f?w=400\u0026q=80\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.016Z","timestamp":1780824797016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1554224155-6726b3ff858f?w=400\u0026q=80\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 6f378f65cc1a7430658d0601d24a2781597ba0c3\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 21 May 2026 09:42:55 GMT\r\nserver: imgix\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nage: 1468228\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220089-FRA, cache-bma-essb1270045-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12876\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12876,"size_decoded":13507,"mime_type":"image/avif","magic":"ASCII text, with very long lines (17168), with no line terminators","md5":"bc9785547b6fc6c8909d091c74b40c05","sha1":"baa1343622756a927b41db90c3fd1e40933faf47","sha256":"b2b2b18cc03437b0e992becfebd9e73a2cb1c84954e1f365b95e4e3d28a88a02","sha512":"5dab4fc8352d055f3d4dc0a5c28d33c6561dea8e313af43f5b7895cb9b4e0fcff79fb0e5b788c2a993f1b01c1949f8ef373fe16e0b872741985fbbb09a4845dc","ssdeep":"384:lpQjwBuC5r/9vYkkKd7dVl+N0QJKHIMngHsMlfOpA:ZIgTx1w0sYMlWy","tlshash":"1f72beba5727e1c1ef59bbc70ea47e218d882d236744e0aaced43cf984c1b60cd8085c","first_seen":"2026-06-07T09:33:55.808273Z","last_seen":"2026-06-07T14:31:49.27479Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6648,"timings":{"blocked":6622,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1579621970563-ebec7560ff3e?w=500\u0026q=80\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.032Z","timestamp":1780824797032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1579621970563-ebec7560ff3e?w=500\u0026q=80\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 11361\r\nx-imgix-id: c2382ac32e8f0394d2a4c856c030a3f8a553c4c6\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 26 May 2026 04:32:20 GMT\r\nserver: imgix\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nage: 1054863\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220174-FRA, cache-bma-essb1270040-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11361,"size_decoded":11972,"mime_type":"image/avif","magic":"ASCII text, with very long lines (15148), with no line terminators","md5":"2a538b92feb0e7b97b5a9f0c9646e89f","sha1":"0f88323412c1b2981381950fe9a1781974ef5277","sha256":"12bfca0a5a0b65306aa63f8c81f897728ecc499bc567e59bcbfdc8c35a9d7597","sha512":"adadaed29f6de97f8618672ad60fa401676d7aabb4a07d5e52a574972c6d7890df4c471d02286af678b9742d476a647b88479beb10a40a960e7b6f3ad3264069","ssdeep":"192:PhA4kszMWptY9LcNWO84ijXmCKlajSFXrl1OOmoqKuGu8efkgccmqkaKpLYQPwPV:+pQjwBuC5rKll1OnoqKDu8AkoKsKtNqV","tlshash":"de62d073da0dbce49a67959c2809ac4b3ec46c47bf58106edfb2289361b9350cc154bd","first_seen":"2026-06-07T09:33:55.809633Z","last_seen":"2026-06-07T09:35:34.001262Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6852,"timings":{"blocked":6574,"dns":0,"connect":10,"send":0,"wait":10,"receive":0,"ssl":256},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.getgist.com/","fqdn":"widget.getgist.com","domain":"getgist.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:23.901Z","timestamp":1780824803901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.getgist.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 11:06:06 GMT","end":"Wed, 02 Sep 2026 11:06:05 GMT"},"fingerprint":{"sha1":"27:4C:0B:F1:A8:0E:DD:A4:01:F2:DB:D2:EA:A3:59:FC:EE:C3:85:9D","sha256":"E4:99:AE:A9:38:B2:63:5B:32:16:25:2F:A7:D0:91:48:1D:63:A2:F2:75:90:99:A6:17:B4:07:E0:25:99:33:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: widget.getgist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 166\r\nlocation: https://gist-widget.b-cdn.net/gist-87f9a16237.min.js\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1448292\r\ncdn-requestcountrycode: NO\r\ncache-control: no-cache\r\ncdn-requestid: dc21afe71995ea2c9679c3e03f45d84f\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T07:14:22.229857Z","times_seen":16290217,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":49,"connect":26,"send":0,"wait":3,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"events.getgist.com/event_data","fqdn":"events.getgist.com","domain":"getgist.com","tld":"com"},"ip":{"addr":"167.235.218.174","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:25.007Z","timestamp":1780824805007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getgist.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 08:53:21 GMT","end":"Sun, 28 Jun 2026 08:53:20 GMT"},"fingerprint":{"sha1":"8E:A0:3B:A9:0C:7A:04:37:1E:83:22:C1:B4:42:DD:B7:70:76:0A:71","sha256":"5D:C1:6E:B8:A8:D9:8F:7E:2B:02:77:8C:A0:6A:66:10:3A:AB:E8:75:75:DC:0C:9A:1F:C6:6A:1B:D0:F2:D6:D4"}}},"request":{"raw":"POST /event_data HTTP/1.1\r\nHost: events.getgist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 425\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:25 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1154,"mime_type":"text/xml","magic":"ASCII text, with no line terminators","md5":"9d4568c009d203ab10e33ea9953a0264","sha1":"dd29ecf524b030a65261e3059c48ab9e1ecb2585","sha256":"12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126","sha512":"64d24560970ca14d349bea0e7d2526d4754bf3283568ab4dd602bd79eb454dc3657d5bb6f9a30c90ea98d9600ebd0fb45d582f4cae3f8e3c50b0e8fb18059892","ssdeep":"","tlshash":"c710000000000000000000000000000030000000000000000000000000000000000000","first_seen":"2023-03-09T21:44:55Z","last_seen":"2026-06-10T06:59:38.362894Z","times_seen":23721,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1526304640581-d334cdbbf45e?w=500\u0026q=80\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.033Z","timestamp":1780824797033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1526304640581-d334cdbbf45e?w=500\u0026q=80\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: a1bbb87584aa5f0e44ff7c1f44146ad4e2be557a\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 02 Jun 2026 04:56:46 GMT\r\nserver: imgix\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nage: 448597\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220156-FRA, cache-bma-essb1270045-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 70133\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":70133,"size_decoded":70763,"mime_type":"image/avif","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"187933bb3d4f03ab39b8309661514c5e","sha1":"4394050e57db2de9a4cd11d7e4c7978f139cef07","sha256":"f068f7ad0c9e86bcff53a555747ac20f5cd2fc034425859a3bea2d3a0a517aca","sha512":"9e5c684ecd6defdab37c0aa207385588dc795bb0098d9c10483935dac8e2131640bef6872b4629aae6a8e8329b0db5a530994d21b69a9882da397c38c30b42ab","ssdeep":"1536:rhnJWZ8U56zms1wsxecXFg0m5IP4U4/djMBH2:dnJWx5u7e0hm5IP49oH2","tlshash":"1c9302b39c92189acaf888e8affd5fde7e509d63955009d765dd87e908ec3e8080344d","first_seen":"2026-06-07T09:33:55.81163Z","last_seen":"2026-06-07T09:35:33.984544Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6637,"timings":{"blocked":6603,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/jquery.countdown.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.995Z","timestamp":1780824796995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.countdown.min.js HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2238\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5360,"size_decoded":2486,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5509), with no line terminators","md5":"cfbd3a348354813a73e5a9acb198ed5e","sha1":"b2b036b6e71b9e4f53a778b1267eef306173ed17","sha256":"675f49727c35606245c348f361e4c0f31daf379b73c8789636e7823a7b92e546","sha512":"9d3ae1abf994bf2c158a0cc76e13007174611aa0712b6907dbf8700d69922d3632d90f04bc4554151153ed64008af0585d09db321cd34405dbf5491a8731a9c8","ssdeep":"96:AqyS10HwJ/V51cFMRaiMpjqo7uHxixv/2BBqz24X3HLxMxHxqxAxixw3xexIxrx+:P0H6j1apf7uHnBqzXHLxMxHxqxAxixwO","tlshash":"adb1b6ceb3b2639509e513a202be21166177f18bf4d6012cb4fceaccf665c69206f974","first_seen":"2026-06-03T19:42:33.44531Z","last_seen":"2026-06-07T18:56:50.654234Z","times_seen":13,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/css/style.css","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.973Z","timestamp":1780824796973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/css/style.css HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 13192\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":99243,"size_decoded":13513,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"231181ef0e78afe4c8c369f0b0cb8066","sha1":"3c14c3667faabea86bd4bd4f138100718a8f9c8f","sha256":"a7209c2137b1636de472b042fe4753d31967aff75a81c2869e9d3763bf165e5e","sha512":"1e54b7d227773bacf1bfd3e1f23b5b7216e584a17943b3a559fbd7fc265010fc651523ea3cb1ee9003c6a12a7d5681b1b461f539d16bebfe152aa48e07f5a4da","ssdeep":"3072:+gQgrtgMg7/TXecD1thqi9B1Gr8JZV+UhM3HFCwEdXN1yiZIwfdxgH:+gQgJgMg7/TXecD1thqi9B1Gr8JZV+US","tlshash":"2da3a9619246232ea127c61192cc66d43e38c563e72707feb6163716c7cb7e7226bf09","first_seen":"2023-11-12T08:26:56Z","last_seen":"2026-06-09T07:02:23.495755Z","times_seen":673,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/css/aos.css","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.971Z","timestamp":1780824796971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/css/aos.css HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1539\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26053,"size_decoded":1859,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-06-10T07:22:12.486718Z","times_seen":38373,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/jquery.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.985Z","timestamp":1780824796985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.min.js HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 30268\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89503,"size_decoded":30517,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-10T06:14:12.899072Z","times_seen":19701,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gist-widget.b-cdn.net/favicon/favicon-c9aae08cce.min.js","fqdn":"gist-widget.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:24.588Z","timestamp":1780824804588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /favicon/favicon-c9aae08cce.min.js HTTP/1.1\r\nHost: gist-widget.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:24 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1448292\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: max-age=25600000\r\ncontent-encoding: zstd\r\netag: \"68904e3c-23e9\"\r\nlast-modified: Mon, 04 Aug 2025 06:07:56 GMT\r\ncdn-storageserver: DE-974\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 1069\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:47:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2b7ca5274ba9cb6cea60df48052a6040\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9193,"size_decoded":3950,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9385), with no line terminators","md5":"95077507f974e0b13f424fa7256a8f29","sha1":"d8d488a7532d9a01a01244898814ad7f58f01d0d","sha256":"bfa18dccdc7dbf9f2226ce443028a3ff3295ccb1046dd125bcba40c672d4fe06","sha512":"576671dfa87eb82b7ced32a23c94e571bcaf8a084bf8d0f504bde6782f0dbaf1acaf0da44f39da0aa0e189677d419af9fe2a6a4412b32d3fe838f9b9a37e03b5","ssdeep":"192:JJNW2tiQQHCYu+2TmSj2jEyymSj2jwJ/5CqpqNvDAUcYwzwaGXnHKoG+FAKzyrr:JJN3ZetZjSj2jEypSj2jwJ/5CqpqNvDO","tlshash":"ec12b7e8701ab25b1c4b1436346bb038b63355141e17c4646615f8adacb4faf8639f3f","first_seen":"2026-06-07T09:17:10.149504Z","last_seen":"2026-06-07T09:35:34.006795Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.983Z","timestamp":1780824796983,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T07:14:22.229857Z","times_seen":16290217,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/fonts/remixicondf6ddf6d.woff2?t=1590207869815","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:23.813Z","timestamp":1780824803813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/fonts/remixicondf6ddf6d.woff2?t=1590207869815 HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/temp/custom/assets/css/remixicon.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:23 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 125268\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":125268,"size_decoded":125554,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"66353511923b118bc1ac5f6f15b89ca8","sha1":"b6a01ba1c72df3978cfe837fa9b8fecf4358b092","sha256":"f598ba292f6d0a54740b7bc6fe38156fdd8568083be4d608beff7979886e72dc","sha512":"4caf0679a0053cbbe32a2bfff0fad2d6bb79576792ede469a2f0cf0356ad460f545b9c6ca9efa9194b20ef18720e785416d4b3d3dc3abb6994ac617ff90d91ea","ssdeep":"3072:TxvIpq8wfjW6YdefpCzCaBHckpNx9fzEqM+GIdfkEiEdq:TUqZyYhULBHcAN/If+GIZE","tlshash":"75f3126efefc10b46324811eb57c1a99afb16cf794eb1c533f8db9538a0668023565b0","first_seen":"2026-05-25T21:29:27.742261Z","last_seen":"2026-06-07T16:35:32.219047Z","times_seen":15,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:23.817Z","timestamp":1780824803817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 15:22:17 GMT\r\nexpires: Mon, 31 May 2027 15:22:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583866\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (42812), with no line terminators","md5":"7a0df73efc9768c927712eeca272a27a","sha1":"f154d429f5a18ea445d2dd150aec0151d7235979","sha256":"a826e94621bf2537e60ff443c603bed5b9d1f07cd1b47e9cfd20367e8248e854","sha512":"c54258271438b29a0161045b29e7860422f61223d7c8266a7afc5ce9c0a1e51aa8bd3bf76423f47f2a696ce48f179da78d0eb7d6760f8e2bd74128b7cf8adb96","ssdeep":"768:6loEDkBGsgBRU9gXmadSuu6Sl0PGBS/nw+ckarEZ2/W/o7jo3+T+LDdccLL:6CETUKilmMWxcVr8n/o7EuT+LDuS","tlshash":"7613f134c04d204d98adcfab269e54600afab5fb941ec9e2c9c7479a6a035d40b7fc38","first_seen":"2026-05-25T18:37:21.753984Z","last_seen":"2026-06-07T19:06:40.164325Z","times_seen":143,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":35,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/form-validator.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.988Z","timestamp":1780824796988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/js/form-validator.min.js HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1913\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6063,"size_decoded":2161,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6277), with no line terminators","md5":"13cdad76913cdca883fb919a12a22640","sha1":"82cc4587180f94430a41d1ea76c234fdcda281a3","sha256":"d64ff2732fa65cb4e6727817c8d6369b33218cb109ecd16d46b2c8d40bf02768","sha512":"9725804b31f36bddd037b66061a268aa691ee387039f1117d70e741838af7149746d256ab8b0c7b320f5fc45c4794424af1e6542e6ded6c535c8551d2ee5e488","ssdeep":"192:maM0kMXimUNi3gXu09dL9gwPVJF5kw8lBJ83:mHI3Qn9R9gwPVJF6B0","tlshash":"8ed1220c366722520f52b4f1529bc3db72b9272c9405415439ee88eceaf8ec56be7b35","first_seen":"2026-06-03T19:42:33.470261Z","last_seen":"2026-06-07T09:35:33.983464Z","times_seen":4,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Raleway:wght@200;300;400;500;600;700;800\u0026amp;family=Roboto:wght@300;400;500;700;900\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.171Z","timestamp":1780824797171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /css2?family=Raleway:wght@200;300;400;500;600;700;800\u0026amp;family=Roboto:wght@300;400;500;700;900\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 07 Jun 2026 09:33:17 GMT\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12089,"size_decoded":1359,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"639340ecbe89bfa40436d07e95d5d5c0","sha1":"1fcee10dacb1971ee08f65e69f1a0a15e7c8ea32","sha256":"48b7b8dc47ec45da9abacf0728f246ec8715f4689bd4caae4c2a2555077e1f14","sha512":"7eee30b686c61f845fd5dfcf0bd3ba751062db920e776d3d7e8fcc3ba50e3dbc5a19acc6e3ce36569c0633e9d82b25574bb41315585697c36e0ec7b2487ba1e3","ssdeep":"192:MicTxHyDi1iHT+H1Dl0iaTzH0Dkfi9ToHfDPGi4TtHGD25iDTKH5DpYimTvHYDIp:x+NMzwNYr2tWXCRg3ExsP9","tlshash":"5d42ada10917d404eb476dc663ce3e36ee8e62057047953a9bfd58bcbcaad3613a070d","first_seen":"2025-09-14T16:10:41.877473Z","last_seen":"2026-06-09T07:02:23.504046Z","times_seen":844,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.getgist.com/v1/contacts","fqdn":"data.getgist.com","domain":"getgist.com","tld":"com"},"ip":{"addr":"167.235.218.174","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:24.593Z","timestamp":1780824804593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getgist.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 08:53:21 GMT","end":"Sun, 28 Jun 2026 08:53:20 GMT"},"fingerprint":{"sha1":"8E:A0:3B:A9:0C:7A:04:37:1E:83:22:C1:B4:42:DD:B7:70:76:0A:71","sha256":"5D:C1:6E:B8:A8:D9:8F:7E:2B:02:77:8C:A0:6A:66:10:3A:AB:E8:75:75:DC:0C:9A:1F:C6:6A:1B:D0:F2:D6:D4"}}},"request":{"raw":"POST /v1/contacts HTTP/1.1\r\nHost: data.getgist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 397\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://elitecu.com\r\nvary: Accept, Origin\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-permitted-cross-domain-policies: none\r\naccess-control-max-age: 1728000\r\nx-xss-protection: 1; mode=block\r\nx-request-id: 3e375e656d6296253f4dae7387edd68a\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, OPTIONS\r\nx-download-options: noopen\r\netag: W/\"ae9bad27c89fee6c34d84cc2e19992a3\"\r\nx-frame-options: SAMEORIGIN\r\nx-runtime: 0.130477\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.18\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Phusion Passenger:6.0.18","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1411,"size_decoded":1551,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (1593), with no line terminators","md5":"e784b25e57fc6b1c2fae4c9b573ed21a","sha1":"005cc31536421fa58229b8060f082f6491508724","sha256":"65dbaea17d59c1f7227171feef60b41aeb2d15b83ad4c0e71dab290e2146460f","sha512":"b06e531af6c7c1fdaa4023c4b4603c4ebaae5927e1219cf1f1c54d64487b9fe38d4165f4b5bfa09c2405d555cf6bcaa3e5776cbb3ac665c4a8344525ed1ada84","ssdeep":"","tlshash":"0631120b7c98fdd5c9d05e4e127eae3301e5d36e80de1c784bf8ca191781474aea9e48","first_seen":"2026-06-07T09:33:55.819987Z","last_seen":"2026-06-07T09:33:55.819987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"events.getgist.com/event_data","fqdn":"events.getgist.com","domain":"getgist.com","tld":"com"},"ip":{"addr":"167.235.218.174","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:25.017Z","timestamp":1780824805017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getgist.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 08:53:21 GMT","end":"Sun, 28 Jun 2026 08:53:20 GMT"},"fingerprint":{"sha1":"8E:A0:3B:A9:0C:7A:04:37:1E:83:22:C1:B4:42:DD:B7:70:76:0A:71","sha256":"5D:C1:6E:B8:A8:D9:8F:7E:2B:02:77:8C:A0:6A:66:10:3A:AB:E8:75:75:DC:0C:9A:1F:C6:6A:1B:D0:F2:D6:D4"}}},"request":{"raw":"OPTIONS /event_data HTTP/1.1\r\nHost: events.getgist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://elitecu.com/\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:25 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nvary: Origin\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://elitecu.com\r\naccess-control-allow-headers: content-type\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":451,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"5b3abf9c1aa7556c3a36fea4e695c5d2","sha1":"3fd967d09a748e1f2b26d6fe562e7155aa87e9de","sha256":"98c4922bb641c65c7a30b7bcafdf230b9b00b6693631c56146ab25b2786ee4a3","sha512":"c6294564d963cf1cc2e4d107b6c95cf0b63e2ff01fa1a7b9df8396c5d766e8f921f604db69894e09c4cffa2a218b62c0de3466e3c6d439ceccfb2f899f11ad89","ssdeep":"","tlshash":"5f3000c000000000000000000c00000000000000000000000000000000000000000000","first_seen":"2023-03-07T13:14:00Z","last_seen":"2026-06-10T04:26:44.644853Z","times_seen":20097,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":1,"connect":33,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:23.824Z","timestamp":1780824803824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 10:13:44 GMT\r\nexpires: Mon, 31 May 2027 10:13:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 602379\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (64352), with no line terminators","md5":"40cdbccba835498cf31a3cd73fc98d70","sha1":"969cbb4e4caf05c9af9c8c03832da96e92bbc3fa","sha256":"6084e79ee144ec2b724a0099b976b591815b7ad8a2b04ed3ec04d06cfd528110","sha512":"f35f9909cbff9c012fa140d19192775378171884ca146b892890ed21d2bb2f4e5034563c39315803d782c989755655e79158e9ce1cb988705c11bcb81ef19cfc","ssdeep":"1536:dIhCQ7WW3voZFP/FFLhLvldbdq/EEGpdddgv:d27T3vYFP/FBdt4E5Xfo","tlshash":"485302be58d25ed44888ef08c2acf4f80baf6fc47d4952f4c7a06547da6f240591e39a","first_seen":"2026-05-25T17:48:57.134505Z","last_seen":"2026-06-07T19:16:16.762206Z","times_seen":140,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":53,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/aos.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.991Z","timestamp":1780824796991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/js/aos.js HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4224\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14243,"size_decoded":4472,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14243), with no line terminators","md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-06-10T07:22:12.506278Z","times_seen":9648,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.954Z","timestamp":1780824796954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.2.1.slim.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-10fdd\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nage: 871045\r\nx-served-by: cache-lga21984-LGA, cache-bma-essb1270038-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 225645, 9815\r\nx-timer: S1780824797.035707,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 23856\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":69597,"size_decoded":24496,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32012)","md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-06-10T06:25:03.883102Z","times_seen":79058,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":47,"connect":10,"send":0,"wait":9,"receive":3,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/main.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.000Z","timestamp":1780824797000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/js/main.js HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1451\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5498,"size_decoded":1699,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5554), with no line terminators","md5":"8c331fbea7a1ffc8f4500f4884153425","sha1":"da259ad43743122db1a5600f5e2de6f31301c905","sha256":"487204a082223640d08a04f632fc392de4f59dcb755e7304ce820500c805bc28","sha512":"b97e3d971a5f9fbe8426bbc0a480419d650c195d59c1201397a2846a3e096d4372e9f10e07efc73c66ad959885a9dd0d0e32875ed8f9add066b18d199031d9ca","ssdeep":"48:5Occ4J+AiDi9ooisW9ooiEsF/RPBpLAeBpLyPBqbfH0Yujmwm8Q+K2MNq1xfaYrb:5EB7WRHrLAsLyY9+K/ULfaYrXtpP","tlshash":"c7b1754e7120306b94ff331598df6a44bf372810da00e599f276457dad9880bb9e3a6d","first_seen":"2026-06-03T19:42:33.516981Z","last_seen":"2026-06-07T09:35:33.993145Z","times_seen":4,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1601597111158-2fceff292cdc?w=900\u0026q=80\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.018Z","timestamp":1780824797018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1601597111158-2fceff292cdc?w=900\u0026q=80\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: c2877a81784b679d42a66cf9a203832324883465\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 25 May 2026 11:45:03 GMT\r\nserver: imgix\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nage: 1115300\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230210-FRA, cache-bma-essb1270045-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 30456\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":30456,"size_decoded":31087,"mime_type":"image/avif","magic":"ASCII text, with very long lines (40608), with no line terminators","md5":"7c2e888ff36cb4883bee8784ef31ba4e","sha1":"5a935ef78cd776b2c4ec039e6e85048407f9cd53","sha256":"a81e974e44e8501de4b89e10cc1265027e31702c58ea98d1b07bea939f47c643","sha512":"34a920a586a7446b78ab48c3350117a76a147e0ebf48b819f4c791cafbf9c3d659be56a5c2464c9506f614004334e0bf01920e97c7a9a1335e68f1faaaca690b","ssdeep":"768:XqIgAJOFhUeMFU5O+Ibb1lUBkC90BFxJmuove3PTan4:aI8sjFUkR3AKC98Jmupr1","tlshash":"6e03f1b14f2b761eb3ce8b0c89015d6abde904931b1bfa6ec7c45cf7c53a9134921a14","first_seen":"2026-06-07T09:33:55.82418Z","last_seen":"2026-06-07T09:35:33.971355Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6642,"timings":{"blocked":6622,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:23.822Z","timestamp":1780824803822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 10:13:44 GMT\r\nexpires: Mon, 31 May 2027 10:13:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 602379\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (64352), with no line terminators","md5":"40cdbccba835498cf31a3cd73fc98d70","sha1":"969cbb4e4caf05c9af9c8c03832da96e92bbc3fa","sha256":"6084e79ee144ec2b724a0099b976b591815b7ad8a2b04ed3ec04d06cfd528110","sha512":"f35f9909cbff9c012fa140d19192775378171884ca146b892890ed21d2bb2f4e5034563c39315803d782c989755655e79158e9ce1cb988705c11bcb81ef19cfc","ssdeep":"1536:dIhCQ7WW3voZFP/FFLhLvldbdq/EEGpdddgv:d27T3vYFP/FBdt4E5Xfo","tlshash":"485302be58d25ed44888ef08c2acf4f80baf6fc47d4952f4c7a06547da6f240591e39a","first_seen":"2026-05-25T17:48:57.134505Z","last_seen":"2026-06-07T19:16:16.762206Z","times_seen":140,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":20,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://chat.convertfox.com/socket.io/?EIO=4\u0026transport=websocket","fqdn":"chat.convertfox.com","domain":"convertfox.com","tld":"com"},"ip":{"addr":"167.235.216.1","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:24.909Z","timestamp":1780824804909,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.convertfox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 08:53:57 GMT","end":"Sun, 28 Jun 2026 08:53:56 GMT"},"fingerprint":{"sha1":"27:B0:7B:26:8F:69:87:70:C7:15:CF:EE:C3:0B:3D:A6:11:13:B2:AB","sha256":"FD:10:17:DC:0D:A3:74:18:67:E3:CE:C8:14:ED:F0:85:BD:7B:98:2C:C0:93:69:EF:D7:8F:D5:92:DB:48:42:A8"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: chat.convertfox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://elitecu.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 7Al+i3vy5zPZRn9ozg/+OA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 07 Jun 2026 09:33:25 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: TBx63fIK2Fl9PdafOL+fMO8FdAM=\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":284,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"9d4568c009d203ab10e33ea9953a0264","sha1":"dd29ecf524b030a65261e3059c48ab9e1ecb2585","sha256":"12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126","sha512":"64d24560970ca14d349bea0e7d2526d4754bf3283568ab4dd602bd79eb454dc3657d5bb6f9a30c90ea98d9600ebd0fb45d582f4cae3f8e3c50b0e8fb18059892","ssdeep":"","tlshash":"c710000000000000000000000000000030000000000000000000000000000000000000","first_seen":"2023-03-09T21:44:55Z","last_seen":"2026-06-10T06:59:38.362894Z","times_seen":23721,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":0,"dns":150,"connect":180,"send":0,"wait":36,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/css/responsive.css","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.974Z","timestamp":1780824796974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/css/responsive.css HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3160\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19549,"size_decoded":3480,"mime_type":"text/css","magic":"ASCII text, with very long lines (19549), with no line terminators","md5":"41f6f258e711bd2f007f2fa62ead6217","sha1":"7fde53fc9fcb23d73eff3c8e9a0194e33c0432ff","sha256":"a8b7d048746598b7abfaa4e69644003831806e2a4d87e8a702d49fe949e144b9","sha512":"2c2a6c94e122c0337dfc55ee32f5b8fba21c63722814f8bcfe22b2f8b971e8374cd12660c357d5a017117082161ebd9fd455e79e8bc3aaf66df53855ca76915f","ssdeep":"384:WtWRoiBxVVdRr3Os0djy9ScnTUUHaeXTl0vwzaxEF:lRoiBxLOs0djy9ScnTUgB8w2xm","tlshash":"d292359323160b3de12b4822408d72f43f199a72d7a742fe9d154a2adbcd3b713b4b19","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-09T07:02:23.532248Z","times_seen":861,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1563013544-824ae1b704d3?w=400\u0026q=80\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.019Z","timestamp":1780824797019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1563013544-824ae1b704d3?w=400\u0026q=80\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: e329755efe22b78b5efa09f2ca989e8645564298\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 28 May 2026 04:40:52 GMT\r\nserver: imgix\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nage: 881551\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220143-FRA, cache-bma-essb1270045-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 15146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15146,"size_decoded":15776,"mime_type":"image/avif","magic":"ASCII text, with very long lines (20196), with no line terminators","md5":"dcf38c11965bf1b8008cb2f0bbbb7c2a","sha1":"61c6467c036db89904eb5d31d66ee6636bb7907b","sha256":"ab5051d5c688b9e6a772bce0535e094a1c6c77886602ec3d6ecbd8a347fe872a","sha512":"0b91e9deb65e396959f3e7622504bd01fe91888534e87d9543fe795e6bbb00a29b541c764b56b5c0e3515f494d11423414397bdee45f228726026ee9d8804543","ssdeep":"384:KpQjwBuC5rTfVIpE7t1via36anys5FnSj7W3zgrliR:SIgCCr6A60yuoWcpiR","tlshash":"2992d0728e68e6b6930b874d3334ea5b7d776c072e595056fbc41cc01172b821e04a5e","first_seen":"2026-06-07T09:33:55.825914Z","last_seen":"2026-06-07T09:35:34.013486Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6643,"timings":{"blocked":6622,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:23.814Z","timestamp":1780824803814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 15:22:17 GMT\r\nexpires: Mon, 31 May 2027 15:22:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583866\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (42812), with no line terminators","md5":"7a0df73efc9768c927712eeca272a27a","sha1":"f154d429f5a18ea445d2dd150aec0151d7235979","sha256":"a826e94621bf2537e60ff443c603bed5b9d1f07cd1b47e9cfd20367e8248e854","sha512":"c54258271438b29a0161045b29e7860422f61223d7c8266a7afc5ce9c0a1e51aa8bd3bf76423f47f2a696ce48f179da78d0eb7d6760f8e2bd74128b7cf8adb96","ssdeep":"768:6loEDkBGsgBRU9gXmadSuu6Sl0PGBS/nw+ckarEZ2/W/o7jo3+T+LDdccLL:6CETUKilmMWxcVr8n/o7EuT+LDuS","tlshash":"7613f134c04d204d98adcfab269e54600afab5fb941ec9e2c9c7479a6a035d40b7fc38","first_seen":"2026-05-25T18:37:21.753984Z","last_seen":"2026-06-07T19:06:40.164325Z","times_seen":143,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":20,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.0.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.952Z","timestamp":1780824796952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@4.0.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 21869\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.0.0\r\nx-jsd-version-type: version\r\netag: W/\"235ed-iVElpFIqOxDuetoG7mUDWHy/lcU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230026-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 4365879\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=suvdqhAsAGwqQhojLm4deeBfAviXY5tayFuYO8eKaexsrwBWPofvpybSYIXO4E4FRBurRc9tbZrwfHc%2B5%2FHhtpuQqO6AUNJHccpVKrVnaLYsSJaXMTK2RbNz62rO3kNSN2s%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a07ea7855e1756c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144877,"size_decoded":22969,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65325)","md5":"450fc463b8b1a349df717056fbb3e078","sha1":"895125a4522a3b10ee7ada06ee6503587cbf95c5","sha256":"2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d","sha512":"93bf1ed5f6d8b34f53413a86efd4a925d578c97abc757ea871f3f46f340745e4126c48219d2e8040713605b64a9ecf7ad986aa8102f5ea5ecf9228801d962f5d","ssdeep":"1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q","tlshash":"f6e37667f591322da097ca1851c0bbfa466f8156d6221ffbf4273b604b8a6c70a73d0d","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-06-10T06:26:23.950707Z","times_seen":57355,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":49,"connect":1,"send":0,"wait":7,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.0.0/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.958Z","timestamp":1780824796958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@4.0.0/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 13501\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.0.0\r\nx-jsd-version-type: version\r\netag: W/\"bf30-qVRYMYA7E1nP7tR+O01rrmjkDpk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220109-FRA, cache-bma-essb1270072-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2260776\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DD7ub9jCfV6bQwRFBvU2qW0HQw0QpouuMblZKHXlw51ra6f3cQnjhlquz%2BACptG1LI0NGtcO1%2BH8IecLnFI%2BN5MNYQlBhgFpOZ9lkKzxlOrjjyLZve%2F8iQlOMdkrqSPZLX0%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a07ea786af2656c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48944,"size_decoded":14650,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48664)","md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-06-10T05:35:57.926744Z","times_seen":108154,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":43,"connect":2,"send":0,"wait":7,"receive":0,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/css/dark-theme.css","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.976Z","timestamp":1780824796976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/css/dark-theme.css HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1686\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8642,"size_decoded":2006,"mime_type":"text/css","magic":"ASCII text, with very long lines (8646), with no line terminators","md5":"bce93d4fd6a9b1d4ebbbc1558bda7957","sha1":"7b46b99afa5e6434a53aca381e367868ac271cb4","sha256":"b94a44947799922457806d517be361143b874f85fa80c53db680c1eba8dc24a9","sha512":"0637464d03298ec6320f2f918b788cf183ff5f24df60897a0a1ebe03babd6af2f22ae86bac6737907673fb4e15ac3741aa772e3b9d82858c6733ce5928b49145","ssdeep":"192:UKBCpf6B2nSPehnzhOe9mVxwVdU19HSkiwo7Ux+hvGb3lijIj3Yp2y3yZpN:UnpEeyeY9khoEjIj3Yp932pN","tlshash":"f802be20ed722e3a21138518f488bf981f7e31a0d6067b7df22b15e4de5a1de63b1b45","first_seen":"2026-06-03T19:51:16.624834Z","last_seen":"2026-06-07T09:35:33.979288Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1500648767791-00dcc994a43e?w=100\u0026q=80\u0026auto=format\u0026fit=crop\u0026facepad=3\u0026faces=1","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.028Z","timestamp":1780824797028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1500648767791-00dcc994a43e?w=100\u0026q=80\u0026auto=format\u0026fit=crop\u0026facepad=3\u0026faces=1 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: d637f01c7934feff49240187c407052475cf5eef\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 12 May 2026 17:19:31 GMT\r\nserver: imgix\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nage: 2218432\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230045-FRA, cache-bma-essb1270045-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6483\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6483,"size_decoded":7113,"mime_type":"image/avif","magic":"ASCII text, with very long lines (8646), with no line terminators","md5":"102dff8ee97ffd55d922edffcd827c79","sha1":"d5ce35f38c0cad07dc89049bc5bf0c597a22b0e4","sha256":"fec5c87342828cba8b42ec0b1ae1c40d4ea58eebbad10cc7f394fb852292c46f","sha512":"d0ef28dab8efdad826fb460a974a1eeee187554dd137ae5550008305135489bfa4146f95b8bf790fd249c96af127e0b634076b2d8017e4d57c45cf775c61af7b","ssdeep":"192:v44kszMWptY9LcNWO84ijXmCeKVfndBAFpac1c8W9WxbB:ApQjwBuC5re0gFQcG8W9Wx1","tlshash":"f5029fb34f1bb443be799e0c1914ed851e4cec937f48706e68f029dbe5d8b629c5805a","first_seen":"2026-06-07T09:33:55.829478Z","last_seen":"2026-06-07T09:35:33.986781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6617,"timings":{"blocked":6603,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:23.818Z","timestamp":1780824803818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 15:22:17 GMT\r\nexpires: Mon, 31 May 2027 15:22:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583866\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (42812), with no line terminators","md5":"7a0df73efc9768c927712eeca272a27a","sha1":"f154d429f5a18ea445d2dd150aec0151d7235979","sha256":"a826e94621bf2537e60ff443c603bed5b9d1f07cd1b47e9cfd20367e8248e854","sha512":"c54258271438b29a0161045b29e7860422f61223d7c8266a7afc5ce9c0a1e51aa8bd3bf76423f47f2a696ce48f179da78d0eb7d6760f8e2bd74128b7cf8adb96","ssdeep":"768:6loEDkBGsgBRU9gXmadSuu6Sl0PGBS/nw+ckarEZ2/W/o7jo3+T+LDdccLL:6CETUKilmMWxcVr8n/o7EuT+LDuS","tlshash":"7613f134c04d204d98adcfab269e54600afab5fb941ec9e2c9c7479a6a035d40b7fc38","first_seen":"2026-05-25T18:37:21.753984Z","last_seen":"2026-06-07T19:06:40.164325Z","times_seen":143,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":49,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.getgist.com/audios/newMessage.mp3","fqdn":"cdn.getgist.com","domain":"getgist.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:24.992Z","timestamp":1780824804992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.getgist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 22:06:38 GMT","end":"Sun, 23 Aug 2026 22:06:37 GMT"},"fingerprint":{"sha1":"68:34:A3:C1:D8:B6:A2:AE:E4:20:81:F9:A5:A6:D7:53:CF:BC:CD:C9","sha256":"30:52:03:1B:EB:60:C4:11:5F:3F:93:99:D2:D4:92:70:A0:64:59:CE:6D:BD:E7:2A:61:FA:E3:7D:94:B2:29:DA"}}},"request":{"raw":"GET /audios/newMessage.mp3 HTTP/1.1\r\nHost: cdn.getgist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Sun, 07 Jun 2026 09:33:25 GMT\r\ncontent-type: audio/mp3\r\ncontent-length: 13617\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1321525\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=0\r\netag: \"867ba87f34232acec3114becad115ce3\"\r\nlast-modified: Tue, 03 Mar 2020 08:32:28 GMT\r\nx-amz-id-2: NWe4AcG702/JkIh7W6xrIkGjehLxCTvv70LF3dyuLWdJEJkk3rF9oBilx4KXDNLZo3x3Idi6Xxs=\r\nx-amz-request-id: PT6CRK0TSZJHFWH9\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/26/2025 11:26:18\r\ncdn-edgestorageid: 830\r\ncdn-requestid: db6c873e5d8a18db5b7ec19cc224b044\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-range: bytes 0-13616/13617\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13617,"size_decoded":14335,"mime_type":"audio/mpeg","magic":"ASCII text, with very long lines (18156), with no line terminators","md5":"2fb1dfbea162e0e3c868c69dbf2da48f","sha1":"8ef37486ba01ac348d0ccf25aab999b1682eefe7","sha256":"3f9170463ad29abfd2296049f61ae7bb5f0a7db94a85504a67caa25aef6ce341","sha512":"ebe4d64e6db52cf6fb8c78f764577b1508ec5a8de2f37faa9ab443e47535a87021b724a6ab47555963fa886c5b43a55223cf7bbba52597291b76b2ec885d9218","ssdeep":"192:H42uq0Yhados262qPVyZvdvU5OshT0ETj:YhYha2s26jO1vU5OxQ","tlshash":"cf829f7729f67b77672615f9c12617cb2cb841ef4d635106713231dfb0cad918b450a1","first_seen":"2026-06-07T09:17:10.138073Z","last_seen":"2026-06-07T09:35:33.981335Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":23,"connect":14,"send":0,"wait":3,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.getgist.com/images/patterns/pattern-10.png","fqdn":"cdn.getgist.com","domain":"getgist.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:25.276Z","timestamp":1780824805276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.getgist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 22:06:38 GMT","end":"Sun, 23 Aug 2026 22:06:37 GMT"},"fingerprint":{"sha1":"68:34:A3:C1:D8:B6:A2:AE:E4:20:81:F9:A5:A6:D7:53:CF:BC:CD:C9","sha256":"30:52:03:1B:EB:60:C4:11:5F:3F:93:99:D2:D4:92:70:A0:64:59:CE:6D:BD:E7:2A:61:FA:E3:7D:94:B2:29:DA"}}},"request":{"raw":"GET /images/patterns/pattern-10.png HTTP/1.1\r\nHost: cdn.getgist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 8855\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1321525\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"f9c159fdd21ccb4c175ddf9b3bdb9499\"\r\nlast-modified: Tue, 06 Sep 2022 09:47:55 GMT\r\nx-amz-id-2: mb7JHM9hAovINvRLm30lnDCnDNGPVwlSigXf0DiF1R/zhnuBd0FSzUmkLeKz+Jmu4XOcsBgUdd0=\r\nx-amz-request-id: 530XTS8KVMSWSQ58\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/07/2026 09:33:25\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 17949ff4d36bc92b9b0263d67de227d8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8855,"size_decoded":9886,"mime_type":"image/png","magic":"ASCII text, with very long lines (11808), with no line terminators","md5":"cc4a8edf40359c690f413a7421bb8403","sha1":"0a972ce16e9089d70caa636c0e30a9af2409e70f","sha256":"269f7e2fe80e425be7a139fd56162c246fee4f3f1922f749cd6e11d2ac31a0da","sha512":"cdea23d3e05dcca8f1ba611b5196a6691b53266cb92064c4704639172fdf115afdd5eed1a178343c431aa227cb42f76940c61ccd798bcc836d5f5aaa9b0243f6","ssdeep":"192:CP4eKCK9gCt4vSI8sfzIZzm5NH9LuDS85pQVUlr4QyNWcJSQDRjCC/zO2pWGCQ2s:ZxCK9gCt4vt8GIZSJ9qDr5+VU141WKSs","tlshash":"1d32d1f49a4e642dda3760b29b1119eed6d3901becd3542f23841a93351f0449ddadec","first_seen":"2026-06-07T09:33:55.831244Z","last_seen":"2026-06-07T09:35:33.982044Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1611974789855-9c2a0a7236a3?w=900\u0026q=80\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.013Z","timestamp":1780824797013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1611974789855-9c2a0a7236a3?w=900\u0026q=80\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 49023\r\nx-imgix-id: f3cb61dd13e16127301264cb04831108870f83d9\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 06 May 2026 22:39:39 GMT\r\nserver: imgix\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nage: 2717624\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220084-FRA, cache-bma-essb1270040-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":49023,"size_decoded":49634,"mime_type":"image/avif","magic":"ASCII text, with very long lines (65364), with no line terminators","md5":"b4c9de2c458cf6c7de7f2a95f578d79c","sha1":"7c937a6c566071b83d11ad2e422c4505b52ff9dd","sha256":"5162239ba16173cff289d068bf20b06036afde116620fb9b361c9a08df8e8c4e","sha512":"35114d75e31836e516f545e186bd8db6f9050fcb5b1f3b0f91f63ad9dd1c689976acaefeea5f7c5a4590e895452d9345040398aa127877fa6d0a67de2cac1bfe","ssdeep":"1536:lIbnnByEMs2z4TAnTyPgzMas2GB3C9QmpbYGlPilVu38vWoWnK02yenr:lIbnBFMsaOPgzZs2coVxi3+oW925r","tlshash":"7b5302f18d2fb8da4c3bc5169b7aade2aec40a97e3d57e40280a5d925bcd1074b4cc31","first_seen":"2026-06-07T09:33:55.832321Z","last_seen":"2026-06-07T09:35:34.01249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6885,"timings":{"blocked":6594,"dns":0,"connect":10,"send":0,"wait":13,"receive":11,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gist-widget.b-cdn.net/gist-87f9a16237.min.js","fqdn":"gist-widget.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:24.015Z","timestamp":1780824804015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /gist-87f9a16237.min.js HTTP/1.1\r\nHost: gist-widget.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://elitecu.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:24 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1448292\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: max-age=25600000\r\ncontent-encoding: zstd\r\netag: \"6932a3b9-2e26a\"\r\nlast-modified: Fri, 05 Dec 2025 09:19:53 GMT\r\ncdn-storageserver: DE-1138\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 1131\r\nperma-cache: HIT\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/05/2025 10:13:14\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 22fe67e3babed1143e6ffd2a0c6615e0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":189034,"size_decoded":42505,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"87f9a162375f12feb75de0e6a2935896","sha1":"1cb1081e1ba92f5b642e55dc81554d2b302f29f5","sha256":"88d33be64d02963d4850a3d882ea96fdc5c802546913d34e65c59cd261af3a68","sha512":"6ba55c938957971501e3953e4082ff7aab397a831be8c1b9e24b87228c46186888c01418ac0cb7f99acdcc20db2cbe4e521341407fc0d154d786bbd5f7c27809","ssdeep":"1536:kHE18B9NMgxx5woYkhN3LOXdTvhiFMD45ahTCfhy2LwbEeZ89r5Q4YTEC1hSIA41:JQuse4yOyYaXWd516AX1qtzycH","tlshash":"0d040aa5bda4137707ef41fe24fa5308273d813da981049024a5e8f41afad86739bf9d","first_seen":"2025-12-08T08:52:49.458051Z","last_seen":"2026-06-10T05:52:27.518284Z","times_seen":88,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":6,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/tweenmax.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.999Z","timestamp":1780824796999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/js/tweenmax.min.js HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 41298\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":144259,"size_decoded":41547,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (36174), with CRLF line terminators","md5":"3ebfc60317f7c7439949d5728c2e7905","sha1":"6bdc6e3e92cf447dc3922977d923b2901e36640d","sha256":"db1047e16f9ed072dbc343334fb2dde5f14c486676495bed4e592d75dc73522a","sha512":"dbf9d706a05c8b5215e73702744e075522cd0641e1a9a6566004866681eb6d3e55e5d8cf47829a2c6bb85f9a64d25555efe9b65c8c6614332177753583d142c7","ssdeep":"3072:wAcorGC89zpEosfUfR3Hb9jLYQz3Xk9kqJaR1MfgO4553Njx849GXIFsHtsznbFc:wmGC89zpEosfUfR3Hb2Qz3Xk9kR1Mfth","tlshash":"1fe3c54523d1213e8547f2629d7fcc46b33a8d68a385c85e790c94fc68189748bbeebd","first_seen":"2023-03-10T21:06:35Z","last_seen":"2026-06-09T07:02:23.453023Z","times_seen":935,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/css/flaticon.css","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.962Z","timestamp":1780824796962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/css/flaticon.css HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1149\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5680,"size_decoded":1469,"mime_type":"text/css","magic":"ASCII text, with very long lines (6042), with no line terminators","md5":"9b4bf98d021ca741e249ba9fac0eda54","sha1":"aec45432fbfb5e27c5b34944bba821b151035759","sha256":"91b5db84b18f3d50b388554dfea57f20bf92951cf0cf6f5b2a20ac59924b1fe2","sha512":"241f60e6837b2f612563ffdbe62811b2aa1cb2935a97578a9bb99516e94f25f28d565bae99cd44212ef1d9800814bcf7057922783b53e2e864c8fd60442fa8cf","ssdeep":"48:M8H2HulHMoiJGDn8P1XHmiFy7mTxa12yhHOibdFAacvKDKywTUPBq:JH2H6HMoi55Hu7GxA2CZhCO+","tlshash":"e6c1d9aed06f01d42773ce1fa7686a2ae604f8e0c9c99d05f10e7a4cade1b555385b28","first_seen":"2026-06-03T19:51:16.618505Z","last_seen":"2026-06-07T09:35:33.996693Z","times_seen":3,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/css/odometer.min.css","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.967Z","timestamp":1780824796967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/css/odometer.min.css HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 384\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3123,"size_decoded":703,"mime_type":"text/css","magic":"ASCII text, with very long lines (3125), with no line terminators","md5":"d5b13c8a48f9fc73f87a148a7996f037","sha1":"a1935b7f6222f6ef0fa7077ccf20ccb5ec204c91","sha256":"11dfdc00d40efa8b8c920feca28cba544d8ec7fa5e6e6093a8ed6e1f17d66be2","sha512":"4a469ae996062eb50a9501a440fb7aaf73feec2c71af01c99afb5e72f50c95678b3771287d322dceac119043e1265529de286915757fe410e82cddb3112dfea6","ssdeep":"","tlshash":"8651e2154f91136863367506bac81b60befce9015123e98e731da54bcf43db9e398b0b","first_seen":"2026-06-03T19:42:33.454907Z","last_seen":"2026-06-07T14:53:42.895604Z","times_seen":5,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/css/fancybox.css","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.969Z","timestamp":1780824796969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/css/fancybox.css HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2931\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13039,"size_decoded":3251,"mime_type":"text/css","magic":"ASCII text, with very long lines (13039), with no line terminators","md5":"32ea6a4849f931f79f4ec5816923413f","sha1":"c9fa6fa910b8cd76cf14faf4ff98933c7bae6b45","sha256":"e2d2ac9b36a0e51b450d1f32059ba46fbadcc5ad9d3063abfb562ac714211af5","sha512":"bbcf2ce681b368745003b3e64a8aed9bed1cafb08bce2ddd375ee5e6fea16d68ce5bcb452bcd603a3e0937f41401660ec3703430ada8d2877eb894445c6964b3","ssdeep":"192:yJ6DcJ566s6kC/wEvH30trWc/p2/Pw8RvGgNmUKJwe:yJKQJl/wEvX4jx2/zvG1Nx","tlshash":"db4251336540312c407bcd22d7cfe948e13a9155aa2216fbea4cfd69cbc77e911d62c6","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-09T07:02:23.465412Z","times_seen":897,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gist-widget.b-cdn.net/messenger/bundle-a293f545fc9471eb870b.min.js","fqdn":"gist-widget.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:24.712Z","timestamp":1780824804712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /messenger/bundle-a293f545fc9471eb870b.min.js HTTP/1.1\r\nHost: gist-widget.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:24 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1448292\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: max-age=25600000\r\ncontent-encoding: zstd\r\netag: \"6932a9ab-126df3\"\r\nlast-modified: Fri, 05 Dec 2025 09:45:15 GMT\r\ncdn-storageserver: DE-768\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 1131\r\nperma-cache: HIT\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/05/2025 10:13:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 442306615bb0da8ef6ddc1659202e28e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1207795,"size_decoded":278387,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"f096f47936e84af611bfd04fee8bf485","sha1":"87d332f34350aaced9c8496a6075d51969198d04","sha256":"cf6d416e05f0a82bd8884aba8db630daee4621532fc1f5afb3649f87b006006e","sha512":"c69d0ef608cc3998f3372f87b080a3b0219f5c1773a0c16806c985cdb4b1364944ced275acdf8f08b6fb0f527ce597f8a4f40ebc92ae0d3fcbefb0a39829ea79","ssdeep":"6144:wooA4ycm9JX0DCjrV1W3d1vHT7nHIy3WcN5aFH1VZX0Qg:wooQcm9JX0DC1WPHveSd","tlshash":"90252988f991f0b487a326a541bf1106f33d7959a51ac0a0f72cc8e26fb85dd9173f29","first_seen":"2025-12-08T08:52:49.520295Z","last_seen":"2026-06-10T04:27:39.387652Z","times_seen":51,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.987Z","timestamp":1780824796987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 22162\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78085,"size_decoded":22411,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-06-10T07:22:03.059577Z","times_seen":2213,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1614064641938-3bbee52942c7?w=700\u0026q=80\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.022Z","timestamp":1780824797022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1614064641938-3bbee52942c7?w=700\u0026q=80\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 39952\r\nx-imgix-id: 5ba954ad95ae65bb6ac5db4bc176dd70c456491a\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 21 May 2026 10:40:25 GMT\r\nserver: imgix\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nage: 1464778\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220090-FRA, cache-bma-essb1270040-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":39952,"size_decoded":40563,"mime_type":"image/avif","magic":"ASCII text, with very long lines (53272), with no line terminators","md5":"3b5f4544238e9fb9fe0c8d54f0a6ce23","sha1":"38510a88edcb6a4386153d44fe1d7575bd63a2f0","sha256":"0140624ee532f3e0e3bf61a41397f3d986ce34a056389d8a560200433103423e","sha512":"0f96e05d1cb48a32250d159e82dea58195570576e33ac5b0c88cf87ba5f074ddffb2e51aacd76b9a043455aca40a3bf8c5fcf14a6d5af74f1564af4ae26867e0","ssdeep":"768:jIgHhdYCuS6qWqnS49UGW+BxzqjE8V6OXazx/dH9aerhJVunJMQgKMaIS9u:jIKhdEqWqnIG1BxSV65xldtJkh2","tlshash":"0433f1b5c725eefdc1539b5d4e32b9939d4068c79828b033cfd936c30d592069b8a927","first_seen":"2026-06-07T09:33:55.838764Z","last_seen":"2026-06-07T09:35:34.003947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6882,"timings":{"blocked":6593,"dns":0,"connect":10,"send":0,"wait":13,"receive":10,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1611974789855-9c2a0a7236a3?w=800\u0026q=80\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.030Z","timestamp":1780824797030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1611974789855-9c2a0a7236a3?w=800\u0026q=80\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 8d7a8c9f8d62df365fade00027a7cdd08fafcec8\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 May 2026 11:16:17 GMT\r\nserver: imgix\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nage: 944226\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230216-FRA, cache-bma-essb1270045-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 36319\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36319,"size_decoded":36949,"mime_type":"image/avif","magic":"ASCII text, with very long lines (48428), with no line terminators","md5":"c619cc2045b77797c8b8befa88a246c1","sha1":"b557eb6859cf71dab149671a41cee8712d181c31","sha256":"67fdeeed931754b2a3cdf6b14b20e9095fd1ca4aed2f18854b833f034ecda012","sha512":"b8d2557fe9f866d3b04035fe9f7eb10e37f4f2557ab65bca17e0b67107ce789791f366a697dd6f4e623ab6ff2c72109c2affece56ae3ef258f7050bdaa99c295","ssdeep":"768:CIgUCzZZr9i5ufAnLuPSGpNX0CAa5HOpn0DM6omn9UMScxPpvJK/:CIHCZZ58TsSGX0rpIDFn9UM7fvJK/","tlshash":"2823f2f14221fbda6a7a4b989435ac437d85792f4bc29014a8f09d171311efadc48db9","first_seen":"2026-06-07T09:33:55.839883Z","last_seen":"2026-06-07T09:35:34.000582Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6633,"timings":{"blocked":6604,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.getgist.com/translation_files/en_translation.json","fqdn":"cdn.getgist.com","domain":"getgist.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:25.101Z","timestamp":1780824805101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.getgist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 22:06:38 GMT","end":"Sun, 23 Aug 2026 22:06:37 GMT"},"fingerprint":{"sha1":"68:34:A3:C1:D8:B6:A2:AE:E4:20:81:F9:A5:A6:D7:53:CF:BC:CD:C9","sha256":"30:52:03:1B:EB:60:C4:11:5F:3F:93:99:D2:D4:92:70:A0:64:59:CE:6D:BD:E7:2A:61:FA:E3:7D:94:B2:29:DA"}}},"request":{"raw":"GET /translation_files/en_translation.json HTTP/1.1\r\nHost: cdn.getgist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:25 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1321525\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: \"0106a3103cfaa2baf9d4b03f56b21316\"\r\nlast-modified: Thu, 29 May 2025 13:13:02 GMT\r\nx-amz-id-2: S7zlxpNTrry0RSsgCimhVXfvK26vfQHneozOWGzML7uAe3tfy0O9RKpLuNUeUaYmN74/79UYjq0=\r\nx-amz-request-id: CT4D2JAYR2Y500MT\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/26/2025 11:35:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 69763eec578c70e7d9d9ef35f8585190\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4032,"size_decoded":2892,"mime_type":"text/xml","magic":"Unicode text, UTF-8 text, with very long lines (4469), with no line terminators","md5":"19bc8d058998ece4cf8191af9a5977da","sha1":"7ba1f3e2e521f18c1f3fa9f5c362ea517e66d673","sha256":"afb889b7bb8064d6db7d6c2919cfc9ecc41765e1202278af63cb0178f31daab5","sha512":"a93b8f4d6511d60254a00f0a3e151be7c8bf2610bd8e73a913777a35d980f780743adb7e0a68715702f8505ef9f125b887306b65c3c2ab7eb9cb58808275988d","ssdeep":"96:yVFQ6i54uyZeQv4yyL/4epblIlGIuRQM2dnXkLFpZxeUDaCbvsfKaI00q/UnG:yVp9ujwByL/F4lB0xuhP7F","tlshash":"c991bd9ee858d96bc1931f8b617f7d72a6ae90780bc110ac691cc0594171c3cbbfb786","first_seen":"2026-06-07T09:33:55.79803Z","last_seen":"2026-06-07T09:35:33.996003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1591696205602-2f950c417cb9?w=400\u0026q=80\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.021Z","timestamp":1780824797021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1591696205602-2f950c417cb9?w=400\u0026q=80\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 13044\r\nx-imgix-id: 1f043572a0c001c77fd95b153fbd6e9ea193b3e4\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 05 Jun 2026 11:40:13 GMT\r\nserver: imgix\r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\nage: 165190\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220082-FRA, cache-bma-essb1270040-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13044,"size_decoded":13654,"mime_type":"image/avif","magic":"ASCII text, with very long lines (17392), with no line terminators","md5":"36216ac953b48a605a3f2dba52a6556e","sha1":"306cd284c36b591568556c184cd41e1fa6710b4b","sha256":"6416cd794b5ab47155f2f430bf1b506cc5870120b1c4594e86b05a6cd40a77e3","sha512":"b6f8ef57b542279d853f9278a31be475429594a26df007a3dc96b6075260a26464b497c54a06842ece4a4f4fb5f0d5b831bde26cfbd9b7784dc4d8b71ef40e26","ssdeep":"384:jpQjwBuC5rioH/0WU2bI0teodp2p6rd/6TuFK+VOzomv29LxU14pxY:TIgTH/0VYVGkrd/6Tb+VOzRe9LSl","tlshash":"9c72c0372d0fb1a39733e810986078a21e90b89bbfcca41a1d9869cf5c957616d4c8ed","first_seen":"2026-06-07T09:33:55.841055Z","last_seen":"2026-06-07T09:35:34.006182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6879,"timings":{"blocked":6593,"dns":0,"connect":10,"send":0,"wait":13,"receive":6,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:23.816Z","timestamp":1780824803816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 15:22:17 GMT\r\nexpires: Mon, 31 May 2027 15:22:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583866\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (42812), with no line terminators","md5":"7a0df73efc9768c927712eeca272a27a","sha1":"f154d429f5a18ea445d2dd150aec0151d7235979","sha256":"a826e94621bf2537e60ff443c603bed5b9d1f07cd1b47e9cfd20367e8248e854","sha512":"c54258271438b29a0161045b29e7860422f61223d7c8266a7afc5ce9c0a1e51aa8bd3bf76423f47f2a696ce48f179da78d0eb7d6760f8e2bd74128b7cf8adb96","ssdeep":"768:6loEDkBGsgBRU9gXmadSuu6Sl0PGBS/nw+ckarEZ2/W/o7jo3+T+LDdccLL:6CETUKilmMWxcVr8n/o7EuT+LDuS","tlshash":"7613f134c04d204d98adcfab269e54600afab5fb941ec9e2c9c7479a6a035d40b7fc38","first_seen":"2026-05-25T18:37:21.753984Z","last_seen":"2026-06-07T19:06:40.164325Z","times_seen":143,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":24,"dns":1,"connect":0,"send":0,"wait":45,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:23.821Z","timestamp":1780824803821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 15:22:17 GMT\r\nexpires: Mon, 31 May 2027 15:22:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583866\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (42812), with no line terminators","md5":"7a0df73efc9768c927712eeca272a27a","sha1":"f154d429f5a18ea445d2dd150aec0151d7235979","sha256":"a826e94621bf2537e60ff443c603bed5b9d1f07cd1b47e9cfd20367e8248e854","sha512":"c54258271438b29a0161045b29e7860422f61223d7c8266a7afc5ce9c0a1e51aa8bd3bf76423f47f2a696ce48f179da78d0eb7d6760f8e2bd74128b7cf8adb96","ssdeep":"768:6loEDkBGsgBRU9gXmadSuu6Sl0PGBS/nw+ckarEZ2/W/o7jo3+T+LDdccLL:6CETUKilmMWxcVr8n/o7EuT+LDuS","tlshash":"7613f134c04d204d98adcfab269e54600afab5fb941ec9e2c9c7479a6a035d40b7fc38","first_seen":"2026-05-25T18:37:21.753984Z","last_seen":"2026-06-07T19:06:40.164325Z","times_seen":143,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":49,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/storage/app/public/photos/uwB9eTJfoJMihk9ZS2fWzXehmpO3Inrz2D9X7124.png","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:24.617Z","timestamp":1780824804617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /storage/app/public/photos/uwB9eTJfoJMihk9ZS2fWzXehmpO3Inrz2D9X7124.png HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D; gist_identified_ya99srdd=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 10 May 2026 09:19:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3828\r\ndate: Sun, 07 Jun 2026 09:33:24 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3828,"size_decoded":4111,"mime_type":"image/png","magic":"ASCII text, with very long lines (5106), with no line terminators","md5":"0a7ee501ba2285710c6db725e3b35451","sha1":"c9045b9b6c1b660f9bf5f3670a73f5881d673632","sha256":"68ad3d0d9eef49d0622bad3baa8023239dad994304764e00ac02d46ce09f8e52","sha512":"8ce6d0bdf2ab0736f689d626282607fb8b278f2f750a36898c3014a36fa763a6f0eeeccaaa7207b94fb9d3fd6852b71f77ffc89d73d9c9184adcf4d6d421edc8","ssdeep":"96:7wMSEPXXDvVQFH/C8W+DFHgatfgqn+mLN5RDUbADQx0cJ8poUQPpfSZ7/E:7wiXD2Zq8fDFHgat4ChLN5TMYcpfSa","tlshash":"cdb18d792aea7b136f70c74be21748173ebf2ebe16a51f827d5621073013b413444294","first_seen":"2026-06-07T09:33:55.796057Z","last_seen":"2026-06-07T09:35:33.975957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/css/bootstrap.min.css","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.960Z","timestamp":1780824796960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/css/bootstrap.min.css HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 21197\r\ndate: Sun, 07 Jun 2026 09:33:16 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163864,"size_decoded":21696,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65302), with CRLF line terminators","md5":"d72fb46fdfcc65998d65ce27889e95fd","sha1":"8aa23d660df97231c14b1d247ff2fcbe25c6fc8b","sha256":"ac9e331eebe875842c3e7605970c374521815c4277502bbb1c66dc57aaeb04bf","sha512":"6c297b6d0bf706339fdbde201b8e4281d521991746ec8be2b9d8192662902cecbaf26845340d26eb6fd9ab0260a883286f0a2377e7a8619c714dceba7d7eb3d9","ssdeep":"1536:lt04T8if0W8DsEBpy0cuJBt2rIWE5e0VUpz600I4fT:lt0430VUpz600I4fT","tlshash":"38f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-09T07:02:23.460458Z","times_seen":892,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/css/remixicon.css","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.964Z","timestamp":1780824796964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/css/remixicon.css HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12487\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":96447,"size_decoded":12808,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f1f4e764479f95ac22b0b77cf9920d5b","sha1":"c6185202501a6084f83273ad6fe099641f11a8d9","sha256":"3c8d0233a1e66ba081468ad728a3032f70f10a5a5c890b0f9541722cba8a5bc8","sha512":"9cee62ab5c81be3db0750c47cb20030f7f0b2ec6c95638b8a130ea22548b7c01a10f5835ed9091cc74059dae399782f751cbaf15cce47982daa28f258e58bd84","ssdeep":"1536:Fc+QQP3ILxAju/j/mZjblpU0UvDfFawWgUipUwRET5yZ03fIJ3:H3uxF/KPbdwRDn3","tlshash":"3993f2ede64e44c13732c886db74b78a60e9fab6c5815c95f85b500deec76a102c4ebc","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-09T07:02:23.493483Z","times_seen":802,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/css/owl.carousel.min.css","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.966Z","timestamp":1780824796966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/css/owl.carousel.min.css HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 920\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3357,"size_decoded":1239,"mime_type":"text/css","magic":"ASCII text, with very long lines (3373), with no line terminators","md5":"64e77570237e8978b08f48b046087455","sha1":"21db9dcafe7c1fb8cae2b185b921a579eb46fb9a","sha256":"be86a33d31e095914232a4dba0256014586d1155cc748ae0b5c60d76dca88f97","sha512":"5099d2f6e1d0cbe022d47ce95f3d8fc69ca66e4e61379047cff793b74e17a4a80f313117dd1e2af789a2c545179090bde9a9eb1f1f90b38322e1dbf7c0c9f936","ssdeep":"","tlshash":"b8619ae5314a265f480f831219d81e86393dcc52d8660a5a92bbd318879aa6d213ffcf","first_seen":"2026-06-03T19:51:16.612716Z","last_seen":"2026-06-07T14:53:42.90605Z","times_seen":4,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/owl.carousel.min.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.992Z","timestamp":1780824796992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/js/owl.carousel.min.js HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 11143\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44348,"size_decoded":11392,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997), with CRLF line terminators","md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-06-10T07:14:22.346633Z","times_seen":11898,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/fancybox.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.996Z","timestamp":1780824796996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/js/fancybox.js HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 20810\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68446,"size_decoded":21059,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5903cd4e4bdc6c28ece32e469b887a8a","sha1":"825baf2b74a47eccb7b3f439fe58da710b84a2c4","sha256":"c563abe9b3e16a2461415597e352e306678e093e2078d6f3b9618d902b1ad2c7","sha512":"9562ef7d089c8ebd39a3978cdac3266643a4a184ebb122598b9991b8c9dbbcd61e4aae736bc2e1a84ce6edd97d6f671fb366ebc802b9a8170cc82d510ffbd3b9","ssdeep":"1536:FUtGulsqqQzeFuouppK0WFVnsQrNz7M4HJ3t5oSKN1fQq58cTJ7PBTf:cGasqqQzeFuoubK0WrNz7M4pd8qq58cH","tlshash":"0663f89fb610702582bb0594a30f560ed1377116f10284fa78bcd4d55ae4fc922ebbfa","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-09T07:02:23.496541Z","times_seen":997,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/temp/custom/assets/js/jquery.appear.js","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.998Z","timestamp":1780824796998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.appear.js HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Aug 2023 20:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 497\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1198,"size_decoded":744,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238), with no line terminators","md5":"4e101c8c0f782f553a180dcc54bd8c16","sha1":"d19de7510f33a80b0eadf253abcb4fa8ffe0c2ba","sha256":"df8705c31306690a0e4194459c1470b4004f08e659fa97dcae4fa493060409b5","sha512":"c11c666c6a331a5115871dc785e89c6bdde6203019dae22a5af3c016a1ab19215e5f169a4f85fbd5733ffbfc75216b89f42a255bafcd07a1851f907cc3c60591","ssdeep":"","tlshash":"0f2179ce39c7bc9583f7781c463b69021022d13f124254a659eacd7c75a6cb13d13da4","first_seen":"2026-06-03T19:42:33.493129Z","last_seen":"2026-06-07T14:53:42.907569Z","times_seen":5,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/popper.js@1.12.9/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:16.956Z","timestamp":1780824796956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/popper.js@1.12.9/dist/umd/popper.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://elitecu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:33:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 7053\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.12.9\r\nx-jsd-version-type: version\r\netag: W/\"4af4-w7l3qkuN+2nWUeBwFQMdOF3tlks\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230021-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1649855\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TpNa706O8U31yk%2BaI2JVS3N8CKmT1ex4gfeif12CgqAAMJ%2FdAxVXoF0c05tpN2bePjNTdw9uWM99ph6NJN7hbOmGkficyJtzBfXBmjEZJtwVwR2jU08RlD7PDdRCLmQyl8o%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a07ea7aeb9bb56c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19188,"size_decoded":8166,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19015)","md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-06-10T06:29:55.755589Z","times_seen":108770,"resource_available":true,"data":null}},"time_used":6687,"timings":{"blocked":-1,"dns":46,"connect":1,"send":0,"wait":8,"receive":0,"ssl":6631},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elitecu.com/storage/app/public/photos/jvP0x2k8Gbne97uOWKofUne0AvaOSYEgXVO1K6h5.png","fqdn":"elitecu.com","domain":"elitecu.com","tld":"com"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:17.011Z","timestamp":1780824797011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elitecu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 07:55:58 GMT","end":"Sat, 08 Aug 2026 07:55:57 GMT"},"fingerprint":{"sha1":"16:51:AC:38:59:8F:8A:90:4B:EB:39:A2:ED:BA:1F:01:C5:62:C6:70","sha256":"6C:99:19:14:13:B4:AD:33:E9:7D:56:75:86:B6:53:89:53:7F:30:70:56:37:A7:75:79:B8:74:BC:79:87:54:AE"}}},"request":{"raw":"GET /storage/app/public/photos/jvP0x2k8Gbne97uOWKofUne0AvaOSYEgXVO1K6h5.png HTTP/1.1\r\nHost: elitecu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InRWek5yeUlId0d1YUhhUitqOXJLdVE9PSIsInZhbHVlIjoiNTIyZERvWmhsZGhCSmpWcDI2dmZZc2Z2K3k2eUtyelZIdnNZWk5XdW1UZTBJZDFGTCsyU1hONWhFMTJVR2ttU1lVTW9GeG0wbjAvdjZ0R2liRHdUL2QwZU1TNUVPZEpKN3B2NnB4RzNndWtyOTlMcDR3VkJrYm9TZ2JjMi9KZjIiLCJtYWMiOiJjMDM1ZDg0OTYzMzk4ZjFlNzUwN2YzNWUyNDFmYWZjMDEyMTk1Y2I2YzA0NmE2YjEwZDVmYjM2MDMyZGE3MDc1IiwidGFnIjoiIn0%3D; ecu_session=eyJpdiI6ImFpVUpMN2RuaUIzcXNLVW1CaEN5MlE9PSIsInZhbHVlIjoiVzB6SkJDWGwvRTdRRGNQVStWdFdEK3BIUzJZUldZdHNCaCtra3kvK0Rrd3hobUw2VWYrb3VBU2VPQlBiNEhpdUpjOHZyYXNQZHdvdkplY3pTcitCalR5YWU5WTY4dUVBeEZIbmFadVVRQ1lnY3JVNno3a3VIUWpoTkdtRVIyVXoiLCJtYWMiOiJlNmI2NjYyNmY0YzdlM2M2YjQ1ZjhmNDFmNzA3Y2Q5ZjUwMjA3Mjk3MWM2NTAxYWU5ZDI0YjMwNTU1NmFlNTQ4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:33:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 10 May 2026 09:19:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37056\r\ndate: Sun, 07 Jun 2026 09:33:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37056,"size_decoded":37340,"mime_type":"image/png","magic":"ASCII text, with very long lines (49408), with no line terminators","md5":"7e7210d395110c1c05682afc49d4bf2a","sha1":"9c32d5f7fab7be0ef007dd27e2c6d7f298f24458","sha256":"781afca0fb686a203e97a2fb23e444e711a498216d7102faddd194e7745a66bd","sha512":"3355976661de4e0ca0b608dad54763471ac1ed325ff578b255fecccd2a06ab5971088131c451dd1a49f28b322a70794ef2df5a363d1e539ab58f2b14a390f339","ssdeep":"768:GTzjk6O2MF4syzCsx39K65/KzxnowUP1m5mbhll2Ro6ZDQS8y2LG3HaLkouwI:GTO/4dCicowEm6l2RoUDoyj3HaLAwI","tlshash":"4e2301607ffdb145c152a35958bb4c318b2d6e02993008482e9ed7fb716fba0d53e8b9","first_seen":"2026-06-07T09:33:55.847225Z","last_seen":"2026-06-07T09:35:33.998034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"elitecu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elitecu.com/","date":"2026-06-07T09:33:23.801Z","timestamp":1780824803801,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://elitecu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T07:14:22.229857Z","times_seen":16290217,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}